Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3132392e302f32342d3234203d3e20323638373730.roa
File:                     34352e3137322e3132392e302f32342d3234203d3e20323638373730.roa (raw, json)
Hash identifier:          TNrjNGDkTZ9YlC5Vebn4n98nY+qxdDY84ocIR/uR3hM=
Subject key identifier:   DB:BD:F2:70:EA:5E:EB:02:53:87:26:BD:83:C0:7D:3D:AB:DC:30:DE
Certificate issuer:       /CN=7FA00725B865657CC24A17AD7A99947906B51243
Certificate serial:       5E5CA0B50805482858790AF5D52BAFB4632F9E7F
Authority key identifier: 7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3132392e302f32342d3234203d3e20323638373730.roa
Signing time:             Thu 20 Mar 2025 19:38:23 +0000
ROA not before:           Thu 20 Mar 2025 19:33:23 +0000
ROA not after:            Thu 19 Mar 2026 19:38:23 +0000
asID:                     268770
IP address blocks:        45.172.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl
                          rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5c:a0:b5:08:05:48:28:58:79:0a:f5:d5:2b:af:b4:63:2f:9e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA00725B865657CC24A17AD7A99947906B51243
        Validity
            Not Before: Mar 20 19:33:23 2025 GMT
            Not After : Mar 19 19:38:23 2026 GMT
        Subject: CN=DBBDF270EA5EEB02538726BD83C07D3DABDC30DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:b9:23:c8:db:83:f7:66:a3:74:2c:42:af:
                    ee:c3:d4:82:dc:4d:67:b8:a1:33:51:fb:51:d1:17:
                    ea:08:c7:8e:da:99:cf:0b:4b:2e:66:de:4a:3d:a7:
                    8a:a2:99:a8:73:49:9d:65:2e:3f:97:43:aa:eb:bb:
                    68:51:f3:a4:c8:47:e7:cc:2c:10:22:d8:57:b0:8a:
                    47:ad:d2:1d:70:ad:62:a5:4a:1e:c0:63:7e:83:79:
                    7d:b3:18:d0:36:0c:d0:e0:7b:8f:bd:73:d5:2d:3e:
                    00:61:97:9b:a1:b4:de:fe:c9:88:12:60:13:64:3b:
                    8d:8f:ee:fe:1a:0c:05:72:68:50:35:f6:0a:62:09:
                    4a:d8:47:e3:87:c7:58:39:0d:5c:46:91:bb:7b:99:
                    c0:bb:ee:0e:c5:15:39:a5:46:be:c6:e6:87:b1:95:
                    74:71:b6:ce:69:29:41:b1:63:6a:57:3c:e9:09:56:
                    bb:3d:32:d4:d2:48:bc:89:ec:25:44:08:03:68:7d:
                    d2:73:08:0a:d9:f8:a3:ff:d0:44:37:3c:6f:6e:db:
                    84:9f:88:80:a7:e3:ed:62:e0:69:0b:81:ae:42:83:
                    e7:df:3e:15:df:b9:b4:e9:e1:e8:18:33:59:70:af:
                    39:36:fd:c5:b8:0b:ce:a5:b7:72:3e:51:d5:8f:1c:
                    f8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BD:F2:70:EA:5E:EB:02:53:87:26:BD:83:C0:7D:3D:AB:DC:30:DE
            X509v3 Authority Key Identifier:
                keyid:7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3132392e302f32342d3234203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:7b:fe:f4:9e:b1:fb:fe:bb:45:30:11:44:dd:82:0b:a2:fe:
         8b:62:63:a6:f4:4b:5b:9c:8c:99:fa:a7:35:45:73:17:64:84:
         93:97:21:5b:34:79:c5:a8:06:f9:21:26:08:fd:2a:49:02:32:
         f2:23:b7:9e:32:0d:55:6a:85:43:b3:0e:3b:2c:f2:b2:76:55:
         dc:30:25:6d:51:f0:81:ad:f9:3f:49:fe:ef:fd:44:d0:ff:45:
         ce:d7:32:12:33:91:8a:2e:29:f7:10:b1:15:5b:b1:b8:1e:df:
         1f:15:50:9c:24:79:21:a2:2f:f4:3e:ac:bd:29:40:63:2f:c0:
         c7:19:f2:bd:88:7d:f1:77:dc:90:14:57:1a:db:e5:78:0a:44:
         d8:ec:34:6e:32:10:60:79:f8:bf:61:06:5e:4e:bb:7c:49:a0:
         7e:5a:48:78:58:59:b4:da:35:27:9d:94:ed:d3:48:79:75:a2:
         bf:71:03:bb:c5:71:8f:38:15:43:36:17:73:50:0f:6d:69:a7:
         cc:42:d1:e5:28:19:9b:9a:5e:41:9e:77:e4:f8:31:3f:5e:8f:
         fa:f1:b0:97:0a:c4:fc:72:c8:57:cb:ac:73:a2:cb:12:a5:95:
         c7:8c:d1:17:c7:6b:21:db:cf:7f:a2:09:40:fa:63:0b:41:72:
         b5:25:bf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:04:59 2025 by rpki-client