Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133352e302f32342d3234203d3e20323639303739.roa
File:                     34352e3137392e3133352e302f32342d3234203d3e20323639303739.roa (raw, json)
Hash identifier:          X/4+7skv0QuzjXodWgI7GRNF3gPu7x2sLaF9gPbC/xo=
Subject key identifier:   17:7B:57:6E:12:66:6F:8F:06:79:89:A5:44:E4:85:71:A4:5A:26:91
Certificate issuer:       /CN=433BC56DE61BF5759F79705E437131F09597AF13
Certificate serial:       305EA02D00C047E1F3C3F55985B729BAD10C16DB
Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133352e302f32342d3234203d3e20323639303739.roa
Signing time:             Mon 31 Mar 2025 17:43:18 +0000
ROA not before:           Mon 31 Mar 2025 17:38:18 +0000
ROA not after:            Mon 30 Mar 2026 17:43:18 +0000
asID:                     269079
IP address blocks:        45.179.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
                          rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5e:a0:2d:00:c0:47:e1:f3:c3:f5:59:85:b7:29:ba:d1:0c:16:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13
        Validity
            Not Before: Mar 31 17:38:18 2025 GMT
            Not After : Mar 30 17:43:18 2026 GMT
        Subject: CN=177B576E12666F8F067989A544E48571A45A2691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:23:a9:6b:ca:2d:97:ac:5a:91:c0:81:d3:
                    3f:59:b4:b9:76:e2:54:e6:c5:af:70:00:94:de:f8:
                    e7:11:f4:96:d4:e2:b0:89:76:69:8a:d9:92:89:7c:
                    78:80:a4:e9:4c:93:55:70:5b:70:ac:71:34:14:18:
                    13:59:00:ae:b8:0b:36:8e:96:98:a9:5a:d9:01:81:
                    2c:45:6d:be:28:6f:4f:2c:d5:bd:c3:2f:c9:ef:e2:
                    01:66:4a:6f:57:e8:21:62:31:75:b4:24:44:ae:27:
                    96:4f:18:5a:70:60:e7:43:c6:d2:1b:12:e3:32:92:
                    64:02:0a:88:b0:98:b5:ed:1f:78:69:bc:d0:2d:e6:
                    8c:a1:ce:2d:47:b7:af:19:c8:71:9f:cb:29:14:25:
                    40:ef:54:6d:c6:de:c2:9c:68:b5:14:a7:e0:ba:84:
                    9e:dd:e2:72:00:7d:90:db:0a:5f:b8:0a:d6:31:09:
                    37:e7:c3:7b:28:37:4b:e7:8f:5a:30:bb:f0:fe:c9:
                    9d:69:67:a0:fc:5f:a2:38:01:1a:21:1c:d8:75:34:
                    fe:fc:52:9b:26:49:5f:04:c4:9f:d4:f4:1b:34:45:
                    2d:d6:79:b0:f0:f2:cb:db:b1:d9:14:0e:58:47:ec:
                    7b:82:d9:b0:16:ca:e2:60:9b:d5:db:44:7a:89:6d:
                    d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7B:57:6E:12:66:6F:8F:06:79:89:A5:44:E4:85:71:A4:5A:26:91
            X509v3 Authority Key Identifier:
                keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133352e302f32342d3234203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:95:78:0a:16:54:25:99:be:9d:95:b5:41:c1:19:94:1c:
         1e:66:e0:7f:d0:32:16:e2:72:28:aa:e8:7e:92:dc:0a:60:8e:
         3a:92:20:fe:d7:d6:34:f0:70:b8:d6:f2:9b:47:64:ed:f8:a9:
         5c:a9:18:66:06:34:41:6a:b6:fb:b3:9f:60:5b:c8:d8:ad:e1:
         b3:72:9d:d8:42:21:2f:bc:27:b8:95:72:cb:83:93:a0:09:ae:
         4c:3b:2e:81:0f:ec:7b:f8:5c:40:3a:4a:ec:5f:a1:5d:d5:e3:
         35:9f:f8:3f:68:a7:92:e0:d4:84:57:60:92:8c:7b:e0:86:b2:
         8a:80:aa:c3:59:d7:5d:43:5b:db:c8:41:ff:c5:4e:de:a2:7d:
         a5:cd:cc:9f:b2:0b:43:3f:71:71:1a:3e:65:a9:34:57:51:05:
         c4:83:ef:c2:35:72:44:6b:84:92:b4:8b:27:a8:ba:85:2e:ab:
         b6:23:71:da:23:fe:e0:35:cd:1e:b2:49:dc:e9:9c:09:29:47:
         35:11:af:4b:10:cc:8e:72:89:69:ce:d8:3e:4a:be:0f:47:16:
         2c:fe:d9:6b:0c:f2:25:00:a2:67:9f:e8:f2:19:38:b7:e6:50:
         70:50:28:46:80:f6:ed:04:5d:f7:7b:1a:37:00:0c:e6:de:e3:
         47:82:df:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:13:35 2025 by rpki-client