Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/34352e342e3134382e302f32322d3332203d3e20323636303733.roa
File:                     34352e342e3134382e302f32322d3332203d3e20323636303733.roa (raw, json)
Hash identifier:          QL8xJK7hM/kyoTtLChr0LeDEwR5NGa8CxHOEBhklRe4=
Subject key identifier:   27:CA:77:8E:B6:44:46:DD:EF:C5:AF:27:45:7F:37:09:E0:94:60:63
Certificate issuer:       /CN=DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85
Certificate serial:       5936096BA42779DC9981B221ADD5AFE890B73EB1
Authority key identifier: DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/34352e342e3134382e302f32322d3332203d3e20323636303733.roa
Signing time:             Thu 06 Mar 2025 22:39:19 +0000
ROA not before:           Thu 06 Mar 2025 22:34:19 +0000
ROA not after:            Thu 05 Mar 2026 22:39:19 +0000
asID:                     266073
IP address blocks:        45.4.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.crl
                          rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:36:09:6b:a4:27:79:dc:99:81:b2:21:ad:d5:af:e8:90:b7:3e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85
        Validity
            Not Before: Mar  6 22:34:19 2025 GMT
            Not After : Mar  5 22:39:19 2026 GMT
        Subject: CN=27CA778EB64446DDEFC5AF27457F3709E0946063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:e9:4b:8b:b3:60:67:77:7c:bc:39:5d:31:
                    2b:55:43:0e:ef:11:64:51:5b:32:61:83:e5:41:93:
                    6c:61:71:63:29:6d:16:27:b5:06:e7:a5:6f:0f:f0:
                    4b:45:ab:67:04:8c:4f:eb:0f:ff:81:18:08:01:32:
                    0b:72:95:12:30:fa:94:39:b3:75:18:fc:7f:3b:d4:
                    fc:9e:8f:c6:43:8f:a4:d6:95:d0:eb:b8:90:ba:ee:
                    36:e0:22:53:ab:a8:f8:db:4d:a4:dd:b0:44:8a:05:
                    d4:69:1b:99:60:73:47:c7:7a:8e:da:29:eb:df:1d:
                    89:5f:5a:c4:f4:1a:78:5e:5f:54:4a:34:1e:62:45:
                    9a:a0:65:27:55:10:10:f9:01:d1:01:b9:35:f9:7c:
                    63:42:3f:98:a5:07:03:4f:28:66:31:59:e2:46:4d:
                    03:df:1c:a6:b1:38:58:0d:7d:85:4c:a9:e6:c5:60:
                    8f:08:73:d4:a6:d4:fc:d4:09:63:bd:aa:a1:4c:7c:
                    b0:72:91:81:09:96:1a:c8:f4:86:78:d7:d4:e7:dd:
                    8e:5e:1b:23:a2:d2:a3:26:69:2d:9f:c8:ee:26:1b:
                    be:1a:37:d0:38:0c:19:6e:f9:e0:5d:55:19:5d:ed:
                    dc:ea:34:60:56:ce:c4:39:9e:68:3d:96:4d:6e:ef:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CA:77:8E:B6:44:46:DD:EF:C5:AF:27:45:7F:37:09:E0:94:60:63
            X509v3 Authority Key Identifier:
                keyid:DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/34352e342e3134382e302f32322d3332203d3e20323636303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:f4:b6:7d:6a:d6:9f:4f:4b:a5:a3:31:5e:7d:17:50:cd:f7:
         5a:21:7d:8b:94:8a:48:2c:0b:13:74:24:5b:01:60:4a:68:10:
         8a:45:b9:b1:5f:45:aa:d5:c7:d3:94:3a:c6:80:6a:ad:42:75:
         f0:c1:2b:9a:6c:7a:be:bf:c5:7d:ea:7c:12:84:d4:48:d1:2d:
         63:96:a6:fb:a3:6c:50:12:25:5d:36:60:b4:14:78:af:d1:6c:
         1f:67:fc:3f:2a:66:55:54:1a:f9:b0:6f:0c:28:0c:f3:66:0e:
         d0:63:1d:25:9b:85:29:7c:40:6a:6c:a8:63:58:69:fe:f2:70:
         19:b7:cd:b3:9d:4a:91:db:06:c4:a9:0a:da:4f:8c:08:49:c7:
         84:62:c4:83:3c:93:58:ec:52:fc:c2:e1:6a:cf:49:26:e4:e8:
         57:89:59:f3:df:33:8c:d4:19:45:a1:32:82:42:e6:d8:77:58:
         c1:32:05:35:b9:fc:01:11:2b:f8:5c:30:4c:b7:f7:f5:ef:9c:
         ab:7c:fd:51:b4:7d:8b:b2:a9:f7:1a:27:1c:d0:a2:5f:2b:92:
         fa:2f:1a:ce:b3:f6:3a:13:e6:cb:57:57:b8:74:fc:e9:77:c7:
         5f:41:06:39:d5:83:5d:25:3e:69:e2:22:9a:42:99:b7:eb:8c:
         61:15:1c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:11:54 2025 by rpki-client