Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37342e302f32332d3233203d3e20323637343039.roa
File:                     34352e3233352e37342e302f32332d3233203d3e20323637343039.roa (raw, json)
Hash identifier:          oWwmPz132IV8N/L/w70uyXgfgL42b/NCbaGU2bpgfCY=
Subject key identifier:   2E:40:4E:1E:57:A4:B4:0D:58:12:33:BC:71:17:7A:AB:FF:2B:F2:FD
Certificate issuer:       /CN=F45FEF456D7F85034F083B392724775024917F0C
Certificate serial:       0878323D53476F26CAA8DDC9B66012273D2C4552
Authority key identifier: F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37342e302f32332d3233203d3e20323637343039.roa
Signing time:             Fri 16 May 2025 17:21:21 +0000
ROA not before:           Fri 16 May 2025 17:16:21 +0000
ROA not after:            Fri 15 May 2026 17:21:21 +0000
asID:                     267409
IP address blocks:        45.235.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/F45FEF456D7F85034F083B392724775024917F0C.crl
                          rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/F45FEF456D7F85034F083B392724775024917F0C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:78:32:3d:53:47:6f:26:ca:a8:dd:c9:b6:60:12:27:3d:2c:45:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45FEF456D7F85034F083B392724775024917F0C
        Validity
            Not Before: May 16 17:16:21 2025 GMT
            Not After : May 15 17:21:21 2026 GMT
        Subject: CN=2E404E1E57A4B40D581233BC71177AABFF2BF2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:02:bf:f3:b7:39:b9:d5:12:ee:9c:55:9d:
                    9d:59:ce:52:04:c3:5d:61:ef:3e:28:11:1e:37:08:
                    fa:b0:45:63:d3:26:cf:21:e6:0c:71:2c:2c:da:2c:
                    79:4f:cc:43:eb:67:04:2b:7d:a0:67:d8:6b:a7:99:
                    02:e2:52:0c:c5:36:e7:a6:d5:36:31:bf:73:c5:ed:
                    98:b0:55:ea:ab:58:71:80:d5:ec:3a:05:aa:d6:dd:
                    10:20:8d:15:6f:b5:0b:ba:4a:1f:0b:bc:80:bc:8a:
                    4d:1f:f9:f9:f7:19:f3:33:6d:e3:13:7b:3e:97:72:
                    db:58:ca:ac:16:90:5f:f9:1f:8c:65:54:51:5f:9a:
                    31:e8:d7:a8:45:8c:52:00:8c:2c:ed:d1:a3:f9:50:
                    27:09:aa:67:83:07:fe:0f:82:cc:a7:b9:e7:c4:99:
                    e8:07:f1:f0:e6:a4:e5:48:c5:9e:11:1d:19:a5:0e:
                    47:cc:cb:e6:71:bd:66:7c:d8:6a:e8:15:d3:f9:50:
                    82:f7:f9:e9:6a:50:e8:df:c6:c1:78:1f:b6:8c:3b:
                    95:7c:60:17:ab:68:53:9d:c4:f4:c2:da:82:40:67:
                    67:82:39:ee:89:46:ab:16:74:d7:27:5b:df:75:7e:
                    6e:eb:6d:72:31:e7:80:04:76:6c:4b:4a:45:6f:19:
                    44:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:40:4E:1E:57:A4:B4:0D:58:12:33:BC:71:17:7A:AB:FF:2B:F2:FD
            X509v3 Authority Key Identifier:
                keyid:F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/F45FEF456D7F85034F083B392724775024917F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37342e302f32332d3233203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:ea:70:cf:87:e1:03:b5:e5:99:aa:d0:cd:31:73:49:df:b3:
         41:51:a8:59:3e:dd:9d:06:d8:2d:65:75:bd:ec:c7:86:a7:45:
         f5:3b:e9:69:10:06:96:a7:70:c0:1c:5c:b1:24:a5:76:08:2b:
         fa:4d:0d:c6:09:f5:ef:75:53:bb:0a:c7:49:48:6f:86:be:54:
         01:c3:8f:2b:45:a3:6d:09:a2:5f:b7:0a:2c:2e:15:a2:20:5d:
         38:58:48:fc:27:2f:c2:2a:11:3c:aa:f8:6b:03:3a:d9:71:0c:
         1d:e4:29:c1:dc:71:27:11:3f:b0:37:94:1f:0a:90:d6:1f:76:
         2b:96:55:52:38:dd:61:50:6d:30:fd:db:9b:18:90:a3:4f:00:
         cb:0f:8d:6e:e1:85:65:97:e9:f8:92:06:ee:8a:25:28:7b:48:
         c8:78:13:3c:11:92:4d:e2:73:a5:d1:20:c5:82:c3:46:ef:43:
         de:38:d8:db:0b:8d:50:07:6c:bd:31:e0:56:a6:8a:39:14:9c:
         bf:e8:e5:eb:fa:a6:e6:69:a9:2d:a7:af:d1:14:c2:f0:76:93:
         37:e8:30:37:89:89:c0:61:15:fe:71:4c:a6:a8:5d:83:75:c0:
         03:f9:bc:7f:2e:3b:c3:40:cb:0b:34:55:f3:0c:9a:c4:66:0a:
         90:82:76:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:47:34 2025 by rpki-client