Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32342d3234203d3e20323639353636.roa
File:                     34352e3138382e31302e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier:          1MBMcnnrJpTSmEbedlq049n9b70cPvAKx/RoZCJcj7k=
Subject key identifier:   57:7E:FF:29:A6:A5:81:C3:38:83:B1:6B:B2:FB:CE:6C:26:70:FE:C3
Certificate issuer:       /CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
Certificate serial:       323AA4C828B1FEA500901F57804F683484149D0F
Authority key identifier: 8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32342d3234203d3e20323639353636.roa
Signing time:             Thu 23 Jan 2025 12:25:02 +0000
ROA not before:           Thu 23 Jan 2025 12:20:02 +0000
ROA not after:            Thu 22 Jan 2026 12:25:02 +0000
asID:                     269566
IP address blocks:        45.188.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 10:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3a:a4:c8:28:b1:fe:a5:00:90:1f:57:80:4f:68:34:84:14:9d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
        Validity
            Not Before: Jan 23 12:20:02 2025 GMT
            Not After : Jan 22 12:25:02 2026 GMT
        Subject: CN=577EFF29A6A581C33883B16BB2FBCE6C2670FEC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3a:6b:ba:15:1b:a0:6c:17:94:bb:c9:85:4e:
                    ca:08:94:c0:1e:41:81:92:57:0b:f8:67:b7:4c:6e:
                    ff:d6:44:6a:95:b8:e1:bb:f5:95:43:7c:8b:07:93:
                    6e:f5:01:57:ea:e4:11:c4:ac:de:46:16:6a:ba:79:
                    85:fd:3e:db:05:1c:38:76:0d:f1:cc:27:94:95:74:
                    4f:f3:48:2b:2c:29:67:34:21:25:82:4f:4b:8b:30:
                    a4:df:ed:b1:e5:c9:a3:53:f7:a5:4f:2a:4d:48:f8:
                    94:f4:f6:8a:bc:4e:cb:77:6b:11:c9:08:af:53:4d:
                    88:08:80:69:a1:3c:3d:01:89:28:f2:a4:8b:2e:1b:
                    03:6d:ba:29:e4:a9:6a:92:ff:17:64:f8:35:5f:f5:
                    e1:35:61:06:3f:33:fa:b8:dc:e7:9c:4a:f6:e0:f7:
                    fd:a3:e9:e1:08:a4:84:e1:4a:76:b6:bc:6b:a9:2d:
                    ea:f0:c1:65:53:8b:ea:d0:a9:a6:c6:c8:b8:d4:c7:
                    c2:15:2b:d5:df:4a:37:53:e4:62:7b:a1:7f:e3:72:
                    0d:b7:a4:f1:c3:4a:cd:2f:73:0c:c2:c7:7a:0a:6c:
                    88:02:b0:9c:c6:9e:17:d3:42:e7:b1:fa:79:c1:36:
                    0d:ad:87:8c:03:d6:d7:9d:5b:31:a1:8b:73:dd:fd:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7E:FF:29:A6:A5:81:C3:38:83:B1:6B:B2:FB:CE:6C:26:70:FE:C3
            X509v3 Authority Key Identifier:
                keyid:8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32342d3234203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:cd:33:dd:f6:b7:31:d2:a9:0b:10:54:d5:50:76:8c:84:37:
         b0:b5:60:fc:ed:de:76:cf:00:02:3f:00:bd:72:69:6c:69:c3:
         0a:d8:c5:90:9a:f2:7f:a4:ba:0b:58:4c:38:ce:37:19:fb:68:
         ee:3a:64:fc:98:d3:80:3f:77:63:04:1d:37:d5:77:90:b2:1b:
         9d:87:2d:ce:33:af:02:05:90:c3:ae:5e:fa:b1:cd:5d:95:8f:
         c3:9d:b2:86:05:33:f5:f4:6a:f1:38:e4:bf:ed:33:4c:d1:c4:
         3e:73:12:9e:28:ee:04:80:ed:a5:91:32:4d:c8:02:44:b6:6d:
         47:92:25:f6:df:47:c4:0e:81:e5:9b:ce:9c:de:20:50:ff:b0:
         d1:d7:08:b0:6b:26:e9:d3:5b:63:a6:64:f5:06:45:8c:f3:8c:
         d0:42:17:81:2e:50:b4:80:9b:47:ee:63:39:77:fa:89:74:04:
         b6:7f:7f:3f:4e:54:bf:92:e3:5c:f1:f6:67:62:9d:05:1b:d0:
         19:5b:3f:1a:18:8a:c3:5a:20:8c:15:ea:b9:09:49:30:2a:0b:
         8d:7c:96:f7:3b:1b:df:ea:e0:5e:33:61:a4:e6:2d:30:2d:2d:
         13:32:2a:64:b3:24:66:57:e9:2f:a9:02:c2:f1:f8:61:01:ea:
         ab:a2:e0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:06 2025 by rpki-client