Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e302e302f32322d3232203d3e20323632383735.roa
File:                     34352e362e302e302f32322d3232203d3e20323632383735.roa (raw, json)
Hash identifier:          hUCcc+FUw3r4CsCGZa762ciO0DvUqEPjdwp5KOiomsQ=
Subject key identifier:   FF:C7:89:C9:A1:9A:EB:41:4E:4B:0F:84:BE:67:DD:4C:F2:3B:7D:17
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       41E70B2ED82AF92340E77F5408A1144E435A5731
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e302e302f32322d3232203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 12:58:14 +0000
ROA not before:           Thu 02 Jan 2025 12:53:14 +0000
ROA not after:            Thu 01 Jan 2026 12:58:14 +0000
asID:                     262875
IP address blocks:        45.6.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 07:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e7:0b:2e:d8:2a:f9:23:40:e7:7f:54:08:a1:14:4e:43:5a:57:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:53:14 2025 GMT
            Not After : Jan  1 12:58:14 2026 GMT
        Subject: CN=FFC789C9A19AEB414E4B0F84BE67DD4CF23B7D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c0:45:78:fe:e5:93:4c:7e:d3:61:6d:ad:5c:
                    fb:eb:8b:a9:e9:1a:57:27:09:92:06:73:94:fc:bf:
                    ef:bb:d6:46:4d:23:ee:6b:57:a8:c2:99:a0:de:3e:
                    bc:d5:a4:cf:b7:da:cc:d7:ea:e3:91:1f:d6:2a:b1:
                    74:6e:45:c5:53:61:ed:8a:72:a9:61:07:b2:c8:92:
                    50:9e:0e:c8:4e:35:16:a6:c7:a4:1c:65:86:2c:38:
                    15:31:79:52:f6:dc:df:e5:29:97:c1:19:33:03:43:
                    8e:c2:bd:aa:09:85:52:5b:9f:9a:25:9e:c1:d3:1d:
                    c1:2e:87:07:4b:ff:18:6d:07:e9:f7:a5:b7:36:52:
                    7c:57:ea:9c:76:42:02:b5:a0:ed:71:2f:cc:58:9b:
                    0b:8d:1c:7d:cd:f0:d2:03:37:a5:b9:2a:9c:3b:77:
                    2a:96:c4:9c:d7:0a:79:aa:87:b9:a9:07:8d:9e:e5:
                    cb:32:0a:84:53:12:15:f1:53:33:51:54:d9:4b:6c:
                    e7:af:3b:02:47:e6:0c:b7:0e:47:d7:8a:75:7c:1a:
                    5d:85:b4:5f:55:ce:b3:cb:cb:5b:d5:0b:46:67:e6:
                    ac:3e:99:b7:c1:69:91:80:d8:8d:7e:8a:c8:7c:76:
                    a3:35:38:d9:9a:e6:17:9f:15:0c:4a:d7:67:c4:ab:
                    c3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C7:89:C9:A1:9A:EB:41:4E:4B:0F:84:BE:67:DD:4C:F2:3B:7D:17
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e302e302f32322d3232203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:96:3a:59:9b:cf:c0:33:2b:71:bb:eb:eb:c4:52:22:bd:f4:
         81:36:61:23:3f:e7:e0:2d:2f:24:a9:7d:71:c4:43:fe:78:11:
         64:d6:4d:e2:7d:e9:de:54:b6:1f:10:c3:79:ee:6d:ba:1e:89:
         1d:18:b9:b1:3c:dd:4e:84:73:fb:03:51:fc:89:ed:2a:71:03:
         11:fd:df:9c:3d:9a:5e:f3:cb:ad:11:cb:5a:6e:ed:d3:4c:64:
         72:7b:9e:4a:84:66:47:a0:12:ed:2a:cf:7d:05:76:02:9d:0d:
         f8:ed:38:c4:1a:5e:b1:ce:67:e6:58:81:d9:a5:9d:8a:54:6d:
         8d:2c:dd:a0:46:bc:f6:e3:12:21:3d:f8:4a:28:5a:f2:af:e7:
         6a:21:ea:4b:28:8a:02:52:af:d4:ca:77:b2:92:8d:55:9a:6b:
         f4:70:78:74:54:33:96:40:2a:21:8a:9e:e4:78:ce:36:52:d8:
         38:2d:2f:8a:70:8c:37:13:bb:8d:0d:a5:ae:7d:39:fb:86:9e:
         e7:26:3a:31:b2:db:d6:07:3e:b2:5b:35:7e:8d:1a:f1:62:a6:
         0d:90:b8:df:07:c4:16:52:39:7c:f3:98:cd:7d:d0:d8:58:d3:
         bf:7d:c5:c3:68:91:e8:c0:59:e2:03:be:7f:3c:4c:e3:d5:18:
         b4:1c:9a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:45:30 2025 by rpki-client