Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa
File:                     34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa (raw, json)
Hash identifier:          wiKk85Ob9GG7HS8aA/W4GPRipAMLLyevnzrJ98IAs6M=
Subject key identifier:   F1:74:F1:DE:1F:4F:83:6C:82:F2:06:03:CD:4A:FD:7D:15:8D:35:CE
Certificate issuer:       /CN=E9874D754A4F2E9B8149C3B894251362FDD83E90
Certificate serial:       6D27FC6272CE59565D176497C5268162C09AFB0F
Authority key identifier: E9:87:4D:75:4A:4F:2E:9B:81:49:C3:B8:94:25:13:62:FD:D8:3E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa
Signing time:             Wed 19 Mar 2025 00:10:56 +0000
ROA not before:           Wed 19 Mar 2025 00:05:56 +0000
ROA not after:            Wed 18 Mar 2026 00:10:56 +0000
asID:                     269014
IP address blocks:        45.176.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.crl
                          rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 14:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:27:fc:62:72:ce:59:56:5d:17:64:97:c5:26:81:62:c0:9a:fb:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9874D754A4F2E9B8149C3B894251362FDD83E90
        Validity
            Not Before: Mar 19 00:05:56 2025 GMT
            Not After : Mar 18 00:10:56 2026 GMT
        Subject: CN=F174F1DE1F4F836C82F20603CD4AFD7D158D35CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:b9:c4:ee:11:23:83:42:2c:7a:37:47:cd:
                    62:c4:a1:f4:be:29:2c:06:2a:c4:be:f1:60:cc:bc:
                    09:55:51:d4:f0:26:f6:3a:dc:ad:63:00:87:0d:7e:
                    76:f4:2e:11:88:fb:35:e7:fd:04:dd:97:df:92:0c:
                    17:8e:5e:aa:d9:71:3d:f2:8a:dc:c1:44:97:08:71:
                    6e:15:7c:25:a1:d8:0f:57:7e:2d:6c:5a:f2:a2:dc:
                    81:e4:b6:43:94:91:a0:b4:63:29:0e:76:06:a3:fc:
                    36:19:d7:e3:d9:94:3c:03:5a:41:a9:cb:a8:b1:9d:
                    cb:70:c4:dd:d6:1e:6b:66:75:66:5a:7f:7b:81:a2:
                    ed:f3:d2:74:33:08:51:3c:79:34:19:41:e3:bc:6f:
                    1c:b6:2d:36:23:00:3f:6b:b1:cf:7a:24:0b:f2:07:
                    35:25:88:d2:76:62:57:f4:1c:2c:d4:c8:a2:7f:ec:
                    44:2a:9c:f9:a0:f4:29:16:a0:2d:46:d5:b2:46:27:
                    28:23:77:13:b0:b9:23:70:fc:6c:c0:d1:35:fd:e0:
                    87:77:fb:a0:f1:db:2a:e1:92:85:7a:1f:24:49:3e:
                    c8:a5:1e:03:3b:6b:4f:7f:b7:c8:9a:d2:ce:77:04:
                    e7:3b:e6:02:a7:e0:e7:93:eb:42:d1:32:63:f5:8f:
                    1c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:74:F1:DE:1F:4F:83:6C:82:F2:06:03:CD:4A:FD:7D:15:8D:35:CE
            X509v3 Authority Key Identifier:
                keyid:E9:87:4D:75:4A:4F:2E:9B:81:49:C3:B8:94:25:13:62:FD:D8:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:4f:25:6a:99:c6:84:d3:1a:79:e6:8b:66:7b:5f:8a:3e:4b:
         99:0a:90:39:ac:e1:a2:df:61:a2:a9:f9:fe:2d:f6:6e:15:55:
         af:ec:fa:d4:49:7a:c4:79:7e:14:77:dc:a4:8c:12:90:a2:63:
         68:32:c2:3a:b3:c5:97:c3:26:7d:c9:0f:f4:11:4f:0e:21:72:
         fc:ad:d8:16:f3:81:7c:2d:98:8d:b1:da:24:e9:e9:0a:ea:cb:
         e5:70:5d:88:8a:45:10:5b:06:e0:6f:9c:51:25:c9:0f:ce:9b:
         e3:a7:be:df:8f:46:b9:be:26:84:39:1e:5e:35:52:d7:3d:38:
         c3:ab:b5:5e:ed:d1:49:87:84:6a:a3:33:8c:21:c8:e5:13:cb:
         22:20:67:d6:7b:57:11:4b:db:e0:46:24:5a:ae:dd:ad:09:1e:
         e5:fe:86:d8:c5:ee:e8:8e:ae:13:fa:fb:02:94:5f:52:de:cc:
         43:62:fa:de:91:7d:b0:8d:b2:db:c4:e8:85:d7:6a:0b:d1:99:
         79:e9:34:28:f7:40:2e:9d:20:19:61:e5:9e:22:b8:6e:3a:10:
         0c:c4:50:f6:f8:d7:f8:fa:52:31:3c:5c:dd:9e:40:98:ff:ef:
         3c:3d:6f:aa:d6:fc:89:62:eb:b6:c7:2d:52:11:70:f1:55:ec:
         d5:bd:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:11:16 2025 by rpki-client