Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/34352e3233342e3230302e302f32322d3234203d3e203532393734.roa
File:                     34352e3233342e3230302e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          pLzYOt2hnB5gBPu+VGg2BbJGkHqgosACBbTeTnTjBoY=
Subject key identifier:   CE:01:D7:4C:1A:8E:8D:69:5A:B4:E5:1B:BB:6F:39:B6:E1:AE:AE:7B
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       6E7B3858EC49266430D9909AE5C71D75EE046763
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/34352e3233342e3230302e302f32322d3234203d3e203532393734.roa
Signing time:             Fri 14 Mar 2025 14:01:27 +0000
ROA not before:           Fri 14 Mar 2025 13:56:27 +0000
ROA not after:            Fri 13 Mar 2026 14:01:27 +0000
asID:                     52974
IP address blocks:        45.234.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 20:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7b:38:58:ec:49:26:64:30:d9:90:9a:e5:c7:1d:75:ee:04:67:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Mar 14 13:56:27 2025 GMT
            Not After : Mar 13 14:01:27 2026 GMT
        Subject: CN=CE01D74C1A8E8D695AB4E51BBB6F39B6E1AEAE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:ac:e9:31:f2:a2:4c:7b:1a:47:4a:37:83:
                    ca:62:a7:30:f8:72:7a:9d:1b:db:a9:ea:f3:50:49:
                    7e:7a:b9:ff:eb:03:7e:94:78:19:58:33:06:70:14:
                    08:0c:ad:16:ee:f0:ed:72:db:48:e8:c8:4e:a6:75:
                    7b:33:38:64:6f:6d:51:8d:19:41:6f:49:34:4b:48:
                    8a:5f:29:7d:ec:5f:69:01:5f:8b:73:6b:00:3c:44:
                    59:82:c3:ee:8c:a4:42:98:81:63:42:d1:79:45:89:
                    de:16:8d:b4:52:e4:7f:cd:8a:2a:20:e6:d3:89:f9:
                    01:9a:0a:69:b5:1e:fa:e3:77:3a:f2:09:9a:00:12:
                    52:49:6a:bd:78:89:df:9a:1c:84:2a:37:bb:72:7b:
                    ac:66:0a:36:d9:30:02:44:c1:65:b3:af:df:93:f0:
                    73:5d:08:10:73:2b:4e:c9:8b:bf:94:a8:4a:f9:b1:
                    66:66:cf:e9:b0:5f:b6:d5:94:2f:18:e2:b5:02:71:
                    61:f4:75:5b:25:22:8f:f8:6d:71:21:0c:1c:92:12:
                    cf:96:df:a6:62:c7:0c:49:af:c2:30:f7:4f:4c:c6:
                    16:63:e4:93:09:78:34:2d:d5:cc:c2:fb:93:51:ba:
                    48:72:b8:3a:61:2b:4e:63:5b:7e:cd:45:34:6c:98:
                    16:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:01:D7:4C:1A:8E:8D:69:5A:B4:E5:1B:BB:6F:39:B6:E1:AE:AE:7B
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/34352e3233342e3230302e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:cd:74:ad:90:6a:a1:b8:9c:9c:c0:d0:7f:94:4d:35:56:d6:
         e9:23:e1:c0:29:69:fe:73:cc:9f:b3:1e:2c:58:ab:7c:da:03:
         76:e8:97:1a:87:01:b4:5f:bc:62:13:6b:aa:2b:bd:2f:e1:e7:
         2b:ff:4e:8b:47:52:26:dd:49:26:a4:03:92:08:77:d3:11:f6:
         17:5b:0d:6b:da:a2:23:a0:2a:df:f2:25:c6:dc:e3:ff:fe:15:
         ca:f7:58:10:7a:dc:76:e9:f6:68:cd:ec:94:cb:0b:70:90:8e:
         5e:3d:09:d6:4e:04:23:cd:19:fc:ef:c8:1e:ed:d4:43:ca:17:
         70:a2:cd:19:3e:17:75:4a:aa:4b:92:c8:36:6f:9c:dd:b5:ad:
         41:90:9b:2e:11:55:c1:39:a3:24:17:4b:bf:be:13:2e:cf:a9:
         4f:a5:0c:c7:dd:d7:26:87:0c:7c:4a:d7:dd:dd:4f:ec:c8:f1:
         d4:0c:d2:92:26:76:f3:f3:52:e2:dc:ce:2e:87:02:ee:7a:8e:
         10:d3:8f:7f:fa:e8:c1:87:b2:dc:3f:12:1e:5d:3a:7f:60:18:
         f1:86:4f:ef:ab:8f:85:d0:a3:25:b8:2e:70:78:00:c2:cd:ae:
         c2:f2:7b:4b:f3:fc:9b:32:1b:34:e8:f6:75:14:f2:01:5c:34:
         f8:3e:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:41 2025 by rpki-client