Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32322d3232203d3e20323637353536.roa
File:                     34352e37302e302e302f32322d3232203d3e20323637353536.roa (raw, json)
Hash identifier:          ET9GFeNsWp5TLMXOKnDLbHxzKZK5BWXMYvJ4HNmq5s8=
Subject key identifier:   80:74:61:76:85:0C:6F:A9:48:41:EB:E5:11:1A:37:B7:87:3C:0A:AB
Certificate issuer:       /CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
Certificate serial:       34BE56BA4240853D24F2BFA455F57EC320C85915
Authority key identifier: 23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32322d3232203d3e20323637353536.roa
Signing time:             Tue 01 Apr 2025 12:50:01 +0000
ROA not before:           Tue 01 Apr 2025 12:45:01 +0000
ROA not after:            Tue 31 Mar 2026 12:50:01 +0000
asID:                     267556
IP address blocks:        45.70.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 08:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:be:56:ba:42:40:85:3d:24:f2:bf:a4:55:f5:7e:c3:20:c8:59:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
        Validity
            Not Before: Apr  1 12:45:01 2025 GMT
            Not After : Mar 31 12:50:01 2026 GMT
        Subject: CN=80746176850C6FA94841EBE5111A37B7873C0AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:5b:78:0a:fe:10:7e:62:0a:ce:21:1b:b6:
                    6f:a0:9e:04:dc:9b:09:bc:1f:c7:40:e1:91:79:87:
                    5c:31:3d:a4:a4:96:68:80:aa:4c:91:6a:63:14:1b:
                    b4:07:b5:85:de:58:c3:65:f9:27:55:e5:c6:e0:a5:
                    da:2a:21:85:3e:8e:1c:80:41:c6:c4:90:07:7a:b9:
                    f0:17:c4:6e:22:5e:48:f7:48:66:3e:24:a5:ac:fb:
                    7e:dd:40:e7:e1:08:a3:84:81:49:62:30:66:76:41:
                    04:a8:99:15:4d:7c:77:10:3e:e7:30:15:d4:12:c6:
                    f6:6f:44:72:5a:67:fb:b2:62:36:30:de:3d:e3:d8:
                    6a:71:54:cf:46:ae:bc:5c:ea:1f:4e:89:02:44:a9:
                    78:77:f3:6b:68:49:1b:ba:3b:98:42:79:24:19:57:
                    fc:f3:79:f5:c0:ec:96:4b:0f:9d:35:6f:29:bc:1e:
                    b5:6b:bf:c7:1f:a6:d1:8f:bf:1a:c7:19:27:ab:1a:
                    75:22:0d:57:45:c7:f2:c7:52:fc:da:7f:fc:68:52:
                    6b:98:36:f2:2f:4e:6b:ec:4e:be:4a:de:2b:4d:7f:
                    9d:6b:79:8e:cd:25:69:50:be:bf:3b:ce:4b:f7:09:
                    ec:36:4f:a3:e1:d8:89:40:aa:1d:be:2d:11:eb:55:
                    b0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:74:61:76:85:0C:6F:A9:48:41:EB:E5:11:1A:37:B7:87:3C:0A:AB
            X509v3 Authority Key Identifier:
                keyid:23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32322d3232203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:76:c9:99:cb:e5:3d:8f:53:a5:7c:84:1d:b0:29:9c:c5:b8:
         54:68:12:85:ce:69:54:78:94:7a:67:5e:49:6b:4e:98:f1:57:
         41:64:40:e8:e6:7b:70:c2:15:a0:25:1c:8c:09:b3:8b:8e:c8:
         99:ff:a7:92:cd:7b:00:8d:96:e8:c4:97:5a:85:6d:2f:9c:f0:
         ed:40:d9:de:83:c0:39:33:92:59:7f:cf:58:90:16:d7:81:46:
         be:c3:aa:6e:f9:97:fa:71:54:0a:c6:c9:06:24:56:de:ac:5e:
         36:87:b3:cf:13:d9:0a:ab:94:ff:1f:6c:0c:88:37:a6:ad:40:
         d2:3e:b0:fc:63:84:9a:cc:d0:13:9a:7c:83:06:b3:87:48:30:
         e9:55:6f:1b:a3:d4:5b:60:8d:0f:41:cc:aa:ee:34:f5:f0:8b:
         71:03:ae:da:72:c3:dd:d8:d8:d1:9c:c8:f7:53:e2:da:34:fa:
         1e:fd:7a:0e:31:f7:f5:5f:01:ae:35:f9:eb:72:8b:e8:92:e9:
         c9:2b:03:0a:12:83:2c:6a:ab:53:ac:d4:2d:10:81:08:77:4c:
         4a:45:5b:df:82:dc:00:9e:c7:27:fb:f8:89:44:43:7e:31:4b:
         b6:01:61:20:0d:d8:5b:18:4d:36:6b:0e:1e:36:50:33:a4:23:
         e6:80:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:53:38 2025 by rpki-client