Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa
File:                     34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa (raw, json)
Hash identifier:          qAEx6F+2KODCey+Ohju8E+Lpf3m8tuS3Va6XNAbuYIU=
Subject key identifier:   EC:FA:A1:67:A9:F2:72:AF:42:5A:9B:B1:EA:98:8E:CE:B7:6F:2E:A9
Certificate issuer:       /CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
Certificate serial:       4225979823CD86E59526F962B2A9FFC0E084D8AE
Authority key identifier: 17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa
Signing time:             Wed 05 Mar 2025 22:33:05 +0000
ROA not before:           Wed 05 Mar 2025 22:28:05 +0000
ROA not after:            Wed 04 Mar 2026 22:33:05 +0000
asID:                     268106
IP address blocks:        45.169.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl
                          rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 03:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:25:97:98:23:cd:86:e5:95:26:f9:62:b2:a9:ff:c0:e0:84:d8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
        Validity
            Not Before: Mar  5 22:28:05 2025 GMT
            Not After : Mar  4 22:33:05 2026 GMT
        Subject: CN=ECFAA167A9F272AF425A9BB1EA988ECEB76F2EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:39:fe:90:00:ad:2b:c0:4a:d3:e7:50:e5:
                    47:7c:f2:2e:9b:e1:a3:b1:d2:21:ab:c5:fe:57:1f:
                    9f:76:43:82:54:2d:94:03:fb:c8:82:33:e7:67:73:
                    f1:05:4d:99:fe:93:41:d0:ec:c4:82:cf:2e:47:c5:
                    bb:9b:55:49:4a:f3:40:77:b7:15:78:9b:8d:a8:3d:
                    2b:23:bc:63:5c:38:23:95:b7:e4:d2:8a:a9:cf:3b:
                    cd:06:36:e9:eb:be:43:83:66:d4:30:ac:a6:8f:e4:
                    da:88:ca:46:87:61:00:73:02:03:96:53:bf:a4:43:
                    bd:33:43:64:82:5d:f3:ac:62:61:15:10:78:78:17:
                    40:8c:e8:a6:ce:75:be:1b:4e:27:01:34:bb:c6:88:
                    1a:b5:e7:4f:fb:fa:4a:61:aa:9a:85:1b:ef:62:ee:
                    5e:5b:6e:80:4c:32:2c:08:1e:c8:de:5b:09:8a:9f:
                    8f:d6:14:14:87:1d:ab:78:53:15:c1:e9:f2:f1:cd:
                    bc:12:85:ae:bc:f0:f5:e0:b3:17:6f:a1:af:50:cb:
                    cb:12:88:17:7c:ae:f5:33:58:90:8c:1a:d9:57:ad:
                    0d:3d:72:eb:35:d3:27:f0:db:44:e4:a2:2c:5d:36:
                    dd:d7:dd:2f:d5:86:42:9b:51:c2:19:ed:30:eb:3d:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FA:A1:67:A9:F2:72:AF:42:5A:9B:B1:EA:98:8E:CE:B7:6F:2E:A9
            X509v3 Authority Key Identifier:
                keyid:17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:33:02:cc:ee:65:8d:b7:68:28:ab:d2:d3:47:54:35:df:
         bd:80:8b:99:7d:c2:02:88:02:12:d2:ab:c0:b8:44:30:15:e1:
         33:b0:14:5e:e0:b9:60:ee:76:81:77:3a:02:bf:67:37:30:26:
         ed:e8:fb:ef:41:2b:23:95:a6:d6:9b:ac:5f:0d:73:98:95:21:
         d6:32:11:c2:fc:f2:d4:da:6d:8b:8e:95:1b:1c:92:93:6d:ce:
         f3:4f:e7:4c:59:04:86:f7:3c:26:c8:13:08:60:a8:8c:73:22:
         fb:db:df:e0:9f:1b:a0:92:92:a0:7d:44:29:1c:5c:30:7c:8a:
         49:b6:cb:17:fa:d8:51:4c:86:f4:7d:7a:ae:ea:69:83:6d:af:
         8c:89:da:83:41:f9:0b:75:01:3d:3e:d6:06:6b:5d:e4:32:54:
         f8:35:73:7f:0d:1c:29:a8:8b:6f:5d:fa:2e:8d:e6:51:c8:1e:
         f2:3d:84:57:16:58:43:6d:40:7b:06:fd:00:e0:1f:3e:55:21:
         c9:89:fd:fd:b4:71:c6:f9:7d:20:d4:72:34:24:f7:20:a3:74:
         12:e7:59:89:5c:aa:97:49:b4:eb:34:d8:08:4e:9d:2a:d7:39:
         3f:25:29:82:16:df:4a:16:84:4a:79:1d:6b:b7:5a:cc:16:17:
         20:ad:26:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:46:13 2025 by rpki-client