Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32342d3332203d3e20323638373836.roa
File:                     34352e3137322e3136382e302f32342d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          JKF9qqL9OLEx4tA5lpPLGjc+qgeQZdVlysyVtshK1+8=
Subject key identifier:   3A:58:4F:9B:35:8A:F8:8D:DA:80:9F:C5:22:1C:BF:F3:C1:F3:FD:BF
Certificate issuer:       /CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
Certificate serial:       575120A4592B5B404E0EBA0BB5007C8F4959F21B
Authority key identifier: 0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32342d3332203d3e20323638373836.roa
Signing time:             Thu 03 Apr 2025 14:36:47 +0000
ROA not before:           Thu 03 Apr 2025 14:31:47 +0000
ROA not after:            Thu 02 Apr 2026 14:36:47 +0000
asID:                     268786
IP address blocks:        45.172.168.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 12:33:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:51:20:a4:59:2b:5b:40:4e:0e:ba:0b:b5:00:7c:8f:49:59:f2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
        Validity
            Not Before: Apr  3 14:31:47 2025 GMT
            Not After : Apr  2 14:36:47 2026 GMT
        Subject: CN=3A584F9B358AF88DDA809FC5221CBFF3C1F3FDBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:9c:6f:5e:ec:b1:4d:72:3e:f5:91:b0:c4:
                    37:55:69:90:0f:1f:46:d4:95:f8:ce:39:38:d9:74:
                    3f:b8:98:7f:cc:b3:99:30:7b:85:61:e7:2a:32:bb:
                    71:85:df:4c:8d:10:cb:86:94:06:f4:94:8b:ea:df:
                    31:3b:38:3b:2e:22:af:02:6d:bf:8a:25:a3:3e:83:
                    77:55:f6:29:a2:35:ac:0c:2d:72:16:59:56:7b:7e:
                    c8:9c:fd:ec:bd:91:97:58:22:29:62:5e:43:49:2f:
                    b6:56:a0:32:86:b5:90:0e:9e:1b:8e:12:52:a9:ce:
                    0f:b6:2a:6c:ea:b9:4a:1f:70:74:a3:59:ef:bd:07:
                    9d:ef:2f:7a:00:d2:a5:41:a0:75:f5:ba:bc:25:16:
                    16:1f:34:05:4f:96:d0:4e:dc:92:06:e8:99:bf:38:
                    76:1b:3f:c8:5d:65:bf:82:28:a5:f6:99:d1:af:82:
                    c7:7d:cb:2f:78:0d:3b:d1:74:52:ba:d8:b2:70:d7:
                    93:e8:5b:81:e5:79:cc:16:33:1a:a8:e1:f4:2e:c6:
                    d7:34:fa:bf:a9:df:06:b9:04:38:ba:cd:5f:3e:7c:
                    5f:97:81:af:80:bd:eb:c7:40:53:e3:4f:b1:a8:13:
                    62:d6:85:ca:3c:0c:6f:7c:6d:53:07:67:7d:1a:02:
                    36:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:58:4F:9B:35:8A:F8:8D:DA:80:9F:C5:22:1C:BF:F3:C1:F3:FD:BF
            X509v3 Authority Key Identifier:
                keyid:0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32342d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:e6:69:ab:7c:33:9c:25:56:42:4b:50:95:f0:b5:5a:14:
         a6:33:c5:a7:8e:52:c7:fd:0b:ff:ca:54:a2:13:89:28:6c:29:
         ef:e4:fa:44:58:ba:e0:ec:3d:5c:03:cd:62:4e:1e:cd:33:f3:
         5d:32:bf:f4:66:bf:f6:44:64:aa:e7:42:9a:ba:33:6f:da:12:
         f9:c3:f5:04:56:d6:c0:34:cc:84:a8:42:82:92:5d:46:cb:ba:
         30:4d:4e:2c:e5:d6:1c:e6:6a:d9:aa:6a:e6:b9:7b:d6:ee:3c:
         9d:a0:53:ae:3a:84:d9:9f:ef:0c:a2:04:f3:e3:98:7d:c5:46:
         80:95:dd:e8:ab:f6:7a:4f:97:60:1e:67:c1:f5:60:1c:f5:8f:
         8c:37:ad:af:e9:7d:b7:42:e7:5c:10:c7:0c:88:30:7b:a8:71:
         02:c8:dc:b8:f8:de:64:7d:4b:4f:61:0a:31:b3:4c:43:3b:a9:
         62:19:42:8d:e9:3a:54:a6:67:4b:37:76:3f:9d:d7:c6:21:bd:
         0a:0b:86:68:f4:ca:67:27:96:c2:30:48:15:a3:02:04:c4:1f:
         8a:c7:b7:7a:d1:a5:55:ec:da:75:a5:06:5f:18:63:7d:1e:df:
         31:f5:bd:0c:e6:57:85:e1:70:75:0e:c4:54:c7:c3:b1:5f:0f:
         1f:13:91:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:58:35 2025 by rpki-client