Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233322e302f32342d3332203d3e20323637313737.roa
File:                     34352e3233302e3233322e302f32342d3332203d3e20323637313737.roa (raw, json)
Hash identifier:          dphLzFHEk3uEJRWgNjoiQjPscx8SzHqwQ1LJr36za7g=
Subject key identifier:   E9:D3:73:F4:59:69:2F:11:5B:EB:7D:60:E6:27:10:7A:1B:29:05:DD
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       0783D740F437E8E0C83B351C89401343209B06A0
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233322e302f32342d3332203d3e20323637313737.roa
Signing time:             Thu 06 Mar 2025 13:53:28 +0000
ROA not before:           Thu 06 Mar 2025 13:48:28 +0000
ROA not after:            Thu 05 Mar 2026 13:53:28 +0000
asID:                     267177
IP address blocks:        45.230.232.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:83:d7:40:f4:37:e8:e0:c8:3b:35:1c:89:40:13:43:20:9b:06:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: Mar  6 13:48:28 2025 GMT
            Not After : Mar  5 13:53:28 2026 GMT
        Subject: CN=E9D373F459692F115BEB7D60E627107A1B2905DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:2f:c2:3d:87:05:4b:c2:fd:5e:60:9e:4c:
                    c9:3f:d7:88:fd:58:76:eb:42:04:cf:04:f6:19:52:
                    d4:ae:3b:82:6e:ba:2a:bc:c0:e0:e5:da:85:0d:16:
                    ed:56:0b:4a:e9:93:9f:56:2a:93:ae:bf:b5:40:5a:
                    f8:2a:01:b9:64:27:6d:16:8a:31:b8:3a:86:2d:84:
                    4d:2d:94:a7:2f:13:1d:61:83:c7:c3:d9:ea:95:6f:
                    97:7c:75:dc:74:8e:da:a8:cf:6f:8d:05:c0:b8:bd:
                    52:ac:4a:f4:33:b5:35:b4:d7:5d:4f:df:af:56:03:
                    6f:30:90:c3:31:bc:9a:8c:61:83:50:52:02:a7:36:
                    2f:3c:bf:c9:7e:dc:c9:dc:47:eb:b5:fb:c1:69:d2:
                    22:7d:21:2c:6b:fe:72:6d:de:ea:6b:39:ea:65:5a:
                    c5:57:12:ab:ab:14:5c:9c:2e:09:8b:10:a4:49:f6:
                    3d:66:85:70:51:55:aa:bd:7b:d9:5e:a9:f2:61:db:
                    3e:28:dc:d8:cb:e0:d8:44:1c:a9:f7:e8:fd:6c:0d:
                    f8:00:78:29:db:6d:25:a5:70:71:da:55:f7:5b:1d:
                    8e:5d:6c:2e:29:91:a7:bb:70:a5:d6:dd:bf:58:26:
                    4b:f4:5e:bb:d9:ee:d9:89:a0:da:aa:d0:88:35:43:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D3:73:F4:59:69:2F:11:5B:EB:7D:60:E6:27:10:7A:1B:29:05:DD
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233322e302f32342d3332203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d0:95:64:4e:c0:e0:03:df:e6:97:85:b7:03:81:88:8c:00:
         3d:f2:24:98:f4:40:c8:c5:90:66:e2:dd:d8:c8:3f:3c:46:2c:
         6c:d1:93:f8:a2:78:4c:d8:9f:77:5a:21:c0:6a:f9:82:0c:5c:
         2f:d5:69:30:f9:f9:30:b7:d0:83:ef:47:78:ad:45:37:d8:aa:
         18:0c:45:99:90:58:cc:77:4d:f4:9e:7b:fd:8e:f2:01:29:22:
         0a:15:d7:81:21:a5:66:d9:a4:b0:36:4f:29:38:76:8a:bf:14:
         21:ca:39:a0:4d:13:bd:a7:70:51:be:0b:23:b3:33:87:c6:94:
         13:9e:ad:36:10:46:99:3d:f3:b2:a4:31:11:61:ac:e8:a5:98:
         d1:25:1e:1c:0f:de:74:41:14:7b:a4:19:38:84:d1:81:23:d4:
         2c:ac:19:4b:2e:69:14:5c:64:b0:46:66:3f:a5:68:65:25:d6:
         1f:8a:fb:19:50:d5:4c:6f:33:e8:89:0c:53:36:1e:70:a8:60:
         8b:32:e6:bd:32:be:38:23:c6:8c:59:05:f2:5e:7f:08:04:83:
         b6:24:ec:dd:5b:0f:d0:98:37:a2:93:5d:a5:12:9c:e1:77:0d:
         1f:79:fd:12:3d:20:c5:51:97:bb:74:1c:a4:cc:05:e5:86:4b:
         61:66:56:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:57:00 2025 by rpki-client