Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          ajwJ4dWf3f31SoRb/aRaBMUQJ6NFSmUqP1JRxXOuRYY=
Subject key identifier:   AA:B0:E5:DF:A1:BB:AB:35:20:FB:08:28:B7:90:9E:0C:63:B2:45:1F
Certificate issuer:       /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
Certificate serial:       4DDF5B73DA4828A6F5D4A7FCDC04B67FD85ACED1
Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa
Signing time:             Fri 16 May 2025 13:05:02 +0000
ROA not before:           Fri 16 May 2025 13:00:02 +0000
ROA not after:            Fri 15 May 2026 13:05:02 +0000
asID:                     268296
IP address blocks:        45.237.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 04:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:df:5b:73:da:48:28:a6:f5:d4:a7:fc:dc:04:b6:7f:d8:5a:ce:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
        Validity
            Not Before: May 16 13:00:02 2025 GMT
            Not After : May 15 13:05:02 2026 GMT
        Subject: CN=AAB0E5DFA1BBAB3520FB0828B7909E0C63B2451F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:27:db:92:1a:ca:eb:2f:8e:57:65:dc:82:
                    1a:38:9c:fe:37:46:53:0b:34:42:b6:80:1d:e4:f1:
                    cf:bc:86:09:89:90:37:67:d5:ff:59:ec:25:c3:b6:
                    c3:c7:aa:f3:cf:95:23:63:63:af:00:3f:a7:02:b1:
                    fe:f5:85:72:97:5f:2e:b9:57:73:4c:00:69:84:03:
                    f4:07:43:d5:34:63:41:a8:12:2c:8e:f5:c0:a9:4d:
                    d1:a0:23:2a:1a:8d:69:14:a8:e6:bf:f3:f0:1e:3e:
                    c1:88:ce:1e:3c:95:c9:60:0e:56:8f:99:10:a4:60:
                    49:26:cf:f7:26:46:88:1c:09:63:61:dc:94:34:d6:
                    5f:77:05:1b:07:ef:40:44:b6:82:8d:d6:27:3f:29:
                    e0:32:46:4b:b5:6c:e2:82:04:8e:36:f7:4e:9b:44:
                    f2:c7:50:7b:37:46:62:af:b6:ae:76:91:b8:7f:d3:
                    0b:e5:ff:e3:bb:6d:00:43:6f:58:9d:78:50:e8:ae:
                    a3:9e:39:64:74:4e:47:0e:6d:33:92:65:ba:04:04:
                    60:86:da:35:40:e1:41:0a:a1:c7:2c:db:19:1a:d2:
                    4b:20:c6:17:d8:77:3c:96:2d:ce:29:0f:b6:7c:62:
                    1b:ee:e1:9f:0c:ae:4f:f2:a3:5e:7e:89:df:c0:5b:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B0:E5:DF:A1:BB:AB:35:20:FB:08:28:B7:90:9E:0C:63:B2:45:1F
            X509v3 Authority Key Identifier:
                keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:b2:7e:7c:bb:14:69:b6:3c:1c:d2:92:00:53:c3:cd:74:bb:
         85:54:19:90:f9:89:a4:64:36:75:c0:42:94:e8:7a:d8:81:9d:
         cc:73:1d:6f:44:eb:df:af:63:8d:8e:ca:a3:1f:af:66:da:61:
         9a:ea:5a:87:9b:df:c9:0a:ec:d5:e1:48:2b:55:c2:6d:41:42:
         5a:ff:ae:62:14:10:bb:ae:40:2f:af:f3:a1:c5:2d:f1:45:e0:
         b9:e5:fb:93:6c:1c:f8:c5:95:d9:6c:d5:73:ae:79:c8:92:30:
         56:a6:ad:9a:92:54:a7:7c:01:fe:ab:92:63:df:0e:e8:fc:a6:
         f5:0d:84:ac:bc:74:85:c3:54:23:3d:ee:e7:c7:14:52:0a:44:
         40:d8:88:ef:2d:21:4a:65:82:68:ae:d6:65:d2:9e:d7:14:1b:
         17:54:a1:23:cc:da:87:f8:14:2b:bc:5e:a6:c9:41:4f:09:65:
         43:ca:4f:56:48:30:db:c1:27:d2:af:d1:d4:ac:d9:6b:c5:8c:
         53:a4:e8:f8:18:b2:09:d5:e9:2b:9a:98:88:7b:c8:8a:24:ad:
         47:78:96:f9:76:3b:6a:65:c3:36:fc:44:c4:d7:8e:fd:84:c5:
         a8:0e:16:fc:c2:8a:52:4d:05:7f:6a:d8:cc:32:67:41:d7:d7:
         04:17:9c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:59:04 2025 by rpki-client