Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa
File:                     34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa (raw, json)
Hash identifier:          ZSytagn0io8ordscWltef3mJBrwD+rC2j411ShxAXO4=
Subject key identifier:   F4:AD:6E:BE:BE:F3:1F:6A:FE:8C:ED:C1:F0:93:34:CA:F8:34:68:CB
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       4C3FA83AFCD4CC1516B10953BE92609ADBBDD0BD
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa
Signing time:             Thu 06 Mar 2025 13:53:28 +0000
ROA not before:           Thu 06 Mar 2025 13:48:28 +0000
ROA not after:            Thu 05 Mar 2026 13:53:28 +0000
asID:                     267177
IP address blocks:        45.230.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3f:a8:3a:fc:d4:cc:15:16:b1:09:53:be:92:60:9a:db:bd:d0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: Mar  6 13:48:28 2025 GMT
            Not After : Mar  5 13:53:28 2026 GMT
        Subject: CN=F4AD6EBEBEF31F6AFE8CEDC1F09334CAF83468CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:64:36:ca:b1:b9:2e:d0:7a:cc:64:37:cb:
                    bb:b3:d4:59:b3:11:fc:ef:87:b5:6f:45:0f:d4:1c:
                    d9:0d:4c:f1:5b:3f:99:58:cb:00:32:c5:7b:8c:57:
                    6e:c6:46:30:66:c4:8f:35:52:bb:b1:88:ef:fb:61:
                    15:9a:2e:98:a0:ce:6a:3e:4b:41:b3:5e:77:8b:b0:
                    4e:60:85:c1:ad:21:fa:a7:1a:96:36:ca:19:9d:4b:
                    bb:18:d5:00:a4:93:02:2b:38:f6:93:3f:22:02:a1:
                    85:c6:52:b8:c2:62:69:ab:f2:04:1e:37:a2:c8:7e:
                    d3:55:b1:2e:ee:a6:2d:dd:df:81:2d:7a:7e:ab:04:
                    a0:14:ba:d3:1f:bd:2d:9e:01:d0:d7:05:7a:98:6f:
                    4f:e6:2e:0b:ad:a9:10:bc:d8:c3:d2:e8:40:f2:eb:
                    38:ab:ee:c4:56:05:1d:27:4e:a3:9f:00:50:0f:21:
                    b2:79:b9:69:d1:48:65:d5:5b:1c:ac:52:26:d0:e7:
                    68:e7:bc:4b:7c:d3:d6:dc:54:33:52:63:42:16:3b:
                    fa:bb:72:a1:bf:b0:f0:8a:33:ea:af:a0:fb:32:92:
                    f4:6a:e2:79:79:32:c8:cf:ee:8b:b1:a7:f5:28:e5:
                    9e:05:79:6d:d8:af:bf:d1:69:89:ba:4e:d2:d3:40:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AD:6E:BE:BE:F3:1F:6A:FE:8C:ED:C1:F0:93:34:CA:F8:34:68:CB
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233332e302f32342d3234203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:86:c8:de:d1:3b:64:36:21:1d:67:b6:9c:66:fd:31:cf:59:
         aa:10:e6:cb:8e:a3:8f:ac:ce:71:46:be:05:2c:64:c4:8e:6e:
         ea:69:e1:e3:4e:5d:a1:03:f2:99:f5:66:a4:bb:25:fa:84:90:
         df:2c:4b:a4:08:c0:dc:d4:75:cb:df:eb:ce:e9:73:54:81:6b:
         2b:7c:0c:24:43:a3:cd:c2:27:c3:d6:c0:20:f7:e4:e6:f6:f2:
         6c:ed:25:30:d9:de:6c:61:c4:7e:ef:a7:25:03:b8:37:7a:6e:
         ca:cb:15:75:b8:fa:fc:6b:bc:1c:62:89:ba:b0:de:ca:33:d6:
         36:64:84:0e:6e:19:d2:8c:82:7c:c5:dd:1d:bd:88:09:d7:21:
         1f:af:18:2e:3d:5d:89:ea:e7:ba:36:36:09:31:ae:a2:30:e2:
         a1:6b:01:2c:1f:63:49:a9:9d:f4:7e:7f:83:99:b1:85:20:48:
         1a:e6:a3:c8:60:93:aa:37:64:43:90:04:6f:03:26:a9:8d:eb:
         7f:d7:d3:a7:ff:d7:cb:8b:bc:93:82:49:85:85:18:f0:54:7d:
         b1:87:a3:71:36:fd:b6:6f:74:2a:d5:74:cc:7f:90:95:13:ec:
         5c:b2:ec:b2:e6:7c:b2:68:71:47:8a:53:c3:ef:31:86:29:b9:
         df:69:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:00:57 2025 by rpki-client