Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/34352e37312e3130342e302f32332d3234203d3e20323637363034.roa
File:                     34352e37312e3130342e302f32332d3234203d3e20323637363034.roa (raw, json)
Hash identifier:          POy2VMcpEBgijMiI4aj+caCbUqrskdIM+VkKI4AJcdk=
Subject key identifier:   0B:57:4C:7E:7F:E3:D9:6E:29:02:79:8C:00:8B:02:87:37:52:EF:C7
Certificate issuer:       /CN=62504691574999BE3FC471A877B8D5C052A750B8
Certificate serial:       153B038B6D846124D02196355A1BF9B2C8DE6A27
Authority key identifier: 62:50:46:91:57:49:99:BE:3F:C4:71:A8:77:B8:D5:C0:52:A7:50:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62504691574999BE3FC471A877B8D5C052A750B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/34352e37312e3130342e302f32332d3234203d3e20323637363034.roa
Signing time:             Thu 06 Mar 2025 17:45:59 +0000
ROA not before:           Thu 06 Mar 2025 17:40:59 +0000
ROA not after:            Thu 05 Mar 2026 17:45:59 +0000
asID:                     267604
IP address blocks:        45.71.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/62504691574999BE3FC471A877B8D5C052A750B8.crl
                          rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/62504691574999BE3FC471A877B8D5C052A750B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62504691574999BE3FC471A877B8D5C052A750B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 21:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3b:03:8b:6d:84:61:24:d0:21:96:35:5a:1b:f9:b2:c8:de:6a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62504691574999BE3FC471A877B8D5C052A750B8
        Validity
            Not Before: Mar  6 17:40:59 2025 GMT
            Not After : Mar  5 17:45:59 2026 GMT
        Subject: CN=0B574C7E7FE3D96E2902798C008B02873752EFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7b:ee:97:3a:5f:09:20:e6:85:e4:b6:e5:b0:
                    d7:55:d7:3f:68:60:01:14:8c:56:10:8c:ea:49:ec:
                    19:33:f2:9a:36:3d:02:8f:c1:7c:7b:ae:5b:29:c1:
                    52:67:21:08:d6:5f:52:43:70:30:7f:71:6c:f6:9f:
                    88:b7:25:98:a4:d6:f3:77:77:33:9c:11:73:ea:62:
                    a5:cc:43:51:d7:a5:d7:b5:e0:3a:9f:11:8e:40:07:
                    d1:62:fa:69:0f:ba:14:0d:e0:90:dc:65:bf:a5:02:
                    91:ad:29:26:62:c0:f9:1c:1c:c6:7d:d5:2a:ba:95:
                    2e:c1:13:7d:7d:d7:28:ed:b3:46:20:b0:4f:0b:7f:
                    d8:7b:79:11:78:3a:0a:c7:68:3f:0d:c7:a8:dd:a9:
                    ac:f7:4a:3c:fb:7f:d9:2c:d2:1f:f2:f3:80:26:ac:
                    39:1d:99:70:a6:f4:0d:43:84:32:ab:16:a4:bd:fa:
                    b2:95:aa:54:09:45:1b:12:a0:6f:4b:ca:b5:55:69:
                    73:3d:ae:f2:28:c8:09:f9:f3:90:ae:41:77:e5:ef:
                    a1:3c:1c:29:94:94:65:4a:7b:e6:5d:3d:37:a2:89:
                    4e:c4:f4:53:3c:6c:0d:1d:5a:b9:a4:51:92:a4:18:
                    41:4f:e8:a7:53:93:ef:93:24:58:fe:f2:89:0c:eb:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:4C:7E:7F:E3:D9:6E:29:02:79:8C:00:8B:02:87:37:52:EF:C7
            X509v3 Authority Key Identifier:
                keyid:62:50:46:91:57:49:99:BE:3F:C4:71:A8:77:B8:D5:C0:52:A7:50:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/62504691574999BE3FC471A877B8D5C052A750B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62504691574999BE3FC471A877B8D5C052A750B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/1/34352e37312e3130342e302f32332d3234203d3e20323637363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:6f:c6:47:86:8c:ea:27:af:74:83:d7:84:72:6d:7a:61:39:
         5b:be:16:07:f7:ef:b4:d2:01:bb:12:08:7f:8a:84:b1:f6:ba:
         37:76:e6:f6:51:b9:80:fc:f3:b5:1a:4b:72:b2:aa:a9:11:2f:
         02:f6:71:be:b5:f0:f1:4f:3d:a4:31:9a:a0:04:de:10:eb:2b:
         d8:46:ba:9d:8e:2b:7e:34:59:a2:71:bb:ef:4b:51:ec:f2:ae:
         3b:e9:59:f4:2b:73:88:d4:4b:96:9e:e9:ca:ce:08:fd:4f:8b:
         79:3a:e6:24:7d:10:27:05:d2:ad:8c:37:c9:13:66:9f:f4:6c:
         04:26:88:9d:e3:30:4b:1d:bf:47:10:ce:cd:b7:23:8f:64:f2:
         3a:69:13:f2:3a:4a:65:39:a0:58:19:b4:d0:26:e9:f1:86:df:
         27:8d:af:d7:0f:6e:83:dc:b0:6c:df:96:2e:10:02:a5:00:d0:
         3e:c5:93:f6:52:f0:28:ba:63:e9:ca:dd:98:03:8d:24:15:f1:
         4b:83:b5:6f:47:7b:7e:51:7e:6f:cd:69:05:4f:0e:b0:de:5a:
         65:7f:0f:7c:1d:21:b4:8f:ac:ad:19:bb:62:8b:87:2a:09:81:
         63:7b:b8:30:f8:1c:9e:e2:2c:ca:ab:0c:6a:61:4b:bd:7a:2c:
         d3:91:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:25 2025 by rpki-client