Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa
File:                     34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa (raw, json)
Hash identifier:          CqLbBj0uT8K12+SQb9CTcXG1+amWQ68DH+TtD05xAIk=
Subject key identifier:   95:02:BC:0E:FB:4F:5D:27:98:51:99:C4:E7:C0:96:78:0A:2F:78:29
Certificate issuer:       /CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
Certificate serial:       152136319E0194C92695F0D0E7323AE8E9D3C127
Authority key identifier: 06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa
Signing time:             Fri 18 Apr 2025 12:58:34 +0000
ROA not before:           Fri 18 Apr 2025 12:53:34 +0000
ROA not after:            Fri 17 Apr 2026 12:58:34 +0000
asID:                     268307
IP address blocks:        45.237.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 13:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:21:36:31:9e:01:94:c9:26:95:f0:d0:e7:32:3a:e8:e9:d3:c1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
        Validity
            Not Before: Apr 18 12:53:34 2025 GMT
            Not After : Apr 17 12:58:34 2026 GMT
        Subject: CN=9502BC0EFB4F5D27985199C4E7C096780A2F7829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:3a:3f:e1:6d:8b:ff:3d:0e:f3:32:90:49:
                    4b:bb:0b:64:1a:1b:af:46:54:9e:23:21:5e:02:02:
                    77:61:b1:2c:26:ee:23:cb:88:28:0c:44:b3:9f:91:
                    f9:12:1c:54:98:0f:3f:7c:85:26:71:e0:79:bf:c5:
                    eb:ad:54:96:36:64:3f:58:79:05:d9:77:09:ce:dd:
                    46:c7:8d:c2:8a:43:9c:d7:73:f1:39:26:2c:9e:24:
                    41:dc:77:15:c4:4b:c3:9b:64:2e:ef:72:67:87:b2:
                    75:f9:4b:70:6f:ca:35:fd:2e:f8:d4:6e:d6:23:77:
                    61:1c:a6:db:dc:c1:04:5c:cf:f3:cd:c7:35:c3:6f:
                    67:e9:f8:96:6c:2b:43:f5:cc:d3:dc:c5:37:57:e6:
                    80:13:f0:87:0a:38:8a:2e:94:3a:f6:b2:57:5a:9d:
                    f3:f6:43:3f:00:ea:2b:ac:e2:80:0c:b4:4d:1e:66:
                    c2:fe:2a:d5:54:cd:f8:44:0d:a6:96:c2:fe:dd:8d:
                    db:72:60:f6:3a:bb:13:97:af:57:79:9f:fc:27:c3:
                    4b:b4:f3:ec:a8:e1:44:8a:96:5e:d1:b4:0c:37:7b:
                    78:27:84:aa:2c:47:5c:ae:f6:47:30:5c:b2:c5:11:
                    a5:53:a8:7e:92:4c:50:e1:23:4a:b0:5a:2f:08:0b:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:02:BC:0E:FB:4F:5D:27:98:51:99:C4:E7:C0:96:78:0A:2F:78:29
            X509v3 Authority Key Identifier:
                keyid:06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:a5:35:f4:a4:d6:16:85:c3:53:72:7d:8f:4a:a1:25:33:82:
         a1:4c:86:f4:59:ac:d0:3c:ac:21:25:7e:f8:c8:f5:2a:cd:57:
         15:96:12:d7:a9:41:40:5e:4f:f5:bb:9e:39:b8:1f:2b:ad:2b:
         83:fb:77:77:1d:6b:bf:81:8f:d1:aa:2e:fe:f5:01:7f:91:35:
         e8:31:15:a0:e3:62:f9:7b:f1:b1:1a:4c:4c:10:82:32:24:8a:
         f6:62:e9:9d:d5:32:16:3b:40:aa:3d:c0:00:55:ff:35:0f:a3:
         28:42:87:73:17:ca:ac:5e:10:69:37:f6:0c:60:aa:f5:c7:5c:
         e6:91:ff:eb:24:fd:dd:1b:e5:54:28:c8:a7:e9:2d:dc:3e:0d:
         0f:90:a0:01:67:be:0d:c6:89:db:f6:fe:af:bb:7f:2e:67:41:
         dd:c9:9f:15:97:07:c9:63:25:d7:bb:2a:df:91:56:69:fc:67:
         cc:e0:d9:6d:db:ad:98:36:07:ee:32:13:bd:fb:09:db:94:19:
         77:42:7e:c2:a0:c7:fb:67:75:0c:e4:d4:e9:25:fd:77:a0:8c:
         d1:bb:23:d7:85:4f:2f:1c:f0:95:db:47:0f:92:9e:92:45:4f:
         1f:4d:10:2f:9c:fc:a6:ef:17:8c:3a:a3:29:2f:7e:e7:d2:a5:
         7d:d3:34:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:33:03 2025 by rpki-client