Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/34352e3137342e3133322e302f32322d3332203d3e203238333239.roa
File:                     34352e3137342e3133322e302f32322d3332203d3e203238333239.roa (raw, json)
Hash identifier:          9K334Lx1Uxvwy21mg246OT4FX8ayRd8aMHaXkYw3Sz4=
Subject key identifier:   AF:77:CE:FC:A2:25:58:0A:B6:3E:25:B7:0A:E5:AE:73:3C:0A:88:B4
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       50C5DC034140671D68D2336A926EF6B0F6C1A9FE
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/34352e3137342e3133322e302f32322d3332203d3e203238333239.roa
Signing time:             Fri 07 Mar 2025 19:14:55 +0000
ROA not before:           Fri 07 Mar 2025 19:09:55 +0000
ROA not after:            Fri 06 Mar 2026 19:14:55 +0000
asID:                     28329
IP address blocks:        45.174.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c5:dc:03:41:40:67:1d:68:d2:33:6a:92:6e:f6:b0:f6:c1:a9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:09:55 2025 GMT
            Not After : Mar  6 19:14:55 2026 GMT
        Subject: CN=AF77CEFCA225580AB63E25B70AE5AE733C0A88B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:ee:68:78:8a:a2:bc:87:34:7a:36:43:99:
                    f7:22:4c:79:c6:af:52:4c:a5:aa:c1:62:6d:c8:f3:
                    be:2a:4a:73:64:12:a2:d9:98:c8:25:24:48:8d:16:
                    cc:b0:2f:44:44:6e:42:3b:2b:f3:5c:81:ab:ec:d9:
                    eb:84:b4:b3:4c:51:31:51:1d:65:0d:0e:e6:30:26:
                    52:05:8e:91:4d:32:f9:b9:db:19:4e:6f:d3:e7:ef:
                    32:9e:e7:21:6e:78:b2:be:7b:32:8e:49:53:73:c6:
                    51:d0:b3:c1:1f:e5:26:fd:4a:54:63:6c:1c:a6:a7:
                    de:e8:86:d7:ed:1c:84:68:db:18:ee:61:df:e7:35:
                    2f:e3:f4:71:4a:50:1f:d3:e5:e6:3b:92:89:9f:2d:
                    c1:37:26:8b:bb:7b:f1:01:88:18:db:92:33:ed:c8:
                    dc:5b:94:04:03:b7:f1:2c:30:f5:99:0a:a1:8a:5b:
                    df:a7:31:d1:13:46:18:aa:6a:b9:dc:49:b7:b9:35:
                    df:52:cc:5d:da:32:56:45:2d:a3:19:2b:2e:97:28:
                    c0:8a:06:c0:3b:4f:45:36:d2:85:34:cb:2d:c3:82:
                    82:56:d2:80:9e:f9:df:66:cf:94:43:ae:96:19:ad:
                    af:1d:55:ba:2e:18:90:28:bc:4a:f6:65:7a:a8:37:
                    1f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:77:CE:FC:A2:25:58:0A:B6:3E:25:B7:0A:E5:AE:73:3C:0A:88:B4
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/34352e3137342e3133322e302f32322d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:16:dd:9f:9a:91:49:85:73:c2:ec:df:50:5e:74:16:d1:52:
         42:27:43:04:21:b2:66:3a:e3:a9:31:57:65:9c:ac:8f:60:a5:
         b4:93:7f:97:76:ce:6d:77:2a:04:17:b4:0e:22:3b:09:a3:3d:
         d4:e2:59:4d:6c:bb:9c:80:4f:be:3e:74:2f:58:d9:ed:6a:e0:
         18:61:60:b1:79:95:ed:29:21:52:91:11:b4:b5:53:a2:c6:45:
         ee:70:bf:71:0a:70:66:cf:39:c6:b0:a7:36:b4:29:90:1c:53:
         46:09:b4:32:6c:e2:e9:51:da:4e:86:7f:cb:7f:de:59:13:ea:
         27:0e:f7:ce:6f:bb:f0:45:ba:e2:54:a1:bb:fd:08:88:e7:bd:
         10:7e:7c:33:9c:0b:30:b3:26:b4:6b:47:90:4e:2c:5d:0b:90:
         ed:82:23:bc:f1:de:3f:e3:89:68:73:0b:02:0a:b7:4d:05:ae:
         93:08:2d:2f:13:00:75:d5:e5:55:51:0e:f3:2d:bc:70:25:82:
         8e:fe:aa:6b:23:d8:f1:1f:1e:c0:c9:58:4f:ce:f8:fe:30:77:
         f0:c9:f7:2f:85:79:70:71:be:48:36:c7:0e:9f:a8:bc:48:b4:
         ad:65:8b:03:f0:fd:61:72:9b:46:3a:8a:e9:31:02:9b:f5:cd:
         20:c9:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:34:28 2025 by rpki-client