Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/34352e3137392e3131362e302f32322d3331203d3e20323639303736.roa
File:                     34352e3137392e3131362e302f32322d3331203d3e20323639303736.roa (raw, json)
Hash identifier:          e9VXde7DMBPoCKEaT5+3go40ga0DkLK0yZiFtqJFmC0=
Subject key identifier:   F5:8A:12:26:6C:4A:6A:5A:7A:E1:F5:B5:11:8E:D9:94:FC:10:66:60
Certificate issuer:       /CN=C84DDE59A10C277CB96F5773B9F9ABC54B3C3273
Certificate serial:       76F1B6D6184EA0C8C6244CBB45B49C7C60A90318
Authority key identifier: C8:4D:DE:59:A1:0C:27:7C:B9:6F:57:73:B9:F9:AB:C5:4B:3C:32:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C84DDE59A10C277CB96F5773B9F9ABC54B3C3273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/34352e3137392e3131362e302f32322d3331203d3e20323639303736.roa
Signing time:             Tue 28 Jan 2025 22:40:06 +0000
ROA not before:           Tue 28 Jan 2025 22:35:06 +0000
ROA not after:            Tue 27 Jan 2026 22:40:06 +0000
asID:                     269076
IP address blocks:        45.179.116.0/22 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/C84DDE59A10C277CB96F5773B9F9ABC54B3C3273.crl
                          rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/C84DDE59A10C277CB96F5773B9F9ABC54B3C3273.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C84DDE59A10C277CB96F5773B9F9ABC54B3C3273.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 00:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f1:b6:d6:18:4e:a0:c8:c6:24:4c:bb:45:b4:9c:7c:60:a9:03:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C84DDE59A10C277CB96F5773B9F9ABC54B3C3273
        Validity
            Not Before: Jan 28 22:35:06 2025 GMT
            Not After : Jan 27 22:40:06 2026 GMT
        Subject: CN=F58A12266C4A6A5A7AE1F5B5118ED994FC106660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:14:e3:ff:75:2d:6d:c4:d9:83:2c:a2:9c:
                    d4:b3:8e:f1:39:c0:c3:57:e5:20:8f:58:a8:c3:5c:
                    45:25:61:eb:af:69:ad:2a:85:16:9f:5b:a2:50:e6:
                    dc:20:7d:74:88:b7:27:17:99:86:4a:ce:aa:f9:53:
                    b6:94:23:17:05:7b:73:2b:ce:cf:b9:cd:a8:e1:4e:
                    16:19:ca:1b:92:8f:fd:43:5c:63:d3:f4:a7:cf:00:
                    35:80:ec:fc:40:35:82:0f:2e:58:0c:b6:e6:27:ea:
                    1f:fc:09:9a:c6:4f:ed:30:7b:82:b2:75:2b:23:9d:
                    7b:a7:6b:9c:17:80:10:00:7e:8b:a8:a3:69:0d:d0:
                    cc:f7:53:b4:67:b6:e8:c0:1f:28:d5:db:7b:86:ea:
                    c0:54:39:ca:a7:22:03:2c:6e:54:10:34:9f:c0:d9:
                    1e:ea:17:08:13:fe:24:ee:cf:5a:71:9e:9c:f2:22:
                    93:3f:43:8e:db:01:cc:26:ed:d9:80:b4:90:e7:c3:
                    57:9b:fd:75:01:0e:05:bf:97:2e:7d:c0:d7:47:04:
                    85:73:77:2a:d6:06:92:d2:88:38:9e:ab:41:a5:cf:
                    a5:30:5d:7b:d3:10:c3:b2:04:4f:de:0e:fb:28:7c:
                    03:b8:c0:97:35:dc:5d:f7:14:51:3a:37:70:17:3c:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8A:12:26:6C:4A:6A:5A:7A:E1:F5:B5:11:8E:D9:94:FC:10:66:60
            X509v3 Authority Key Identifier:
                keyid:C8:4D:DE:59:A1:0C:27:7C:B9:6F:57:73:B9:F9:AB:C5:4B:3C:32:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/C84DDE59A10C277CB96F5773B9F9ABC54B3C3273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C84DDE59A10C277CB96F5773B9F9ABC54B3C3273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh9N3z7MqjzBNn9jeX3vqZwge4FpxCKiFvHwveabYftw/0/34352e3137392e3131362e302f32322d3331203d3e20323639303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:d1:10:4a:f6:88:00:d7:88:dc:1c:94:a6:f9:c6:11:68:2c:
         e5:29:05:97:c4:85:3a:1f:54:db:ba:2f:62:a0:7a:c7:27:99:
         f5:5f:81:88:bf:18:9a:35:50:9f:cd:9d:15:fa:15:34:bf:e1:
         95:a4:77:1f:e1:d6:7c:3e:3c:9b:6f:cb:82:d8:32:57:66:aa:
         31:ba:36:1c:68:b9:c0:6d:6a:c2:8a:61:7b:ae:0a:ca:88:fa:
         43:91:8c:14:f2:76:50:58:44:5b:7b:55:f6:83:fa:c1:79:f3:
         62:70:36:ff:e8:33:2b:1a:b7:a2:82:71:7f:f0:8c:6a:a9:3c:
         23:8b:54:72:b1:5c:bd:f9:97:8d:a7:2f:2f:17:8f:b8:ca:c2:
         e3:a3:3f:ec:0b:fe:22:f1:e9:d9:3e:5b:87:7c:4c:97:3b:5d:
         1a:c9:2c:2c:e4:a1:9a:e4:73:32:45:ba:47:83:30:d3:38:15:
         4f:80:74:51:b4:12:de:39:dc:71:75:18:70:b7:2b:59:06:9e:
         20:bf:de:51:61:3b:fc:cb:46:7c:6a:63:a3:a0:c0:a1:c6:0b:
         94:28:52:01:a6:78:a8:73:f8:44:dc:84:56:fd:bc:1f:67:39:
         79:4d:32:cf:17:55:8c:ae:e0:e3:9c:44:d5:b1:2b:b3:f4:29:
         1d:28:57:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:34:47 2025 by rpki-client