Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32332d3233203d3e20323638383930.roa
File:                     34352e3137352e37362e302f32332d3233203d3e20323638383930.roa (raw, json)
Hash identifier:          Jhfd8pikICEU79UyKd2n/mxI+ikZS1JnwA8eE0VY894=
Subject key identifier:   C9:15:3A:A1:6B:DC:A2:22:03:9F:48:F1:9B:71:59:62:6C:4B:4D:45
Certificate issuer:       /CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
Certificate serial:       28EA8133FA082CAB8719F2792E90E3474A557543
Authority key identifier: A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32332d3233203d3e20323638383930.roa
Signing time:             Tue 11 Mar 2025 19:57:23 +0000
ROA not before:           Tue 11 Mar 2025 19:52:23 +0000
ROA not after:            Tue 10 Mar 2026 19:57:23 +0000
asID:                     268890
IP address blocks:        45.175.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl
                          rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 11:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ea:81:33:fa:08:2c:ab:87:19:f2:79:2e:90:e3:47:4a:55:75:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
        Validity
            Not Before: Mar 11 19:52:23 2025 GMT
            Not After : Mar 10 19:57:23 2026 GMT
        Subject: CN=C9153AA16BDCA222039F48F19B7159626C4B4D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:33:49:06:bb:1a:95:d1:1a:9f:0b:08:9b:
                    ef:4c:1b:25:53:9a:d0:27:c7:13:24:17:d0:42:e1:
                    a5:b9:3e:ed:4c:4c:26:68:8f:01:50:c3:59:25:ef:
                    17:35:ea:f0:48:81:de:1f:ec:71:eb:11:37:d3:06:
                    d9:e0:26:e1:97:dd:90:4d:7b:d9:b5:bd:dc:67:eb:
                    0e:31:3c:98:e6:dd:6b:c6:27:cb:2d:21:a6:17:a3:
                    fe:6c:7b:60:ef:dd:4a:69:91:58:e8:d3:02:81:d5:
                    b0:5c:f2:43:4f:81:28:c7:54:d6:e0:32:a3:66:f8:
                    49:8c:68:68:b3:ec:38:d3:af:f7:ab:6a:13:e2:4e:
                    2c:fe:5f:6a:21:3f:76:a2:8e:80:6a:b5:77:90:c6:
                    77:fb:85:d9:8e:b4:69:a9:fa:e0:5a:38:50:77:d8:
                    88:43:e3:2e:c4:91:cd:ae:0e:cb:37:09:5f:2d:0c:
                    88:6d:3a:90:8c:d9:da:a3:f3:48:11:72:30:ed:7c:
                    53:33:dc:b1:1d:62:39:00:ef:13:99:0a:a0:3d:3f:
                    95:88:aa:a8:c5:cf:ad:45:98:8f:83:25:4c:fa:b0:
                    6e:d2:e0:47:c8:d5:f3:3d:6f:7d:ec:eb:8e:de:fb:
                    72:22:09:38:fe:42:c8:24:17:21:7d:ab:19:d6:13:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:15:3A:A1:6B:DC:A2:22:03:9F:48:F1:9B:71:59:62:6C:4B:4D:45
            X509v3 Authority Key Identifier:
                keyid:A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32332d3233203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:5f:90:59:67:a2:a7:17:9c:aa:57:08:5f:36:08:d5:16:bf:
         3f:3b:01:eb:db:c3:8e:9f:2c:04:8e:d3:d0:a9:88:0f:3e:38:
         b1:97:14:e6:de:6b:13:a4:89:05:a0:5c:f3:6d:e1:35:3a:96:
         2d:72:3b:38:43:99:fc:2b:75:ac:a0:6d:c3:37:25:eb:c1:56:
         93:6f:27:30:6b:d3:4b:ad:77:b5:a6:e1:38:d8:3e:8b:11:b1:
         85:e5:d5:70:11:9c:88:c4:ad:7d:42:6f:36:44:55:42:3b:45:
         d5:a6:db:6b:c2:99:70:44:30:b5:3f:76:53:fd:de:2d:f2:36:
         59:c0:be:30:5d:17:d4:d4:cc:c3:52:61:a0:37:18:34:8e:81:
         0a:55:c9:40:c5:7a:37:e7:59:67:51:35:0a:97:52:10:ce:6d:
         7c:9a:5d:70:dd:59:b0:35:e9:5d:eb:5e:92:59:cf:53:67:4a:
         fc:36:c0:18:3c:3d:cf:c4:bf:81:9c:a5:40:bb:c6:e7:b0:a4:
         0b:a4:e4:d7:40:d4:95:c8:60:bc:29:92:5c:99:6b:e9:47:8f:
         ec:55:bb:2e:60:e7:90:f3:8b:08:c5:e2:f3:df:67:5c:1a:8e:
         34:21:7d:03:6c:a1:88:d9:52:e7:4e:19:b7:8b:9a:ed:2f:2b:
         02:e4:4c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:11:07 2025 by rpki-client