Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e33302e302f32332d3233203d3e20323638373839.roa
File:                     34352e3137332e33302e302f32332d3233203d3e20323638373839.roa (raw, json)
Hash identifier:          Tr9eP5P2RzJIaauYafE9agCn3/hpVW1Rx7W8g1v+g1Y=
Subject key identifier:   F0:AD:B8:7D:E9:E0:1F:F2:67:A6:D5:69:A5:67:F5:D7:68:30:3E:16
Certificate issuer:       /CN=C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8
Certificate serial:       02746D43098FB06242CB37242A9911C78CB9F84D
Authority key identifier: C6:E3:4A:58:4C:F6:8A:FD:DB:E3:B5:EE:7F:24:C9:0C:BB:D6:2E:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e33302e302f32332d3233203d3e20323638373839.roa
Signing time:             Thu 06 Mar 2025 12:33:17 +0000
ROA not before:           Thu 06 Mar 2025 12:28:17 +0000
ROA not after:            Thu 05 Mar 2026 12:33:17 +0000
asID:                     268789
IP address blocks:        45.173.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.crl
                          rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 08:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:74:6d:43:09:8f:b0:62:42:cb:37:24:2a:99:11:c7:8c:b9:f8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8
        Validity
            Not Before: Mar  6 12:28:17 2025 GMT
            Not After : Mar  5 12:33:17 2026 GMT
        Subject: CN=F0ADB87DE9E01FF267A6D569A567F5D768303E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:fe:20:6e:12:25:27:db:9b:b8:2c:28:62:
                    83:5c:aa:f2:88:79:02:01:50:9e:f9:7c:9d:01:aa:
                    be:c0:1c:ab:d8:d3:de:a6:57:55:9b:a3:36:8c:25:
                    2e:c0:17:12:c9:c5:b7:f2:2a:2c:41:e6:7b:72:17:
                    7b:87:08:5c:e1:59:a8:cf:54:07:12:19:fa:0e:12:
                    ee:4d:d4:f9:57:7c:df:5c:01:b3:2d:18:6c:d3:5b:
                    cd:34:36:a7:fe:34:ef:eb:7d:88:19:ae:40:45:f5:
                    66:5d:85:f1:85:16:1c:c8:dc:36:2c:8c:d6:a5:98:
                    3d:80:54:e3:72:24:26:25:92:86:39:77:59:90:1e:
                    bd:c3:a6:f9:64:21:1f:1c:d5:26:c1:87:9f:8e:b5:
                    ee:b1:4b:4e:e4:75:db:bd:51:ec:25:49:70:97:81:
                    8f:07:64:04:ea:09:d4:a1:1a:51:21:cf:00:19:58:
                    b3:52:40:09:f2:7e:61:3d:9b:12:db:b4:b8:f3:00:
                    77:7c:34:92:15:bc:4f:1b:da:c5:2d:cf:b7:e7:af:
                    7e:d4:3e:a7:af:12:78:10:5f:8c:d1:5e:66:db:d9:
                    24:20:21:fe:3f:9a:03:bc:a0:e6:59:20:13:d0:3f:
                    be:7a:bf:c0:4d:8c:c5:1c:f8:f0:9d:62:5d:90:97:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AD:B8:7D:E9:E0:1F:F2:67:A6:D5:69:A5:67:F5:D7:68:30:3E:16
            X509v3 Authority Key Identifier:
                keyid:C6:E3:4A:58:4C:F6:8A:FD:DB:E3:B5:EE:7F:24:C9:0C:BB:D6:2E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e33302e302f32332d3233203d3e20323638373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:9b:89:31:06:c5:8a:64:95:4e:bc:24:0c:a6:4e:53:cb:25:
         42:24:b6:cf:79:1e:00:3a:da:36:03:49:2b:75:af:59:91:01:
         f8:60:6d:8f:53:96:6c:fe:44:74:d3:ac:3e:e7:09:f7:b9:f3:
         18:dc:06:f5:ae:a6:bc:fe:18:eb:50:a0:2b:58:11:a4:35:81:
         4f:3d:12:8a:26:dc:e2:99:ea:98:a7:55:b6:c8:ce:d8:70:05:
         29:e4:5c:9e:99:0c:b5:f6:89:d2:23:cd:38:ac:aa:d3:fb:e2:
         1a:76:c1:73:5e:19:9e:51:a8:69:e8:13:30:97:8c:7c:78:07:
         b4:30:b2:98:a0:44:2b:95:06:13:25:76:e1:bf:9d:6f:ee:c8:
         b9:e7:f8:2b:22:32:95:0d:bf:f8:53:f5:96:cf:92:ce:8b:ef:
         c2:fd:53:ac:77:1e:0b:c3:84:47:b8:26:dd:da:98:6e:b5:ad:
         44:be:52:02:fe:57:49:c4:78:a9:c8:f1:c3:74:ba:80:f9:70:
         ee:2f:3c:bc:3e:a9:11:b7:2e:c9:9a:51:0f:8b:4e:da:99:2f:
         2b:00:e7:5e:85:f2:47:bc:a6:37:9b:e6:73:4b:9a:01:f7:2c:
         7a:b3:b1:ad:0c:63:fa:76:ab:65:5e:56:5c:5c:69:55:05:f8:
         19:54:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:48:05 2025 by rpki-client