Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139322e302f32332d3233203d3e20323731363332.roa
File:                     34352e3137322e3139322e302f32332d3233203d3e20323731363332.roa (raw, json)
Hash identifier:          xUhjSY1RuvBZ+CtG3BRNS5ndNwgB+gn6tZID73knRB4=
Subject key identifier:   70:7F:D0:CF:7F:BF:88:A3:53:39:FD:7C:A2:CA:8D:E7:1A:5B:D3:93
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       76D624B905FA47878B4DBB8FF0E8CA0B9854559B
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139322e302f32332d3233203d3e20323731363332.roa
Signing time:             Thu 06 Mar 2025 17:57:48 +0000
ROA not before:           Thu 06 Mar 2025 17:52:48 +0000
ROA not after:            Thu 05 Mar 2026 17:57:48 +0000
asID:                     271632
IP address blocks:        45.172.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 10:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d6:24:b9:05:fa:47:87:8b:4d:bb:8f:f0:e8:ca:0b:98:54:55:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Mar  6 17:52:48 2025 GMT
            Not After : Mar  5 17:57:48 2026 GMT
        Subject: CN=707FD0CF7FBF88A35339FD7CA2CA8DE71A5BD393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:d0:f3:45:b3:42:26:7d:66:5e:c1:06:99:
                    0a:73:8e:5d:f9:70:92:0a:86:67:8b:db:60:6c:9a:
                    5a:b7:bf:00:5d:29:bb:64:c1:e9:73:19:d0:a6:a7:
                    20:6f:14:ef:88:3c:02:7b:62:e5:0d:8b:7f:c5:83:
                    5e:d0:08:cf:64:96:b7:ab:cc:43:b4:78:82:32:91:
                    83:e4:86:15:eb:ef:f8:b3:41:0d:b1:32:05:dd:ea:
                    c9:0f:8c:42:3b:af:f3:86:c1:4e:dc:7c:59:5a:87:
                    c0:03:f5:4c:f1:a8:c4:05:bb:95:05:10:a4:54:17:
                    0b:bb:b6:14:e5:cc:1e:03:6e:80:b7:83:de:56:cf:
                    68:91:24:6c:89:44:1b:8f:c4:ec:50:20:b6:db:e3:
                    d8:88:7d:a7:ea:77:a4:af:ee:b8:ac:bd:6d:d2:6e:
                    c6:1f:c9:e9:af:65:84:47:da:28:7b:c1:96:9a:a7:
                    c9:e5:bd:fa:6b:bb:16:3d:51:29:3c:e5:28:59:ed:
                    13:51:40:f3:de:d7:33:2a:3c:56:5c:77:6a:43:67:
                    78:f1:3f:10:b8:50:ea:27:43:48:66:57:e7:96:07:
                    6c:15:2f:2f:0a:ef:d5:70:64:3f:19:fc:5e:ce:75:
                    67:a0:ec:91:df:83:8f:ec:ac:88:3a:df:de:ab:83:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7F:D0:CF:7F:BF:88:A3:53:39:FD:7C:A2:CA:8D:E7:1A:5B:D3:93
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139322e302f32332d3233203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:aa:f0:04:98:0a:64:56:2e:25:b6:dc:dd:0a:df:ac:41:54:
         c1:3a:79:df:29:22:f6:ac:b2:47:99:f4:b3:5e:59:18:c4:a6:
         6d:dc:4b:51:59:d4:d2:82:8c:21:5b:f5:05:9e:c2:57:fb:9a:
         b0:50:af:66:db:87:40:b9:53:50:06:98:96:59:1c:73:ff:4f:
         0f:58:47:b3:a8:60:55:1b:49:79:3f:66:19:e5:1a:98:29:b0:
         c2:c1:cf:2b:b8:26:eb:7b:3a:d6:ab:b2:d9:71:7d:61:81:0a:
         88:5d:1a:41:22:90:d1:ac:b4:a6:1e:14:c6:e1:a0:53:2e:57:
         6e:2c:e7:f7:ac:84:23:01:7f:ca:f6:fe:85:5b:5b:bb:cc:38:
         6b:9a:96:ee:54:02:22:9f:4a:9e:29:08:ea:d5:16:cc:61:c5:
         65:39:1b:47:4e:f5:fe:7f:05:fa:9e:34:b2:6b:7b:12:76:ec:
         22:91:56:89:fc:4d:99:a0:f7:5c:cf:44:7e:25:ca:ed:88:c1:
         0b:21:9f:65:84:a0:cc:9e:14:ad:93:0f:90:03:7c:db:4e:f7:
         14:b5:40:26:6f:df:bc:56:14:98:ed:c4:57:33:d7:22:de:6d:
         cc:b8:3f:cf:ce:73:55:b2:57:d4:b7:2f:02:0a:17:31:9d:62:
         1f:0c:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:34 2025 by rpki-client