Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/34352e3138302e31362e302f32322d3234203d3e20323731323533.roa
File:                     34352e3138302e31362e302f32322d3234203d3e20323731323533.roa (raw, json)
Hash identifier:          Nf+xU4blwD0X0As5SResq4LdKOlUrjeZB1DEmIYQBKE=
Subject key identifier:   C4:7D:5C:A7:3E:63:48:6F:24:F0:EB:39:22:7B:B7:0D:41:BA:D7:3F
Certificate issuer:       /CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
Certificate serial:       034E88EF12380DE0795CF08F895EB0C4885C7555
Authority key identifier: CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/34352e3138302e31362e302f32322d3234203d3e20323731323533.roa
Signing time:             Thu 15 May 2025 13:09:03 +0000
ROA not before:           Thu 15 May 2025 13:04:03 +0000
ROA not after:            Thu 14 May 2026 13:09:03 +0000
asID:                     271253
IP address blocks:        45.180.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 12:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4e:88:ef:12:38:0d:e0:79:5c:f0:8f:89:5e:b0:c4:88:5c:75:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D
        Validity
            Not Before: May 15 13:04:03 2025 GMT
            Not After : May 14 13:09:03 2026 GMT
        Subject: CN=C47D5CA73E63486F24F0EB39227BB70D41BAD73F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:bb:06:6b:17:2b:d8:fd:f4:42:55:8f:c3:
                    2d:fe:2e:5c:6f:25:dd:17:81:0d:fb:79:1e:7d:b2:
                    29:24:66:cb:c7:0f:01:48:45:91:9d:29:7d:af:80:
                    82:20:62:76:bb:8c:b1:bc:72:45:65:60:c6:38:1c:
                    9a:36:c3:d5:47:26:ae:bb:31:a2:b1:d5:fb:63:b9:
                    77:ed:d9:02:bf:41:7e:03:a1:5d:bb:fb:45:24:52:
                    86:0e:f7:3f:cc:5a:89:fb:d9:22:b1:f5:a3:d4:d2:
                    01:1c:ad:02:58:55:6f:0f:af:67:bc:42:34:da:6a:
                    0c:e3:a0:51:70:19:8b:8a:cd:1d:ea:6c:48:5f:cb:
                    1e:b5:93:82:ce:6b:1d:08:44:7c:f2:c4:95:f6:c5:
                    24:e6:82:c5:6c:80:27:14:4d:77:d7:de:66:59:af:
                    c9:d6:40:87:f2:01:f5:80:83:40:d8:73:49:12:32:
                    d3:33:f5:bb:cb:e7:5f:35:21:44:90:25:5e:68:09:
                    1e:5c:da:8e:95:b1:8e:7b:94:eb:82:58:0d:98:91:
                    bd:26:e3:ad:f3:65:cf:4e:e4:67:c9:af:41:ef:c6:
                    22:eb:42:11:86:10:f7:52:a3:be:04:82:ef:f4:08:
                    91:4c:b8:d6:db:01:83:55:2f:ea:d0:e0:4d:85:fd:
                    d0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7D:5C:A7:3E:63:48:6F:24:F0:EB:39:22:7B:B7:0D:41:BA:D7:3F
            X509v3 Authority Key Identifier:
                keyid:CB:CD:6C:54:C2:AC:7A:F2:B0:CE:1B:67:2F:5C:D2:74:C0:17:95:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBCD6C54C2AC7AF2B0CE1B672F5CD274C017951D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/34352e3138302e31362e302f32322d3234203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:d6:40:0f:5a:db:d7:b5:fd:d9:01:39:34:cf:24:ed:12:07:
         40:91:e9:08:2f:82:db:1d:2f:a6:45:98:eb:77:51:a0:21:a7:
         e4:83:7b:f7:9d:29:d3:a5:62:99:bb:51:f2:b0:af:92:0b:d6:
         18:95:a1:47:67:de:69:b2:31:c4:77:51:ea:62:b7:50:dc:42:
         ac:77:f0:66:d7:a8:10:8e:b8:e2:90:07:2a:ed:23:46:57:d3:
         33:82:61:95:6f:80:38:e4:e1:f2:b2:99:28:c1:1e:97:09:d8:
         3b:c6:7f:9c:83:cb:ee:1c:ab:16:c4:87:33:a0:04:62:13:ea:
         a2:b9:51:0a:53:15:05:af:63:84:87:4c:be:42:93:a4:a3:e1:
         ca:9b:b1:a7:b9:fd:44:fc:c6:01:e8:05:7e:d8:c6:4b:7a:58:
         ca:f5:cc:47:83:37:1b:98:50:6f:f2:3b:f0:db:56:ab:62:93:
         19:db:52:1f:1f:b3:10:4b:c4:06:fb:01:ce:d4:1c:3e:5c:ff:
         d5:9c:3b:85:dc:25:40:a2:b8:dc:dc:0f:bc:ab:03:b6:72:d6:
         88:34:d8:22:fa:0b:8c:42:c5:0d:89:53:f3:b9:d7:ba:c3:17:
         30:c8:b3:ec:fb:fb:9a:76:b1:8c:e8:4b:aa:c7:57:64:4f:9a:
         f2:4f:0f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:18:07 2025 by rpki-client