Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233322e302f32322d3232203d3e20323637313737.roa
File:                     34352e3233302e3233322e302f32322d3232203d3e20323637313737.roa (raw, json)
Hash identifier:          +aWi6zCfSQhFmPkYX4L6eOV889iP8yGCOKJkxR9AsbI=
Subject key identifier:   93:A4:EE:79:AA:FE:93:43:4B:4A:B6:F4:BA:EC:7B:38:E0:4E:09:61
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       3B5825909216FEF99746E44E52F0FCC871F7E806
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233322e302f32322d3232203d3e20323637313737.roa
Signing time:             Thu 06 Mar 2025 13:53:28 +0000
ROA not before:           Thu 06 Mar 2025 13:48:28 +0000
ROA not after:            Thu 05 Mar 2026 13:53:28 +0000
asID:                     267177
IP address blocks:        45.230.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:58:25:90:92:16:fe:f9:97:46:e4:4e:52:f0:fc:c8:71:f7:e8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: Mar  6 13:48:28 2025 GMT
            Not After : Mar  5 13:53:28 2026 GMT
        Subject: CN=93A4EE79AAFE93434B4AB6F4BAEC7B38E04E0961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:84:1d:9a:ab:e9:eb:a9:03:fa:69:f0:51:
                    3e:63:12:45:f9:40:77:6b:44:0e:54:a9:91:88:6b:
                    f6:61:96:8f:93:24:21:1e:78:9a:37:bc:ae:50:d9:
                    45:82:48:b0:2f:8f:99:55:93:bf:de:76:3e:8e:43:
                    0f:12:07:f2:53:1c:bc:c3:34:4c:d7:8d:72:e3:16:
                    7e:8d:f3:b7:7a:87:19:57:24:77:13:0f:c0:8e:a9:
                    1e:3e:8f:6f:0a:99:93:3f:a4:f4:01:a6:41:aa:1d:
                    4d:27:23:56:f5:3f:ed:04:7c:cb:74:00:d8:18:d8:
                    c7:0c:c4:e0:8c:89:e7:19:19:6b:c2:2e:18:94:e4:
                    64:f6:6f:7f:91:16:bd:78:ab:5f:aa:5b:7a:ab:d0:
                    6d:f9:3e:e6:ae:4f:fc:6f:7c:60:17:db:9a:6d:f4:
                    b5:85:03:c7:cf:9f:a5:3b:0a:b1:b9:5f:ee:c2:9c:
                    e8:8a:c5:4e:6e:90:79:c8:33:67:33:48:85:4b:4d:
                    18:1a:77:56:8f:68:c0:23:41:58:d9:eb:a2:5c:f2:
                    fd:a8:ff:aa:71:13:c1:a6:b8:d5:0e:98:4a:73:af:
                    16:20:c8:0c:13:16:c7:95:a1:b3:cd:26:3b:64:a7:
                    74:74:c5:9c:99:de:66:64:79:b2:5d:b5:b2:0f:48:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A4:EE:79:AA:FE:93:43:4B:4A:B6:F4:BA:EC:7B:38:E0:4E:09:61
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233322e302f32322d3232203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:4b:88:a2:50:e1:ca:1c:39:ab:8d:0a:93:c7:3f:d8:08:
         5b:d8:fe:db:16:ba:24:31:5f:b3:91:68:8e:e4:ed:1b:4b:0e:
         f7:fb:e9:20:6d:98:86:6c:1d:55:9d:29:1a:e2:07:89:33:1c:
         be:93:1e:d9:33:0a:7c:7f:5e:b8:c9:05:bf:66:36:36:ed:6f:
         63:05:c8:43:54:f9:50:b6:f3:9a:7e:19:e8:4a:f6:4c:bc:23:
         69:16:8d:cf:25:c6:ff:2a:0f:13:63:9c:47:b2:d7:2a:0a:48:
         df:06:e4:85:ae:85:9c:7f:eb:bc:f1:a8:de:1f:4f:81:3a:d5:
         9c:cb:d8:8f:0c:af:0a:f7:79:31:37:61:49:8b:5a:d7:9f:81:
         d5:d4:4e:43:63:50:1a:a3:47:f9:4c:8c:22:6f:9d:b1:df:45:
         0f:19:7d:4e:90:5e:21:99:5b:0f:08:d4:11:4f:6c:0b:7d:59:
         44:66:ba:b6:1a:7a:14:08:43:db:91:6f:7f:9c:61:4b:2d:c9:
         c7:59:25:08:21:22:af:0a:ba:f1:ab:2d:87:2d:9e:f4:92:9e:
         eb:91:db:a9:02:2b:54:9e:56:f0:31:cf:84:57:77:67:23:5c:
         c3:e4:d6:3f:15:bb:92:c5:7d:21:38:2c:5b:2c:3b:cb:10:d4:
         26:9d:f6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:55:34 2025 by rpki-client