Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32342d3234203d3e20323639353137.roa
File:                     34352e3138382e37322e302f32342d3234203d3e20323639353137.roa (raw, json)
Hash identifier:          XRcquAvomVnfk6eiGzzvu0tsg1QZ0+LRkCoFVvVFzr4=
Subject key identifier:   0E:04:42:C6:93:5A:2E:24:43:BB:D7:99:16:C6:8B:48:9C:3E:B0:F1
Certificate issuer:       /CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
Certificate serial:       7248D2C58472F331EB2A49AD29F55E2B1A927405
Authority key identifier: F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32342d3234203d3e20323639353137.roa
Signing time:             Sun 16 Feb 2025 13:29:18 +0000
ROA not before:           Sun 16 Feb 2025 13:24:18 +0000
ROA not after:            Sun 15 Feb 2026 13:29:18 +0000
asID:                     269517
IP address blocks:        45.188.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl
                          rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 14:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:48:d2:c5:84:72:f3:31:eb:2a:49:ad:29:f5:5e:2b:1a:92:74:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
        Validity
            Not Before: Feb 16 13:24:18 2025 GMT
            Not After : Feb 15 13:29:18 2026 GMT
        Subject: CN=0E0442C6935A2E2443BBD79916C68B489C3EB0F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:14:8b:f6:6a:8c:c5:a1:ef:da:e5:55:7a:
                    0d:aa:45:33:de:38:07:05:49:84:ad:56:67:5e:65:
                    fc:b2:57:0e:00:b3:6c:6d:a6:4e:cf:bc:03:61:03:
                    3e:ae:d1:92:d0:63:9b:52:1b:bd:09:8c:cb:21:f1:
                    0d:76:a9:a0:5c:59:df:0b:67:74:a0:2d:04:27:a5:
                    2e:36:74:67:a5:3d:90:ab:7a:ab:ea:0e:97:71:4a:
                    27:eb:ac:45:8d:1d:3c:5d:a5:eb:ce:2f:a5:33:ce:
                    77:f7:f3:1c:a6:c6:4a:e8:f9:9e:ec:0f:0a:04:63:
                    f9:23:7d:e4:41:f9:78:39:16:29:0e:d9:7a:e8:ad:
                    5c:58:7d:3b:04:60:05:65:b2:53:07:38:71:ae:e2:
                    1a:7a:0e:bb:5f:bd:04:f0:53:c7:ae:fc:0a:8b:02:
                    bf:24:9e:db:df:f7:fd:e4:f8:6f:53:e5:46:ac:a0:
                    cc:9c:27:e1:40:ff:b6:5b:1a:78:38:75:77:a0:29:
                    ad:b9:17:8e:f3:7d:72:b0:4b:e9:54:5f:e7:cf:08:
                    b6:2b:30:6b:7d:7d:7f:9e:e6:e8:c7:f8:ee:3e:7f:
                    c2:05:57:8d:59:e8:60:6f:86:1b:7e:49:aa:4a:62:
                    5b:bd:18:36:5e:2b:85:a0:32:61:94:ab:70:b8:85:
                    d1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:04:42:C6:93:5A:2E:24:43:BB:D7:99:16:C6:8B:48:9C:3E:B0:F1
            X509v3 Authority Key Identifier:
                keyid:F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32342d3234203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:ab:9c:32:c7:0e:dd:64:d3:71:55:36:8d:b5:4b:d8:cf:02:
         3c:09:b9:83:fb:6b:12:58:e3:f3:bc:67:df:d0:bb:20:6d:49:
         e7:85:d2:0c:f7:09:4f:eb:75:02:6a:2b:0a:82:ab:ab:c9:02:
         68:25:2d:d4:80:dd:84:25:5f:d4:b7:e8:01:f4:f0:52:5d:53:
         0b:ca:e5:17:19:8d:07:4d:6a:86:4a:89:18:62:6c:14:78:d8:
         cb:2f:1b:6c:8a:97:f9:53:99:1b:17:1a:0a:e6:70:55:54:47:
         05:f3:15:6b:aa:26:0f:36:94:48:0c:3c:1f:ee:6e:26:c6:f0:
         4b:15:8d:95:f8:c7:6e:7e:d5:8f:2d:dd:0c:8f:a8:28:e4:b1:
         15:f5:b5:60:53:1d:91:c8:c6:75:92:db:ac:b6:e4:23:45:35:
         eb:69:f9:19:86:05:5f:34:3e:00:03:7c:c6:8c:da:25:91:88:
         f0:41:94:2f:81:c9:e8:49:35:97:6a:b4:d0:09:fe:c4:8d:15:
         b8:76:08:e5:63:eb:58:ac:6e:04:a6:5b:5b:f0:9d:fd:b1:4b:
         3a:96:a4:38:f3:09:7c:2c:69:51:8c:a2:a2:2f:9a:b2:d3:1c:
         8a:11:09:d2:d8:c6:90:cd:58:75:9c:4a:ab:0c:f9:d6:f3:8a:
         3c:ee:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:51:47 2025 by rpki-client