Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa
File:                     34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa (raw, json)
Hash identifier:          76s2iJW/3M+Uyfm01NT4dafE+smEG5jqwgpm9H5GP+k=
Subject key identifier:   CB:37:82:6F:96:6A:16:12:ED:96:E8:5F:46:D3:0B:FB:AF:74:FA:2C
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       07FEDD5F24AC2AF73810C2C90BD8FC0309F6372E
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa
Signing time:             Thu 06 Mar 2025 17:57:49 +0000
ROA not before:           Thu 06 Mar 2025 17:52:49 +0000
ROA not after:            Thu 05 Mar 2026 17:57:49 +0000
asID:                     271632
IP address blocks:        45.172.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 10:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fe:dd:5f:24:ac:2a:f7:38:10:c2:c9:0b:d8:fc:03:09:f6:37:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Mar  6 17:52:49 2025 GMT
            Not After : Mar  5 17:57:49 2026 GMT
        Subject: CN=CB37826F966A1612ED96E85F46D30BFBAF74FA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:65:31:92:0a:ac:4a:73:d6:bb:2f:f8:6c:fb:
                    3d:a4:6b:1e:68:cc:e3:1d:f3:f2:a7:a8:6e:56:62:
                    c5:d5:93:bc:c3:a8:57:20:14:57:90:9c:00:28:74:
                    f3:e4:48:8d:bc:33:08:17:c6:30:28:43:d6:7f:b2:
                    9f:54:e5:7f:09:f7:0b:4a:83:36:6b:b0:a9:b5:81:
                    4a:e0:35:b2:b0:ea:06:e2:22:56:27:aa:45:6d:e7:
                    0d:f7:0f:da:1b:9b:77:9f:d5:91:b4:2f:da:fb:8d:
                    59:5f:43:02:11:77:ef:ff:d2:e5:3f:2e:58:1f:74:
                    a0:bb:60:b0:fb:d0:a6:1c:47:fb:ff:30:57:bd:15:
                    11:10:b4:8a:c1:28:8e:e8:b6:52:cc:10:4e:15:07:
                    fb:6d:d9:a4:74:e8:33:a6:1a:e0:89:e2:88:5b:08:
                    7f:ce:10:0d:cd:f1:70:e8:c5:de:04:7a:0d:79:bf:
                    d0:ee:18:5a:80:a8:19:d6:21:5e:82:f3:35:c4:d1:
                    62:40:8f:b5:7a:9b:31:2a:a8:67:71:d1:41:d5:56:
                    0a:94:b5:1f:18:b0:f9:ca:56:d6:06:2b:4a:57:5b:
                    ea:ab:51:f4:c9:28:e1:86:f0:ce:f1:1c:25:ab:b8:
                    0c:fe:d0:72:a7:8c:d2:cc:ca:3b:08:b7:89:34:c0:
                    53:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:82:6F:96:6A:16:12:ED:96:E8:5F:46:D3:0B:FB:AF:74:FA:2C
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:9a:21:76:ab:03:3d:63:d0:40:89:d6:2b:63:a5:73:92:
         25:4c:dd:75:dd:d4:e3:03:dd:31:5b:46:80:f2:01:bb:cf:18:
         67:05:bf:9e:0c:d8:2e:fe:21:22:94:37:5d:91:82:63:70:64:
         1c:ca:b0:36:3e:99:be:a5:37:bb:cc:1e:d1:9c:35:ef:c8:4f:
         33:a2:77:98:3f:c9:7e:3a:2f:d1:7d:a8:99:c7:65:3e:fc:0c:
         92:ab:03:39:94:71:e6:7c:38:49:9d:4f:09:15:2d:73:1d:2f:
         28:91:0d:0c:18:fb:32:fb:1c:43:14:f7:73:65:34:cf:9a:e1:
         d6:13:da:2b:21:29:68:1b:6f:54:ef:80:d7:92:6f:e5:b2:b8:
         9b:3a:de:ff:72:4a:92:49:0f:62:de:93:3c:ca:9d:45:e9:05:
         1b:b1:5f:1b:a7:ab:24:1c:87:51:98:7a:f4:3b:56:2f:b5:df:
         96:21:9c:5e:5c:91:79:a5:80:21:58:2c:a5:79:6f:76:fd:1e:
         0b:04:64:54:af:ec:2a:85:e7:ba:d1:d0:6f:b7:19:cb:e1:6a:
         80:27:5a:29:15:0e:e4:87:77:d8:de:19:47:b2:91:06:fe:e8:
         a2:40:2b:5c:bf:58:94:92:7f:71:fc:e2:c2:20:5c:cb:12:f4:
         9e:95:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:26 2025 by rpki-client