Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa
File:                     34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa (raw, json)
Hash identifier:          ro4e4HKMc+rQTlsWUPqth7uGfdGK2Zy1ZJ/Pfr0aDHQ=
Subject key identifier:   1A:64:43:D2:53:45:E1:0E:84:8E:26:1B:AB:AE:4A:4A:8B:45:5F:6F
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       61A8B5523C33A3222154DCC6D673A82B66292914
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268070
IP address blocks:        45.167.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a8:b5:52:3c:33:a3:22:21:54:dc:c6:d6:73:a8:2b:66:29:29:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100B5667999FC5DBCCC6C1B55C1B168A8CA9610B9C9E2FCCAEF8027D838AAD0666938BD1F70CE61594484B79923908B8AD0CA818A326A26C38E1D7F7EB02015809E0E5E1E0D58909DCA651257C6BE6787EC7BD5AC526E9D870E978A754FA28877E4792F9289D756BA4E8F4BCD138B15B6510A011F6D32A5ADA5DE6C3574224EA04E8B0D9FB48A9BEBE80265A56FDCB68915876C3292B180FD22D4A413E8F413B665FEBCA673FD17D2443126EBFA7664D026B77DA8680EE17FF19EE5572719472B7E68250F9575CB55EDD8CC13C6C859238C7C65923EF344E8E15E2E3D19494A08A60F07396C483598B24EE2ED2272FF2C71CA4D3DDD2E7395BAF27880B6E9B96EC70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:79:99:fc:5d:bc:cc:6c:1b:55:c1:b1:68:
                    a8:ca:96:10:b9:c9:e2:fc:ca:ef:80:27:d8:38:aa:
                    d0:66:69:38:bd:1f:70:ce:61:59:44:84:b7:99:23:
                    90:8b:8a:d0:ca:81:8a:32:6a:26:c3:8e:1d:7f:7e:
                    b0:20:15:80:9e:0e:5e:1e:0d:58:90:9d:ca:65:12:
                    57:c6:be:67:87:ec:7b:d5:ac:52:6e:9d:87:0e:97:
                    8a:75:4f:a2:88:77:e4:79:2f:92:89:d7:56:ba:4e:
                    8f:4b:cd:13:8b:15:b6:51:0a:01:1f:6d:32:a5:ad:
                    a5:de:6c:35:74:22:4e:a0:4e:8b:0d:9f:b4:8a:9b:
                    eb:e8:02:65:a5:6f:dc:b6:89:15:87:6c:32:92:b1:
                    80:fd:22:d4:a4:13:e8:f4:13:b6:65:fe:bc:a6:73:
                    fd:17:d2:44:31:26:eb:fa:76:64:d0:26:b7:7d:a8:
                    68:0e:e1:7f:f1:9e:e5:57:27:19:47:2b:7e:68:25:
                    0f:95:75:cb:55:ed:d8:cc:13:c6:c8:59:23:8c:7c:
                    65:92:3e:f3:44:e8:e1:5e:2e:3d:19:49:4a:08:a6:
                    0f:07:39:6c:48:35:98:b2:4e:e2:ed:22:72:ff:2c:
                    71:ca:4d:3d:dd:2e:73:95:ba:f2:78:80:b6:e9:b9:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:64:43:D2:53:45:E1:0E:84:8E:26:1B:AB:AE:4A:4A:8B:45:5F:6F
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:57:73:cc:6e:23:a5:ea:16:be:9b:4f:a2:d8:98:6a:69:10:
         69:7a:4a:29:2e:92:c5:f8:a9:7d:84:f4:50:71:01:cf:d7:28:
         0f:0d:73:b0:d4:2c:4c:7f:a7:83:e1:9d:7a:41:a3:9e:14:1e:
         e6:f3:74:35:fe:9e:48:9e:90:98:90:ae:0d:bd:85:d5:fa:36:
         6a:0a:ba:14:4e:53:f4:51:e5:62:65:e9:18:61:cc:b5:64:81:
         32:72:88:f1:d7:9e:69:7b:7b:d6:6e:38:e4:20:37:85:f5:ba:
         cf:57:05:a7:64:ce:0e:b0:b3:8a:d8:36:67:f8:cd:70:1a:c6:
         90:22:de:c7:64:b3:ed:80:d3:4b:45:83:c4:cc:91:81:67:f0:
         7a:2e:35:d2:cd:c1:8e:38:c9:e9:3f:95:60:09:8d:cf:0c:a1:
         4a:8b:5a:c2:66:5f:75:c0:13:89:32:06:aa:07:8b:00:4f:66:
         c2:d6:73:ab:32:20:ce:8c:03:6f:08:f8:f9:bc:24:ba:32:d8:
         15:fc:d8:8c:9f:46:ea:8e:b1:8d:46:a3:54:c9:d1:a9:d5:c1:
         b6:d3:f1:12:ec:53:e0:cb:4e:de:b7:d9:72:1e:38:5b:c4:db:
         9d:b3:92:b0:8b:88:11:bd:96:ce:cb:2b:e2:9c:3f:51:3c:2b:
         c5:6a:f4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:36 2025 by rpki-client