Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/34352e3137322e38342e302f32322d3332203d3e20323638373537.roa
File:                     34352e3137322e38342e302f32322d3332203d3e20323638373537.roa (raw, json)
Hash identifier:          7pgPlBNCouVXFjcbRH7yXJfOmuu/WKUDlnUULH+OgqA=
Subject key identifier:   EB:72:58:A1:3B:DA:7E:27:2C:56:09:82:3F:10:A6:25:6F:BF:62:12
Certificate issuer:       /CN=387235C70B4F78A5DAB09EA798C256A3235570D9
Certificate serial:       19D4444F82D823C79BED17A87F2EC0E2273A6818
Authority key identifier: 38:72:35:C7:0B:4F:78:A5:DA:B0:9E:A7:98:C2:56:A3:23:55:70:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/387235C70B4F78A5DAB09EA798C256A3235570D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/34352e3137322e38342e302f32322d3332203d3e20323638373537.roa
Signing time:             Fri 14 Feb 2025 18:12:13 +0000
ROA not before:           Fri 14 Feb 2025 18:07:13 +0000
ROA not after:            Fri 13 Feb 2026 18:12:13 +0000
asID:                     268757
IP address blocks:        45.172.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/387235C70B4F78A5DAB09EA798C256A3235570D9.crl
                          rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/387235C70B4F78A5DAB09EA798C256A3235570D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/387235C70B4F78A5DAB09EA798C256A3235570D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 15:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d4:44:4f:82:d8:23:c7:9b:ed:17:a8:7f:2e:c0:e2:27:3a:68:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387235C70B4F78A5DAB09EA798C256A3235570D9
        Validity
            Not Before: Feb 14 18:07:13 2025 GMT
            Not After : Feb 13 18:12:13 2026 GMT
        Subject: CN=EB7258A13BDA7E272C5609823F10A6256FBF6212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:85:33:17:86:b9:79:2b:dc:51:53:fb:65:c0:
                    f1:4a:9f:f0:7e:dd:96:57:88:e2:a0:1d:8b:04:c2:
                    ca:7e:20:2e:74:d8:2e:9a:9a:64:22:92:f8:12:f6:
                    fb:38:00:ba:58:aa:15:0b:ad:e7:d0:35:2e:1c:82:
                    26:6c:2f:8b:c7:68:da:7f:3e:01:38:40:b6:64:6a:
                    70:72:dd:5c:a6:56:e4:bf:53:86:34:fe:83:52:fc:
                    ab:17:a5:f5:bc:5b:ff:fc:52:ee:d3:ff:a9:a6:9f:
                    c7:d9:82:ee:4b:d2:cd:25:3e:9e:4a:ca:85:8f:43:
                    4a:39:1b:cc:0d:89:b4:6a:b3:3d:28:09:bc:4d:35:
                    38:f8:23:94:82:4b:aa:ec:22:2a:15:49:53:d5:6c:
                    82:05:cd:d5:09:39:4a:e0:20:b9:07:2c:ad:09:29:
                    fa:49:94:b8:20:c7:49:05:a2:7c:c1:7e:42:3a:8c:
                    23:78:60:2e:18:4c:f3:71:69:33:6f:41:87:af:eb:
                    1b:5c:eb:e0:cf:d3:0b:6d:bd:56:f4:ac:9c:6e:bb:
                    38:48:c3:de:3b:d2:92:f1:90:f8:23:3f:e8:31:0c:
                    97:89:4a:17:24:14:33:52:4d:89:44:ce:80:c4:88:
                    26:77:1f:63:f1:54:7d:25:7f:0f:f2:10:fa:2d:29:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:72:58:A1:3B:DA:7E:27:2C:56:09:82:3F:10:A6:25:6F:BF:62:12
            X509v3 Authority Key Identifier:
                keyid:38:72:35:C7:0B:4F:78:A5:DA:B0:9E:A7:98:C2:56:A3:23:55:70:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/387235C70B4F78A5DAB09EA798C256A3235570D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/387235C70B4F78A5DAB09EA798C256A3235570D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/34352e3137322e38342e302f32322d3332203d3e20323638373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:02:29:0f:67:37:b1:24:02:34:7d:d6:7a:17:57:36:4e:
         f0:26:a4:72:0c:14:44:1c:ba:7a:02:e5:97:fc:68:b9:79:0a:
         55:9b:dd:32:94:ba:cb:c5:de:42:12:25:e2:a8:2a:0b:5f:c3:
         6c:8f:74:d7:de:2a:50:30:56:55:e5:f6:ee:f1:14:b5:80:80:
         32:51:13:df:80:43:3f:09:ac:d5:9c:8a:c9:43:e3:9d:69:1c:
         34:14:c2:33:f9:d4:ed:63:38:1a:19:35:58:e7:de:c2:c3:cf:
         cc:06:cd:7c:b2:b8:97:87:b3:72:7e:81:44:20:44:1d:62:78:
         95:fd:65:1f:2e:8c:8a:2a:18:c7:eb:c1:44:63:96:e2:d5:8e:
         51:57:8e:f8:1e:86:cf:74:e1:b6:f7:08:9d:e2:c6:44:72:32:
         9b:2c:63:d7:80:f0:4c:bb:2e:00:6a:3b:ae:e0:00:48:58:57:
         73:77:d6:1e:be:dd:2f:87:a4:6d:a8:38:ad:ac:f4:3a:a9:a1:
         5d:28:43:61:49:82:52:19:ad:15:71:12:7b:a8:bb:d1:2b:9d:
         0d:f3:ab:ad:e2:df:c9:25:67:99:e5:fe:93:06:87:42:36:8a:
         22:58:c3:89:7d:d3:e3:89:2b:6c:2e:25:26:e8:48:16:b2:fc:
         85:23:6c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:40 2025 by rpki-client