Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/34352e37312e3136382e302f32332d3233203d3e20323637363232.roa
File:                     34352e37312e3136382e302f32332d3233203d3e20323637363232.roa (raw, json)
Hash identifier:          F4t949teZ52DBneSi6HSrjTXwGrtY7jWNxpc7rsZjlM=
Subject key identifier:   9C:A6:28:4A:C8:33:8E:E3:C9:F1:EC:15:80:A6:6A:85:88:9D:4D:7F
Certificate issuer:       /CN=D05EC24593D2026D2D5B7D7EF76C0E52331234DF
Certificate serial:       7428359686C9F0F9FEFDC401422DF85C19FB3F91
Authority key identifier: D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/34352e37312e3136382e302f32332d3233203d3e20323637363232.roa
Signing time:             Thu 06 Mar 2025 14:52:48 +0000
ROA not before:           Thu 06 Mar 2025 14:47:48 +0000
ROA not after:            Thu 05 Mar 2026 14:52:48 +0000
asID:                     267622
IP address blocks:        45.71.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.crl
                          rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:28:35:96:86:c9:f0:f9:fe:fd:c4:01:42:2d:f8:5c:19:fb:3f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05EC24593D2026D2D5B7D7EF76C0E52331234DF
        Validity
            Not Before: Mar  6 14:47:48 2025 GMT
            Not After : Mar  5 14:52:48 2026 GMT
        Subject: CN=9CA6284AC8338EE3C9F1EC1580A66A85889D4D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:90:ef:db:90:91:44:4e:6b:a7:8d:c7:97:
                    9c:98:4e:79:f3:79:72:7c:4b:5b:12:52:75:0b:e3:
                    2a:fb:69:05:75:7d:2e:ae:45:59:06:e3:af:09:a1:
                    b6:5f:c5:93:aa:3f:c1:2b:ce:e6:de:57:ae:ee:05:
                    06:dc:5e:59:ed:8f:e5:97:6c:ba:f5:b1:d6:21:74:
                    4c:9e:d8:48:01:6b:81:70:3a:32:7e:0e:b1:32:82:
                    06:65:92:35:9f:5c:e5:f6:02:f5:55:82:c2:6c:f8:
                    c3:41:8d:13:5c:99:87:be:f1:2b:8c:0e:ff:53:10:
                    88:f4:4c:f3:93:71:96:6d:fc:ca:17:c5:6f:2b:d0:
                    75:12:22:58:45:5c:18:e8:f7:5e:87:90:0a:9f:4f:
                    a1:4f:96:e1:da:45:af:a4:fb:4e:af:a5:0a:32:cb:
                    fc:92:f7:55:13:af:a9:de:66:0c:84:a1:0b:a0:6c:
                    8a:71:f5:5d:2e:99:49:65:e8:53:ee:4f:aa:b5:18:
                    84:3e:28:8f:72:0f:65:fe:2b:2b:d5:33:7d:44:3b:
                    07:f6:21:01:8d:dd:5e:88:dc:4c:d1:3a:3b:63:1e:
                    f0:39:d7:03:c4:9c:4a:41:2a:20:73:6f:a5:02:a6:
                    8c:7f:42:a2:8f:20:53:a9:4e:14:34:41:e5:f3:d0:
                    c6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A6:28:4A:C8:33:8E:E3:C9:F1:EC:15:80:A6:6A:85:88:9D:4D:7F
            X509v3 Authority Key Identifier:
                keyid:D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/34352e37312e3136382e302f32332d3233203d3e20323637363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:79:d9:82:65:15:88:b5:24:13:9f:ec:42:70:e6:fc:27:
         93:5d:17:9f:00:6b:8e:76:d2:28:34:55:50:d4:cf:c7:e0:4a:
         8b:9c:48:5e:d3:60:0d:f9:6b:3b:2c:c6:dd:2a:a0:fd:3b:d8:
         a4:b6:a0:cd:82:38:b1:01:fb:3d:f9:bc:fa:1b:02:e9:ff:30:
         56:dc:3b:4a:30:c2:7d:1f:49:0f:50:de:f2:2f:7a:1a:aa:9d:
         2c:38:ba:97:80:9e:d3:d1:72:a4:2f:25:58:f5:84:3e:9c:f3:
         4d:85:47:95:78:f1:be:ab:5b:ef:48:ef:00:a4:d0:33:9f:50:
         0b:39:ed:e6:b6:dc:97:6e:18:af:e1:df:b8:4d:0b:55:d7:31:
         9e:d5:27:c8:8e:3e:fd:9e:82:05:f3:b3:86:64:52:a7:e8:99:
         d0:84:97:97:51:63:38:75:c1:88:0f:a9:a6:df:15:2f:55:83:
         0e:02:46:3f:8a:fa:78:78:f8:94:3f:8c:63:e1:aa:2a:5b:cb:
         02:98:48:0e:0c:fd:75:4f:0f:26:36:1d:e5:50:c3:a4:25:a5:
         2b:30:07:dc:bf:55:ed:19:16:d0:1f:5a:28:db:44:6d:b9:57:
         45:b2:75:69:56:9d:ea:96:e6:c9:95:ef:3b:72:1b:8f:40:fb:
         84:7b:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:26:39 2025 by rpki-client