Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3132382e302f32322d3232203d3e20323638373730.roa
File:                     34352e3137322e3132382e302f32322d3232203d3e20323638373730.roa (raw, json)
Hash identifier:          KM0FdoCnJO4W31WX8YhoYzx+IJuvj7t38yCyyyNEVn8=
Subject key identifier:   F9:EB:52:A5:7D:B1:60:72:67:10:C5:96:74:B0:49:9C:DD:72:6F:09
Certificate issuer:       /CN=7FA00725B865657CC24A17AD7A99947906B51243
Certificate serial:       1C62F073EFED956FC6AF6ABF997588CF9677B156
Authority key identifier: 7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3132382e302f32322d3232203d3e20323638373730.roa
Signing time:             Thu 20 Mar 2025 19:38:03 +0000
ROA not before:           Thu 20 Mar 2025 19:33:03 +0000
ROA not after:            Thu 19 Mar 2026 19:38:03 +0000
asID:                     268770
IP address blocks:        45.172.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl
                          rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:62:f0:73:ef:ed:95:6f:c6:af:6a:bf:99:75:88:cf:96:77:b1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA00725B865657CC24A17AD7A99947906B51243
        Validity
            Not Before: Mar 20 19:33:03 2025 GMT
            Not After : Mar 19 19:38:03 2026 GMT
        Subject: CN=F9EB52A57DB160726710C59674B0499CDD726F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c4:de:48:58:33:b8:51:0f:bf:76:6d:82:4b:
                    3c:3d:a5:ff:e8:b5:5e:67:11:14:86:10:3f:aa:74:
                    11:5d:25:6e:f5:63:f6:0d:6e:09:49:28:c2:ea:15:
                    14:8c:f7:d9:a3:71:c9:9a:68:82:fb:05:8d:b6:03:
                    a7:6c:1d:e2:74:bd:f7:b1:11:4d:1a:d4:94:d8:d5:
                    92:81:2e:66:c7:2b:79:67:b2:ae:7f:7a:97:b2:76:
                    35:35:d3:ae:ce:db:e6:45:3e:2e:54:31:9b:b7:df:
                    a2:a9:d7:b1:45:2f:23:5c:88:a4:ab:17:43:7a:8d:
                    b3:d7:07:c9:d3:c5:2f:f0:66:b4:e3:94:37:06:bb:
                    41:3d:5c:92:ab:28:4b:fc:6d:81:ec:17:f0:ce:c6:
                    3d:6e:0c:2b:19:ad:8a:65:31:23:33:6e:4d:e8:00:
                    62:3f:60:3c:6c:ce:bd:e6:53:a3:b9:56:02:3d:8d:
                    04:f3:6e:62:8f:be:66:69:15:0c:0c:4d:ee:83:b1:
                    8b:3b:fb:ac:d4:9d:c7:bb:5c:b7:09:23:6a:65:79:
                    42:30:9b:6c:7b:91:ea:cf:4a:86:35:23:f8:d0:5f:
                    df:0d:10:9e:83:f3:b3:31:c1:a8:19:64:e7:44:ac:
                    b3:3e:ba:1b:10:3a:a4:36:35:df:38:87:5d:1e:74:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EB:52:A5:7D:B1:60:72:67:10:C5:96:74:B0:49:9C:DD:72:6F:09
            X509v3 Authority Key Identifier:
                keyid:7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3132382e302f32322d3232203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:58:a7:f2:7f:67:f4:fb:62:0c:68:c4:9a:eb:71:31:20:4b:
         94:d2:e5:28:89:de:f7:35:c6:b1:a0:90:df:fa:ee:2b:ed:1a:
         3f:dc:5e:0b:44:96:83:ca:b7:42:0a:66:66:0e:39:95:28:17:
         0e:ee:b0:77:0d:de:76:4e:ea:f8:0e:77:71:c4:cb:bd:88:e2:
         d2:90:c0:78:8d:21:fc:e3:55:34:d7:d6:56:d6:a6:cb:45:41:
         24:91:94:60:c9:fd:8b:f0:68:03:c7:20:d4:60:26:78:28:8d:
         6b:34:9f:c0:70:ac:ac:30:f6:ff:66:dd:1c:da:a9:00:ea:4c:
         99:93:c1:3b:9f:58:71:5b:e3:68:a6:8e:e2:85:ac:70:b5:5f:
         83:ff:26:33:24:70:eb:03:bc:c4:4e:c3:88:f0:78:49:92:1e:
         c4:15:b8:5c:13:0a:2a:3f:52:f9:c5:f1:6a:3f:aa:3d:87:cb:
         5e:33:11:b2:db:df:80:00:0a:c3:e1:cf:10:18:35:1b:dc:fa:
         49:6c:9f:e9:fa:ee:6a:0f:1b:ec:64:29:b8:c4:35:e1:c0:7a:
         88:6b:99:d2:2f:6f:da:4d:ef:07:13:c5:66:06:05:dc:c8:3e:
         8d:bc:fd:27:0d:5c:44:7c:84:2d:a5:de:7f:e9:09:e7:cc:0e:
         62:4e:c4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:55:39 2025 by rpki-client