Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e32392e302f32342d3234203d3e20323638373839.roa
File:                     34352e3137332e32392e302f32342d3234203d3e20323638373839.roa (raw, json)
Hash identifier:          YP4RzHVvrJBHpCMWHOgPh2tGk7H08Tbt0HJiEQ9QhA8=
Subject key identifier:   85:58:49:3F:BC:7C:F6:BE:3F:6D:07:43:A5:81:DB:F4:BB:90:02:E7
Certificate issuer:       /CN=C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8
Certificate serial:       207D37F916C37A1C6737295B0826DC3B1906F84F
Authority key identifier: C6:E3:4A:58:4C:F6:8A:FD:DB:E3:B5:EE:7F:24:C9:0C:BB:D6:2E:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e32392e302f32342d3234203d3e20323638373839.roa
Signing time:             Thu 06 Mar 2025 12:33:17 +0000
ROA not before:           Thu 06 Mar 2025 12:28:17 +0000
ROA not after:            Thu 05 Mar 2026 12:33:17 +0000
asID:                     268789
IP address blocks:        45.173.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.crl
                          rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 02:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7d:37:f9:16:c3:7a:1c:67:37:29:5b:08:26:dc:3b:19:06:f8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8
        Validity
            Not Before: Mar  6 12:28:17 2025 GMT
            Not After : Mar  5 12:33:17 2026 GMT
        Subject: CN=8558493FBC7CF6BE3F6D0743A581DBF4BB9002E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:3b:8a:6a:51:c1:e4:01:38:a4:a7:f6:ec:
                    0c:7a:ac:02:a3:83:4f:33:9d:dc:ef:1e:f3:00:ef:
                    46:6f:a2:39:bb:31:75:08:85:a5:da:32:af:3c:c0:
                    61:ee:a5:da:b1:0e:01:f9:dc:2c:83:b6:a6:c1:eb:
                    74:7b:1d:6d:87:93:ca:f6:a1:f7:dc:70:64:c9:53:
                    9c:f3:3c:13:2b:8f:45:a0:5f:b1:97:a1:49:ca:15:
                    c7:56:7d:11:b9:bb:6b:08:2d:39:f2:4f:1a:ef:53:
                    e4:fa:8d:d7:10:8c:b7:51:2b:0d:bc:d7:9c:5c:75:
                    21:fd:c7:4c:4b:a4:3c:17:d3:0f:1d:bf:b8:e1:28:
                    c9:a6:d8:23:d0:b4:e6:fb:20:d6:b5:7e:d7:fc:6f:
                    04:1e:f6:91:5c:41:9b:65:52:8d:91:4d:2e:cf:6e:
                    6c:63:01:b2:05:be:44:af:cd:24:c3:8f:a3:89:1e:
                    3a:e0:76:0a:bf:56:a2:9c:19:2e:2e:69:70:9b:29:
                    ad:b3:50:c7:12:8f:0a:af:e5:a6:e8:86:d1:a4:8a:
                    2d:2a:f1:97:64:98:2a:74:c5:14:df:bf:08:40:95:
                    16:e2:5e:82:a3:bd:f2:f3:7f:66:dd:b9:bd:d3:cf:
                    b0:6e:d5:c1:da:1d:3b:c5:9a:53:27:d2:d4:f4:bb:
                    de:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:58:49:3F:BC:7C:F6:BE:3F:6D:07:43:A5:81:DB:F4:BB:90:02:E7
            X509v3 Authority Key Identifier:
                keyid:C6:E3:4A:58:4C:F6:8A:FD:DB:E3:B5:EE:7F:24:C9:0C:BB:D6:2E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e32392e302f32342d3234203d3e20323638373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:5f:89:76:7d:86:9d:42:eb:6e:d8:f0:13:73:c3:9b:32:d4:
         1a:63:ef:bc:2d:f4:b2:30:8d:6b:20:df:d3:dc:cf:76:67:04:
         a8:74:64:be:3d:90:4a:2a:c1:43:ac:f8:9f:55:79:97:91:45:
         57:2c:e2:ab:22:7c:2e:1a:a8:81:3c:d5:4b:b4:4b:df:41:7f:
         29:cd:e8:2d:5c:0e:d9:65:1c:a8:44:da:2a:65:c6:fe:24:e9:
         19:2e:95:fe:e5:ef:c4:f2:09:e9:f2:43:a8:49:83:e5:29:80:
         00:e1:7c:df:35:5c:f1:48:e2:e5:18:26:6a:af:a2:c5:91:77:
         64:69:8a:ad:1a:02:65:55:c0:2c:79:b1:23:1e:d8:ac:ad:0f:
         7d:af:44:b9:14:e1:ee:e0:f3:57:d5:46:5e:54:32:b6:05:7d:
         5a:2b:39:20:e2:17:cd:30:b4:67:e4:ab:73:18:8b:2c:15:5e:
         c8:46:16:23:69:00:d8:dc:22:d1:69:ce:39:6b:70:f3:78:de:
         de:e9:d2:a1:8a:b6:ac:b9:4f:2b:70:6e:d5:a8:98:93:ae:d3:
         2e:9c:26:a3:06:7e:5f:51:e4:24:48:08:18:b5:23:f5:fa:74:
         82:9d:53:3a:0f:bf:b0:cd:2f:24:29:b9:a8:09:9e:50:1a:1f:
         81:80:39:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:06:31 2025 by rpki-client