Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37382e302f32332d3233203d3e20323638383930.roa
File:                     34352e3137352e37382e302f32332d3233203d3e20323638383930.roa (raw, json)
Hash identifier:          /8YRHw7/wHwXnPJdWt7KoyEDIFtFclBnvK1HauAgsVM=
Subject key identifier:   1D:0E:20:2F:24:24:C2:F7:72:F2:ED:FE:BB:93:C2:9B:88:2C:1D:6C
Certificate issuer:       /CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
Certificate serial:       0C6AA96A78FB9FC687967CA05291B398969DD7D0
Authority key identifier: A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37382e302f32332d3233203d3e20323638383930.roa
Signing time:             Tue 11 Mar 2025 19:57:22 +0000
ROA not before:           Tue 11 Mar 2025 19:52:22 +0000
ROA not after:            Tue 10 Mar 2026 19:57:22 +0000
asID:                     268890
IP address blocks:        45.175.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl
                          rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 11:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6a:a9:6a:78:fb:9f:c6:87:96:7c:a0:52:91:b3:98:96:9d:d7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
        Validity
            Not Before: Mar 11 19:52:22 2025 GMT
            Not After : Mar 10 19:57:22 2026 GMT
        Subject: CN=1D0E202F2424C2F772F2EDFEBB93C29B882C1D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:ea:36:4b:37:08:b2:b0:33:2a:20:11:da:
                    ab:43:93:6e:ec:14:2f:06:75:68:51:21:22:e1:b7:
                    bd:1c:9b:dd:88:1e:43:1e:d1:df:48:f7:8c:9f:4a:
                    54:6b:4d:2e:ee:80:ab:c6:d1:d3:f7:32:6d:cf:01:
                    c4:73:e9:40:cc:c5:95:47:a6:fb:a5:f1:35:6f:01:
                    7f:f0:64:0c:66:2e:88:30:50:90:00:e0:df:98:02:
                    c8:7c:d1:c5:c8:ef:08:7d:c7:dc:75:e6:23:75:4f:
                    79:3c:de:a0:76:39:95:06:12:0b:ba:e0:3d:ca:f7:
                    41:c8:07:24:aa:28:28:17:89:c5:ae:55:9f:27:26:
                    01:ba:a6:76:fe:8b:7d:da:f2:f5:b8:39:bb:01:ef:
                    52:cf:40:b0:bf:d5:bd:cc:62:2c:52:26:8d:fa:c9:
                    ff:d6:32:d8:cd:fa:86:65:92:f9:55:d1:0c:93:5d:
                    8e:b8:0c:d0:69:8c:44:43:28:05:b5:d0:b5:27:ce:
                    49:05:74:b0:66:56:3a:df:f2:79:2d:20:8b:77:5e:
                    93:4a:23:89:4a:fc:22:f4:e8:b5:d9:fb:04:66:c5:
                    e9:16:69:6b:d6:32:f9:64:c2:a6:fd:d0:03:5b:fb:
                    9d:98:e6:d7:82:73:47:be:e6:af:9e:c0:e9:3b:f5:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0E:20:2F:24:24:C2:F7:72:F2:ED:FE:BB:93:C2:9B:88:2C:1D:6C
            X509v3 Authority Key Identifier:
                keyid:A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37382e302f32332d3233203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:8a:c9:85:4d:03:be:6a:50:f2:bb:73:f8:13:06:ad:e8:54:
         9d:1c:37:de:53:5c:cb:ae:55:19:e3:2f:64:29:bc:0a:34:18:
         bb:99:41:4f:24:81:9a:9a:01:27:c8:76:9a:ed:81:3d:10:04:
         24:b8:7b:c8:22:3c:30:ff:f8:d7:11:de:a4:0f:ee:b5:f5:a2:
         40:5e:06:55:04:5d:48:7b:2c:17:f3:b9:3b:3d:06:06:1f:c3:
         2e:d4:e8:36:60:68:2b:90:ec:45:0d:04:15:60:46:76:8f:8f:
         b3:24:22:bf:ff:85:06:58:05:e9:9f:ef:cd:c5:ee:35:69:2e:
         47:38:41:9f:13:0a:43:bd:65:42:1d:33:07:75:af:c4:da:e5:
         cf:2e:c5:6f:d7:b4:ac:8c:b2:0b:86:ff:71:e8:1d:5e:29:36:
         45:67:1a:45:db:17:b1:d0:1c:9c:9c:6b:c3:d3:15:2e:96:68:
         0e:d2:d9:db:8d:c1:42:85:54:bb:0e:80:af:07:b7:3f:b4:65:
         c9:a6:c9:51:57:32:dc:45:09:a8:87:ee:ab:d0:96:7c:b1:00:
         90:97:e4:63:e9:a8:a4:53:77:ac:6b:13:e8:ee:f0:b7:8a:2a:
         73:6d:45:f0:03:33:fa:11:bc:d8:e8:a7:17:b5:db:e6:a3:5c:
         e8:07:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:13:35 2025 by rpki-client