Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3132382e302f32332d3233203d3e20323638373730.roa
File:                     34352e3137322e3132382e302f32332d3233203d3e20323638373730.roa (raw, json)
Hash identifier:          XdvmJPZ1RO8c3yM41+djBLxIYwC2dgewt1qA99WD2R4=
Subject key identifier:   83:2B:28:F8:04:B4:6F:BC:86:D5:FD:B8:37:6C:44:9E:92:F9:A6:DC
Certificate issuer:       /CN=7FA00725B865657CC24A17AD7A99947906B51243
Certificate serial:       6676AD0433753929E245324EC7CB818E03A17912
Authority key identifier: 7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3132382e302f32332d3233203d3e20323638373730.roa
Signing time:             Thu 20 Mar 2025 19:38:07 +0000
ROA not before:           Thu 20 Mar 2025 19:33:07 +0000
ROA not after:            Thu 19 Mar 2026 19:38:07 +0000
asID:                     268770
IP address blocks:        45.172.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl
                          rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:76:ad:04:33:75:39:29:e2:45:32:4e:c7:cb:81:8e:03:a1:79:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA00725B865657CC24A17AD7A99947906B51243
        Validity
            Not Before: Mar 20 19:33:07 2025 GMT
            Not After : Mar 19 19:38:07 2026 GMT
        Subject: CN=832B28F804B46FBC86D5FDB8376C449E92F9A6DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e5:8f:99:8d:67:3d:18:de:71:a2:3a:cb:fd:
                    ce:cb:a0:4f:09:93:41:c3:4c:83:ad:88:85:26:27:
                    a1:e8:07:15:3e:f7:29:84:ce:62:df:03:da:49:b5:
                    d9:00:d6:f9:91:30:8f:04:39:f3:1d:62:cf:d6:54:
                    2b:19:bc:2e:12:b8:0b:92:26:d0:81:04:13:9e:24:
                    91:a3:15:68:4e:0b:cf:46:e1:b2:f8:6e:f9:89:9a:
                    b4:86:d5:e4:ff:ab:98:a4:2f:27:a1:da:39:a9:dc:
                    a6:c1:91:e8:b3:84:d1:ac:f0:7c:70:80:ea:4a:93:
                    89:a4:cc:09:10:32:c9:11:c6:2c:88:4d:1b:cb:90:
                    73:b7:8a:44:c8:88:dd:ec:af:1a:40:26:8f:55:e0:
                    48:82:45:2f:7e:6f:19:6a:26:4e:71:14:fa:40:06:
                    fd:81:49:e0:5f:63:42:fb:72:c1:8b:ae:13:e0:b7:
                    75:db:00:a3:15:48:a2:d8:d8:56:d8:3f:d7:90:3e:
                    7f:73:a6:32:2c:ea:30:f5:18:e6:92:3e:b8:c6:60:
                    a0:d3:a2:d4:4e:47:7c:a6:bc:8c:57:6b:9d:20:07:
                    a3:82:fc:9f:d3:1f:ef:b5:57:2d:14:aa:b2:32:97:
                    32:7b:cd:8b:ae:2f:53:ce:fc:09:28:1c:1c:c4:73:
                    c8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2B:28:F8:04:B4:6F:BC:86:D5:FD:B8:37:6C:44:9E:92:F9:A6:DC
            X509v3 Authority Key Identifier:
                keyid:7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3132382e302f32332d3233203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:67:a1:36:e7:da:f5:4d:53:46:7d:8f:ac:8c:2e:66:0e:36:
         1e:4e:d3:1f:46:11:f7:ce:4a:71:a8:df:08:8f:e8:2c:43:c2:
         f3:04:15:9b:1e:14:a1:4f:51:7d:f7:3c:51:5a:50:5c:54:8a:
         f7:be:ec:d5:23:de:f6:ed:84:01:ff:a5:17:21:81:30:28:65:
         31:99:2d:ad:ae:93:e4:b5:9e:e3:26:04:7d:76:3b:ac:ec:5a:
         be:be:26:01:62:a5:39:07:a3:c0:8d:02:25:ac:80:ca:12:4f:
         e9:83:77:f4:43:dd:1f:89:a5:51:9a:35:86:4d:9f:57:36:c7:
         2a:0d:bb:5e:e5:e9:09:53:2e:0d:cf:99:c7:0b:bc:6d:79:11:
         fb:76:30:c9:44:d0:50:18:24:d1:b9:12:34:42:ec:26:0e:25:
         cc:a3:a5:2a:cd:c0:00:5d:19:4b:e0:cf:6d:8c:bc:0a:33:08:
         43:96:db:14:86:d7:c0:db:3f:a5:81:69:83:4d:61:45:4a:4d:
         63:52:8c:6a:b5:d1:5f:0f:58:28:8b:90:c1:0d:3a:2d:68:cf:
         32:9b:71:b0:84:57:1a:d6:cd:21:e2:ae:63:55:dc:ef:c8:78:
         36:ea:26:c0:b8:25:62:90:98:1b:4b:48:84:74:8c:32:6e:f2:
         73:fe:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:58:05 2025 by rpki-client