Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37342e302f32342d3234203d3e20323638313533.roa
File:                     34352e3137302e37342e302f32342d3234203d3e20323638313533.roa (raw, json)
Hash identifier:          S+f67Ujc3+huWhMURFwl5zPPe0ikEapZ89Yl/oUCEHg=
Subject key identifier:   04:7D:07:F0:5F:A5:E2:94:F5:85:8B:27:3E:12:13:07:1F:54:F7:9E
Certificate issuer:       /CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
Certificate serial:       7D97397C1AF9BCD484CEF889DDB7C0FCA0B74A59
Authority key identifier: 6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37342e302f32342d3234203d3e20323638313533.roa
Signing time:             Thu 06 Mar 2025 01:48:58 +0000
ROA not before:           Thu 06 Mar 2025 01:43:58 +0000
ROA not after:            Thu 05 Mar 2026 01:48:58 +0000
asID:                     268153
IP address blocks:        45.170.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 15:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:97:39:7c:1a:f9:bc:d4:84:ce:f8:89:dd:b7:c0:fc:a0:b7:4a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
        Validity
            Not Before: Mar  6 01:43:58 2025 GMT
            Not After : Mar  5 01:48:58 2026 GMT
        Subject: CN=047D07F05FA5E294F5858B273E1213071F54F79E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:48:52:53:75:bc:45:36:da:c7:97:5e:43:
                    9a:bb:8a:b6:cf:3c:ff:27:ac:54:ac:28:86:a0:e1:
                    d4:49:4c:7a:c5:d4:3e:86:45:98:86:42:a3:ce:a0:
                    73:38:dc:fb:89:1d:a3:46:6b:b7:be:5f:8c:03:d0:
                    93:c1:a6:8d:e8:b1:75:bf:3b:6c:0c:c3:f0:dd:f6:
                    b8:1a:63:58:f9:89:5e:f4:00:37:1a:b8:23:e5:8a:
                    f9:d0:21:36:d1:9f:61:8e:aa:6b:51:29:c8:a5:a3:
                    24:c8:cc:d4:4b:37:9d:0f:dd:a0:27:f1:87:58:ea:
                    72:48:4f:f3:1a:fe:e3:d9:2c:aa:28:20:70:ed:2d:
                    99:cb:55:aa:61:d4:e5:20:83:d0:e8:2b:95:3d:97:
                    0b:ad:fb:ae:87:f8:c9:5d:8f:af:a3:53:3d:f8:c0:
                    be:50:95:12:3d:7e:24:67:4e:b7:d8:4d:94:3f:3c:
                    cd:23:ff:89:a0:81:87:b8:aa:91:97:76:fd:b1:2c:
                    1b:c0:c8:f4:d6:8a:6a:62:c4:ad:00:e3:0b:28:12:
                    08:59:39:b5:01:8a:bb:53:89:96:de:90:ad:e5:ca:
                    53:1f:8a:d3:16:e8:6d:93:4a:f1:89:c7:f1:0c:06:
                    99:88:98:43:3a:33:6f:e8:52:15:c2:61:82:4e:11:
                    ba:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7D:07:F0:5F:A5:E2:94:F5:85:8B:27:3E:12:13:07:1F:54:F7:9E
            X509v3 Authority Key Identifier:
                keyid:6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37342e302f32342d3234203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:b0:83:7a:7d:0e:c4:ff:5d:29:63:55:0c:80:01:bc:5f:22:
         59:6a:02:34:bc:ec:9f:0c:8f:c9:4e:bd:0f:41:1d:0f:b3:0a:
         38:6d:43:68:6c:39:38:82:27:c5:98:04:c2:97:8e:46:05:25:
         ed:dc:67:bf:65:9a:26:19:6f:ca:ad:dd:00:47:93:32:5e:eb:
         5e:fd:f5:e6:34:43:34:1d:d9:7f:37:5c:54:b5:58:86:ff:c3:
         9a:f4:28:7a:3e:ef:e9:ca:05:9a:dc:58:c1:9f:f7:c9:49:ae:
         fd:cd:fe:79:a8:23:ec:aa:f9:87:95:5d:f5:d6:bd:b5:3b:3f:
         76:7d:a0:52:08:d7:aa:ad:9c:93:28:74:af:93:ab:04:e9:76:
         f7:45:9a:8d:bc:c6:db:5a:96:6b:74:77:39:6e:da:2a:53:c0:
         00:80:7b:43:e8:37:eb:e9:7e:40:3e:a9:64:7a:9d:85:9e:1d:
         63:95:72:93:d2:59:19:da:eb:d7:3d:bd:8d:de:04:22:99:ba:
         d1:87:76:b8:6f:d1:32:9f:fa:cb:34:12:aa:2b:a1:d4:4b:e7:
         03:b1:e0:69:5d:5e:62:7a:08:c4:c0:9c:79:60:01:60:f9:c2:
         05:e9:50:d8:1b:24:1b:3c:c2:e7:c6:da:c7:9e:ec:a7:8e:9e:
         85:e6:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:01:36 2025 by rpki-client