Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/34352e3137302e3231382e302f32342d3234203d3e20323638313733.roa
File:                     34352e3137302e3231382e302f32342d3234203d3e20323638313733.roa (raw, json)
Hash identifier:          4edC1Dja49GdEIcGCAdUrgqnqtiYutXNTAg9Nm1PvLw=
Subject key identifier:   9A:43:AA:EE:6F:B8:B7:79:60:89:A0:A0:FD:D9:7B:5D:81:E9:B2:DF
Certificate issuer:       /CN=99A78712ED297A370E4987A326F3177259C4BC40
Certificate serial:       34B8EDF551AD564A13791BED3D2C53945C997D4E
Authority key identifier: 99:A7:87:12:ED:29:7A:37:0E:49:87:A3:26:F3:17:72:59:C4:BC:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/34352e3137302e3231382e302f32342d3234203d3e20323638313733.roa
Signing time:             Wed 05 Mar 2025 19:00:22 +0000
ROA not before:           Wed 05 Mar 2025 18:55:22 +0000
ROA not after:            Wed 04 Mar 2026 19:00:22 +0000
asID:                     268173
IP address blocks:        45.170.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.crl
                          rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b8:ed:f5:51:ad:56:4a:13:79:1b:ed:3d:2c:53:94:5c:99:7d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A78712ED297A370E4987A326F3177259C4BC40
        Validity
            Not Before: Mar  5 18:55:22 2025 GMT
            Not After : Mar  4 19:00:22 2026 GMT
        Subject: CN=9A43AAEE6FB8B7796089A0A0FDD97B5D81E9B2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:ff:03:ea:73:32:eb:3f:5c:51:60:c9:7b:
                    46:88:3a:5a:a0:fb:4b:a4:a5:07:0b:cc:53:68:c1:
                    64:ce:66:ab:5d:80:d5:e4:3d:3e:64:ca:56:7d:4d:
                    ac:e1:16:c3:52:3a:c3:2e:4a:f7:95:71:4e:cf:df:
                    fd:56:20:41:fc:8e:de:60:69:29:16:72:7d:33:e8:
                    5c:20:4d:f6:bc:6f:a5:ca:30:a8:c2:d3:db:b8:7e:
                    70:11:86:77:c6:67:54:04:5e:95:25:50:e1:4e:c7:
                    a5:4d:81:15:ba:85:8d:5c:02:e9:e3:29:31:3c:fd:
                    c8:e6:fa:b1:b7:ca:47:cb:4a:7a:6c:cb:b4:19:e3:
                    8b:fc:e9:58:ff:7e:14:ae:77:91:52:28:93:8e:36:
                    15:28:5a:fe:f8:36:c2:66:08:54:10:0c:b7:89:77:
                    43:6d:7e:46:1c:5e:47:dd:6b:d9:f5:fd:f1:bf:f1:
                    bb:4f:1d:6e:c3:3a:3b:34:b9:77:24:26:fd:c2:91:
                    18:88:0d:6b:b3:79:51:d8:19:5f:04:94:f6:0b:b4:
                    65:0c:af:35:62:d3:6b:59:9b:5d:9e:4c:0a:ff:a9:
                    39:60:e4:e3:b4:cd:0b:89:d8:af:6e:51:1a:60:94:
                    8c:84:b5:50:c3:84:46:0d:1a:1b:00:da:4d:85:d6:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:43:AA:EE:6F:B8:B7:79:60:89:A0:A0:FD:D9:7B:5D:81:E9:B2:DF
            X509v3 Authority Key Identifier:
                keyid:99:A7:87:12:ED:29:7A:37:0E:49:87:A3:26:F3:17:72:59:C4:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/34352e3137302e3231382e302f32342d3234203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:23:19:7a:fb:d3:6a:b8:53:95:a5:5c:7b:b5:3b:5f:35:09:
         9a:2b:22:b3:55:19:b0:f6:fe:89:16:16:df:d6:a5:cd:95:00:
         c2:a7:16:3b:c0:11:8e:7c:5d:fc:4a:77:75:1c:97:3a:a0:3f:
         fc:dd:f1:93:67:92:36:a1:78:02:bc:f4:5f:e5:f3:16:62:1b:
         69:6f:47:9d:38:45:d8:d3:c1:2c:ea:e0:ed:3f:2d:9c:7f:c4:
         09:4f:75:e3:aa:18:94:49:66:23:18:8c:59:c9:e9:b3:c6:ed:
         a5:a3:8d:80:21:f2:a9:c6:ca:fa:ad:f2:2e:e3:6d:84:36:27:
         aa:d4:2c:d8:38:57:19:13:5d:b9:a4:32:94:19:4c:57:09:49:
         f4:83:09:8c:9f:d5:f7:fb:4f:46:5f:3d:03:24:c6:c3:3f:06:
         11:31:0f:a4:3c:54:8f:86:c3:1c:f4:b2:17:e0:23:91:1d:8c:
         8f:9e:b0:7b:d5:3b:a1:a4:31:1c:f8:bb:34:f8:11:7a:55:ed:
         c0:46:b5:66:a3:c3:6e:7f:0b:7a:33:40:e0:b0:56:35:80:9f:
         4d:0d:24:74:5f:86:85:a3:3a:d2:cc:16:e3:1e:67:89:03:7f:
         ba:a6:ce:95:ff:16:dc:1f:01:98:c3:d3:3e:9a:44:50:b3:c7:
         d0:64:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:02:07 2025 by rpki-client