Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/34352e37302e35322e302f32322d3234203d3e20323637353739.roa
File:                     34352e37302e35322e302f32322d3234203d3e20323637353739.roa (raw, json)
Hash identifier:          jz2fFxsuG1LUPNFNTRlhaK4aGQhJhkESGPAI73IoTto=
Subject key identifier:   8D:4D:3A:61:81:A4:C5:0B:C3:E8:8E:61:E6:A5:D5:65:1B:34:72:76
Certificate issuer:       /CN=ED09475052657B74A139F63C8A27BCD9B26B6B19
Certificate serial:       27846564301B10047C8B1845B7F325388805E657
Authority key identifier: ED:09:47:50:52:65:7B:74:A1:39:F6:3C:8A:27:BC:D9:B2:6B:6B:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/34352e37302e35322e302f32322d3234203d3e20323637353739.roa
Signing time:             Wed 02 Apr 2025 01:22:39 +0000
ROA not before:           Wed 02 Apr 2025 01:17:39 +0000
ROA not after:            Wed 01 Apr 2026 01:22:39 +0000
asID:                     267579
IP address blocks:        45.70.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.crl
                          rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:84:65:64:30:1b:10:04:7c:8b:18:45:b7:f3:25:38:88:05:e6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED09475052657B74A139F63C8A27BCD9B26B6B19
        Validity
            Not Before: Apr  2 01:17:39 2025 GMT
            Not After : Apr  1 01:22:39 2026 GMT
        Subject: CN=8D4D3A6181A4C50BC3E88E61E6A5D5651B347276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e2:42:78:28:49:39:0f:04:fb:67:9b:fe:be:
                    dc:9e:46:22:c9:ac:55:b0:88:1f:ab:b9:de:dd:6d:
                    50:60:05:72:bf:ef:ad:f1:35:12:69:21:7e:2a:e5:
                    39:25:d9:14:a6:3d:ec:d4:44:94:e4:ff:e2:d9:ff:
                    c3:08:26:ee:eb:e9:93:20:81:d1:01:da:95:92:98:
                    12:2e:7d:e2:5e:8f:20:67:5a:11:bf:6b:9f:7b:f2:
                    1f:95:9d:c0:9f:ba:35:7f:d8:91:fb:e9:24:c6:e1:
                    ac:e0:ab:e0:d2:db:72:06:cf:19:4b:2f:fd:74:c2:
                    e5:a2:2c:fc:6e:3b:0e:7a:15:dd:bc:64:07:b7:95:
                    4f:0a:71:f7:b1:7e:4b:86:b9:b9:69:65:48:a4:4a:
                    d6:6d:87:ef:b1:07:80:ea:47:ab:62:e9:3d:c6:e4:
                    69:67:8d:06:9a:c3:4b:e1:7f:da:2e:38:79:54:b8:
                    d5:ff:79:c4:7c:3a:62:5d:52:4e:48:bd:16:04:ac:
                    a3:f8:e2:b6:14:b3:35:92:24:1f:92:81:10:ef:09:
                    e1:5b:b2:bd:b2:ca:da:e7:a4:40:d0:0c:9c:cf:7e:
                    63:ab:1b:4f:3d:35:ed:46:58:19:d9:d7:28:97:a8:
                    8c:e7:ee:3e:28:e7:3d:01:98:ae:0a:7c:fd:24:a3:
                    de:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4D:3A:61:81:A4:C5:0B:C3:E8:8E:61:E6:A5:D5:65:1B:34:72:76
            X509v3 Authority Key Identifier:
                keyid:ED:09:47:50:52:65:7B:74:A1:39:F6:3C:8A:27:BC:D9:B2:6B:6B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/34352e37302e35322e302f32322d3234203d3e20323637353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:43:e0:25:35:43:7d:73:5a:81:eb:81:07:aa:42:f5:2e:27:
         12:eb:15:8d:78:fb:b4:2c:e6:42:ed:1a:94:32:bf:3e:70:ee:
         eb:7c:06:ee:7c:df:91:d7:0f:3a:18:a7:e4:06:8a:ce:d5:02:
         b3:3b:bb:f7:d8:fd:50:9a:cd:a1:f1:e8:53:4a:d0:df:65:a3:
         2c:f7:a6:59:b8:d1:2d:23:e7:70:73:91:6d:69:c1:ea:a2:43:
         aa:d5:2b:80:c1:94:ed:10:3f:3d:00:97:40:ee:91:bd:c8:27:
         1d:f6:51:6e:c8:81:87:fe:3b:37:7b:c7:89:47:fd:b6:f4:5e:
         fa:4c:4d:29:e9:bd:c4:9a:9c:46:0c:ae:4d:c3:7d:d9:02:fa:
         45:60:72:12:b5:db:db:db:12:42:22:40:60:5e:ca:80:35:37:
         65:4e:af:a9:d3:c0:28:ef:26:88:26:b2:63:7a:3a:7a:ec:45:
         dd:96:da:fe:b0:b8:43:a6:3d:0c:3a:40:a6:43:22:76:18:63:
         e8:37:a5:bf:45:70:59:c9:bd:70:57:38:a6:0b:32:db:4d:20:
         6c:e1:36:c3:54:b0:ca:2e:8c:af:65:5d:b7:70:c2:9a:b2:1f:
         53:a2:de:31:14:bf:e3:4c:03:41:db:e4:e5:6f:4e:4a:79:72:
         0b:38:65:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:11:24 2025 by rpki-client