Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37342e302f32342d3234203d3e20323637323531.roa
File:                     34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (raw, json)
Hash identifier:          40prK8ppN8vt4mijpoc2pjLbuuqUZaJ9Grs/fMA2kDg=
Subject key identifier:   CF:A8:90:97:64:88:0B:5D:9B:45:EB:83:B2:4C:42:32:E7:D4:BE:62
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       739F035090029C99DBB654599DDFD1FCBCE6B29E
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37342e302f32342d3234203d3e20323637323531.roa
Signing time:             Wed 05 Mar 2025 19:00:26 +0000
ROA not before:           Wed 05 Mar 2025 18:55:26 +0000
ROA not after:            Wed 04 Mar 2026 19:00:26 +0000
asID:                     267251
IP address blocks:        45.232.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9f:03:50:90:02:9c:99:db:b6:54:59:9d:df:d1:fc:bc:e6:b2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Mar  5 18:55:26 2025 GMT
            Not After : Mar  4 19:00:26 2026 GMT
        Subject: CN=CFA8909764880B5D9B45EB83B24C4232E7D4BE62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1d:d8:84:39:73:5d:ae:5d:2c:9d:f3:f6:ba:
                    a2:59:a9:f5:bc:e5:0b:6f:99:e0:cb:60:51:2a:e1:
                    00:44:36:0e:2e:b6:28:39:36:99:fe:3b:7d:7c:12:
                    16:91:02:ae:08:1b:bd:b1:d7:93:80:3c:bf:91:6c:
                    de:6b:f5:b4:6b:8a:80:51:cc:0a:ce:fc:31:7b:3a:
                    a7:6c:cf:92:a0:b8:0d:bd:43:37:0d:30:f3:6b:34:
                    b8:e3:22:43:70:ef:95:0d:be:35:91:a5:70:cf:1e:
                    2b:ac:4b:84:0e:5a:a7:99:87:38:9e:58:58:7d:b2:
                    d0:a6:98:5e:48:57:d0:2f:23:35:35:cc:cb:68:a9:
                    e4:5c:09:05:93:cf:89:b7:ac:fe:b5:8d:ff:d4:77:
                    6f:23:92:f1:f4:32:9e:b2:45:2c:55:47:2a:4e:4b:
                    f1:93:07:28:a2:a8:27:03:77:59:c3:cf:b0:83:58:
                    4a:be:70:ed:ab:a4:7b:cf:e9:e0:13:5e:d0:fa:27:
                    85:7b:03:b7:90:c4:33:87:fe:aa:2a:fa:9e:fa:02:
                    0d:98:1d:52:6f:da:b0:b4:5d:1a:8e:79:12:05:04:
                    17:eb:fe:d8:a2:11:41:ff:d6:fa:9b:8b:29:82:e8:
                    62:94:22:7e:4f:0d:a6:79:2f:a1:c1:13:8b:ca:93:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A8:90:97:64:88:0B:5D:9B:45:EB:83:B2:4C:42:32:E7:D4:BE:62
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37342e302f32342d3234203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:0c:f7:37:b3:77:a1:20:2e:2f:d4:93:ab:f9:f8:f0:6b:e7:
         d4:82:71:87:3f:c1:c3:12:85:2c:a1:a3:9b:9d:7c:64:41:5d:
         c0:28:44:77:a5:b1:ae:33:6e:c3:12:02:f7:9c:4c:24:4b:f9:
         d4:a8:16:b5:28:3e:a9:e7:04:69:70:1d:a3:5e:72:fc:4a:97:
         35:55:0d:9a:3b:ce:d7:de:f9:dc:35:a5:b0:b4:21:cd:ba:63:
         4f:d3:cc:71:7d:a4:30:99:d6:92:7d:84:e7:70:a7:69:b5:68:
         31:7b:7d:3e:1a:74:20:73:ce:50:6b:82:0d:28:83:4c:95:ba:
         0c:7a:7a:ad:54:27:33:f0:be:79:00:91:c9:aa:3f:37:b4:b3:
         05:1a:f3:7e:f7:e0:ae:e4:5f:ad:cf:aa:9e:af:ae:5d:df:88:
         4c:44:27:64:78:c3:e4:b2:84:ae:9e:12:19:03:0a:4f:84:5b:
         33:5b:4a:9e:b5:27:a4:a6:59:92:5d:ec:df:92:10:a5:50:ea:
         61:03:67:9e:ca:e3:67:d8:ff:64:c2:83:9c:2f:a0:8c:16:c8:
         ec:55:74:36:52:5b:06:0a:a7:36:e9:f0:09:60:4c:c4:f5:6a:
         84:6d:64:18:cf:b5:15:fc:c7:8b:7a:59:20:9a:63:9e:1a:2b:
         91:7f:0e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:20:02 2025 by rpki-client