Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa
File:                     34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa (raw, json)
Hash identifier:          9WTrEZhwAN2iKPnZJ845CUVsIzl6ulTEz4wn1k4+pxk=
Subject key identifier:   89:91:61:8A:0D:73:CF:D7:69:B2:34:76:48:BB:B4:32:E7:E0:87:EA
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       7E6698A5AF1DE538C594185C113FDFE2DD17F963
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa
Signing time:             Thu 06 Mar 2025 13:53:28 +0000
ROA not before:           Thu 06 Mar 2025 13:48:28 +0000
ROA not after:            Thu 05 Mar 2026 13:53:28 +0000
asID:                     267177
IP address blocks:        45.230.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:66:98:a5:af:1d:e5:38:c5:94:18:5c:11:3f:df:e2:dd:17:f9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: Mar  6 13:48:28 2025 GMT
            Not After : Mar  5 13:53:28 2026 GMT
        Subject: CN=8991618A0D73CFD769B2347648BBB432E7E087EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:24:c8:f8:a1:f4:09:8e:81:a3:b3:24:6b:
                    38:c0:84:2d:46:48:cd:33:2d:b6:76:f4:98:d5:46:
                    07:e0:f0:da:c1:a8:a0:57:cd:11:fc:6e:fb:07:63:
                    b3:6e:0a:f1:28:3a:d4:ce:9a:1f:f8:ad:25:1f:32:
                    4a:aa:8c:6c:05:04:0d:e1:2c:31:7c:b7:5f:9d:7b:
                    64:b3:94:68:18:93:87:db:90:8e:58:53:a1:55:bf:
                    7c:94:0c:b0:a7:2d:75:65:10:e5:66:fc:e6:7b:26:
                    df:98:36:15:db:b8:f4:9d:ea:5b:21:e9:a7:14:61:
                    08:d8:e6:fb:ef:0f:9d:f9:96:b8:9f:f9:3a:4f:b2:
                    b8:35:47:61:b5:12:de:94:a5:f9:ca:18:13:13:80:
                    88:55:67:d4:4e:8b:2a:da:19:34:f1:a4:f3:fe:b5:
                    b5:32:c9:52:6e:90:79:38:cd:bd:9a:4c:ba:65:34:
                    57:5c:35:9f:f5:24:7b:17:df:96:5e:df:e5:c5:4b:
                    da:bf:03:bd:af:7d:0e:af:97:8b:c7:3f:a3:28:9f:
                    50:be:0e:10:21:05:36:04:8e:67:e2:89:0a:6a:75:
                    6a:94:c6:32:8f:c2:f3:b2:40:c3:6c:05:2a:91:bb:
                    82:ed:cb:f2:70:63:42:ed:4d:63:36:72:06:70:af:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:91:61:8A:0D:73:CF:D7:69:B2:34:76:48:BB:B4:32:E7:E0:87:EA
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/34352e3233302e3233342e302f32332d3233203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:3c:f2:48:3c:29:73:56:7d:4c:29:fb:e5:83:59:4c:c7:5c:
         68:fd:be:ec:5e:55:25:f4:1c:d9:44:ae:bd:64:3c:a8:29:fd:
         03:3e:d1:65:ad:88:4c:e1:7f:0e:ec:a0:8c:15:78:3c:f2:0a:
         50:79:f4:f8:56:6d:e7:7b:2c:e7:d6:f5:a9:73:e3:a5:77:96:
         f8:9b:53:fb:73:dc:e0:60:ea:8f:f3:1f:09:72:79:f8:58:2c:
         c8:1f:0f:4a:8c:ac:f6:51:21:6c:3b:6a:07:ab:82:aa:b9:8b:
         8b:d9:f6:b3:1a:5d:a5:d7:cf:50:78:82:9e:ab:f9:68:84:5e:
         9b:8d:96:1c:dc:36:0d:fa:61:c1:9d:d3:7e:e7:1f:83:ae:c1:
         c6:d4:06:c3:18:a6:70:53:3d:43:41:b1:c3:9f:76:76:99:f2:
         1e:2f:07:22:74:a0:dc:a4:94:73:5f:e7:2a:70:c7:16:62:a2:
         54:66:ca:e7:af:e0:fc:39:9e:7d:df:fb:35:ff:f2:4d:9d:3b:
         81:71:c3:5a:b8:72:f8:54:c8:e0:ac:a7:5c:f1:9f:4b:c1:f5:
         1a:24:ae:57:3c:4c:8e:2b:9a:b2:11:1c:b3:21:11:0a:a4:a5:
         35:ae:5d:73:98:36:67:96:ef:a5:d1:02:69:c5:18:a5:9b:76:
         7a:19:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:41 2025 by rpki-client