Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37382e302f32342d3234203d3e20323639373030.roa
File:                     34352e3139312e37382e302f32342d3234203d3e20323639373030.roa (raw, json)
Hash identifier:          QJdjuVqm5JKkAIIaOLg4u5DVA36H912cjlLj9MIEuys=
Subject key identifier:   DC:40:DA:0A:1A:A0:05:96:01:A7:A7:20:3B:98:37:53:AC:E0:8C:23
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       27CF61B29411D482F11B86DEFAF99CDF09F510A2
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37382e302f32342d3234203d3e20323639373030.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     269700
IP address blocks:        45.191.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cf:61:b2:94:11:d4:82:f1:1b:86:de:fa:f9:9c:df:09:f5:10:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:c7:04:22:c3:78:6c:b2:4e:3f:d3:31:dd:
                    82:ce:c7:e9:b3:69:fc:3f:b9:8c:67:95:59:11:7d:
                    65:89:f4:46:a8:fc:76:0b:3a:5e:b4:45:61:1a:ff:
                    0b:1f:46:69:c1:34:91:44:1c:56:04:21:d1:09:8f:
                    ad:52:e3:43:5a:85:69:78:91:05:ec:43:89:d3:e7:
                    6b:4d:b4:41:37:1d:30:65:49:9a:b8:90:af:2a:8c:
                    84:7a:1f:45:4c:fd:ce:cc:63:0a:08:ba:3f:d5:8b:
                    54:e9:2e:f0:1a:9b:39:15:81:69:d9:7c:72:65:55:
                    0e:31:e2:ab:eb:a9:d9:41:84:15:10:26:d0:d7:73:
                    83:9b:ec:02:44:3d:cf:c4:13:73:83:5c:26:02:81:
                    21:a2:f5:a7:10:7a:06:fb:2d:e1:8e:41:5e:2a:ad:
                    1d:1e:82:56:eb:dc:ef:e6:7e:96:05:1d:70:76:ee:
                    90:fb:23:53:3e:03:ea:aa:62:1e:f5:ca:7d:6a:21:
                    9d:03:f8:43:fe:54:d2:63:e5:bf:46:ec:c4:65:55:
                    81:ed:ae:c2:8c:8b:10:47:e2:ec:ea:e9:c7:2d:9d:
                    cb:d0:cb:6f:42:6a:6f:ba:44:0e:87:0c:95:2b:73:
                    a6:9d:66:b7:6f:be:be:87:bf:99:ab:85:30:5c:da:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:40:DA:0A:1A:A0:05:96:01:A7:A7:20:3B:98:37:53:AC:E0:8C:23
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37382e302f32342d3234203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e4:80:95:fd:bb:8f:e4:30:ae:e6:08:38:91:01:31:24:68:
         43:b3:67:34:4b:db:11:da:ea:d3:2a:95:47:6e:dc:ec:69:e7:
         7c:a3:5a:5e:f2:5a:3e:a2:ae:bf:32:36:0b:d1:2e:62:6e:fd:
         1a:d8:fd:13:57:08:19:7c:96:b2:06:69:d7:26:ad:b5:aa:e1:
         1b:34:f8:2c:d2:0d:52:7b:ca:bf:e5:df:70:a6:4c:64:16:48:
         29:6d:cf:26:59:6a:36:3d:d8:83:92:4e:63:1c:fd:58:cd:ae:
         01:f4:1e:c4:f7:a4:5e:48:f0:05:78:a0:12:b3:eb:06:27:4b:
         58:93:7b:50:38:3f:ce:8f:3e:02:70:e2:b2:16:90:42:e9:c8:
         11:41:13:28:43:6a:38:19:e3:6f:ad:5a:d9:89:0e:b1:dc:04:
         21:c4:2d:d3:7f:3e:39:3b:89:91:50:71:54:e7:e2:17:84:7a:
         25:95:6e:e9:ca:64:df:92:47:9f:56:39:90:04:21:6b:66:58:
         ee:a1:d4:5c:01:c0:af:02:d2:97:c2:60:8e:f2:22:bf:f1:80:
         51:cd:a9:e0:98:e5:c7:74:72:64:8c:85:fe:be:5e:a2:2d:cb:
         35:9f:6e:30:0a:33:66:81:95:2b:d6:0e:80:a4:95:7c:e5:e3:
         98:6d:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:05:05 2025 by rpki-client