Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/34352e3136332e34302e302f32322d3234203d3e20323638353438.roa
File:                     34352e3136332e34302e302f32322d3234203d3e20323638353438.roa (raw, json)
Hash identifier:          Ag8Qawc+HefFvTJ51kVoGMXFFO7LUH/j18YWBWmL8nE=
Subject key identifier:   7A:5B:D7:02:55:AA:26:56:E5:C1:73:BB:F2:31:F2:A4:67:44:35:09
Certificate issuer:       /CN=127D7DD3C0CC297D00206CF235FF13CEF978A5E5
Certificate serial:       70DC9EC7A4CA9FD68A565C3276298100348A9C37
Authority key identifier: 12:7D:7D:D3:C0:CC:29:7D:00:20:6C:F2:35:FF:13:CE:F9:78:A5:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/34352e3136332e34302e302f32322d3234203d3e20323638353438.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     268548
IP address blocks:        45.163.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.crl
                          rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:dc:9e:c7:a4:ca:9f:d6:8a:56:5c:32:76:29:81:00:34:8a:9c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127D7DD3C0CC297D00206CF235FF13CEF978A5E5
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:c3:dc:58:c7:4f:56:85:c7:a7:a7:99:35:
                    26:37:6b:5b:c8:61:01:27:7b:47:bb:15:f7:da:85:
                    35:25:8a:36:fe:09:fd:56:d9:85:78:c8:48:af:86:
                    79:0c:d6:f0:22:95:04:43:c3:47:c1:49:1e:0b:15:
                    74:5d:51:33:b7:12:fa:ff:56:9d:1a:48:08:70:82:
                    5b:9c:08:5d:f6:dd:a6:bd:29:54:cf:49:9e:f2:65:
                    25:6f:93:62:7e:81:81:e5:7f:4c:88:e0:51:4d:91:
                    78:f2:67:7a:8c:58:01:2b:7d:b3:90:ce:37:48:7d:
                    c6:38:e3:46:2f:81:c7:bd:03:bd:e9:ce:aa:91:6f:
                    cc:4b:d9:28:a8:b2:f3:c1:f8:d9:ce:43:26:f1:6f:
                    3a:e0:06:15:0f:1a:7e:cc:af:c7:de:22:e9:e5:58:
                    dc:87:58:db:a0:e3:ce:05:6d:9c:58:9c:8c:78:b1:
                    c2:2b:e0:51:63:ac:27:46:2f:7c:b7:ac:f9:ef:b1:
                    4c:16:27:29:9a:c2:ab:da:27:2d:01:a6:ee:cf:3b:
                    9a:58:b9:0d:9b:96:e6:a5:71:d6:3d:dc:9d:b8:22:
                    b5:5c:2b:9b:c4:72:30:b3:3a:de:26:ca:d4:45:0d:
                    99:f5:4a:99:92:36:7f:fd:94:7d:e3:7c:f0:53:e8:
                    9d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5B:D7:02:55:AA:26:56:E5:C1:73:BB:F2:31:F2:A4:67:44:35:09
            X509v3 Authority Key Identifier:
                keyid:12:7D:7D:D3:C0:CC:29:7D:00:20:6C:F2:35:FF:13:CE:F9:78:A5:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/34352e3136332e34302e302f32322d3234203d3e20323638353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:a9:a2:17:5a:9a:31:0a:93:db:97:46:ff:8a:9e:83:f5:41:
         24:aa:98:92:33:83:40:58:fe:fc:9a:bf:c8:6f:54:36:38:d5:
         f2:60:d0:87:1a:5b:f2:a9:33:4e:68:83:66:6c:a9:5b:a2:22:
         05:3a:1f:f1:53:3c:fc:eb:31:b8:27:27:24:8a:2e:97:91:db:
         a1:55:98:85:d1:2d:38:05:a6:79:93:11:6b:28:8b:5e:d3:36:
         54:af:14:60:9d:c4:fc:50:ba:77:21:b9:4b:fe:67:f7:02:45:
         1f:80:0e:14:76:06:a8:91:34:b7:9b:54:7f:c2:a9:f4:b0:b1:
         e3:28:3c:d9:ec:bb:a7:72:70:a9:34:74:d7:41:b1:bc:ff:26:
         0c:2f:06:67:e5:ca:a1:d9:b7:a9:87:a6:78:10:50:41:6d:e2:
         9d:b2:07:30:25:eb:da:f1:4d:b8:cc:9d:81:c6:35:b3:2b:a5:
         78:b6:e9:70:a1:9b:a0:e2:b1:d9:48:5a:36:37:2a:82:0b:53:
         16:66:4c:57:b5:d7:b0:be:42:2c:5e:5d:e3:19:67:20:32:bd:
         3b:45:2f:01:0a:b0:0f:96:a5:79:09:57:dc:28:a5:25:18:10:
         d7:21:d3:75:e2:ca:6b:d3:35:77:8b:0c:85:7f:bb:d5:12:68:
         b0:9b:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:45:48 2025 by rpki-client