Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3133302e302f32332d3233203d3e20323638373730.roa
File:                     34352e3137322e3133302e302f32332d3233203d3e20323638373730.roa (raw, json)
Hash identifier:          FIeeWoLsZhXRgLwdf3c3qMBwGkvo6sFq60WG4AniKBA=
Subject key identifier:   4B:5E:57:7C:BD:E0:80:93:42:FC:09:B8:E0:91:B4:D6:B5:8D:4D:BE
Certificate issuer:       /CN=7FA00725B865657CC24A17AD7A99947906B51243
Certificate serial:       09CC2AA148ED3041D6E0AB93A9EAF8D8799557DA
Authority key identifier: 7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3133302e302f32332d3233203d3e20323638373730.roa
Signing time:             Thu 20 Mar 2025 19:38:27 +0000
ROA not before:           Thu 20 Mar 2025 19:33:27 +0000
ROA not after:            Thu 19 Mar 2026 19:38:27 +0000
asID:                     268770
IP address blocks:        45.172.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl
                          rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:cc:2a:a1:48:ed:30:41:d6:e0:ab:93:a9:ea:f8:d8:79:95:57:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA00725B865657CC24A17AD7A99947906B51243
        Validity
            Not Before: Mar 20 19:33:27 2025 GMT
            Not After : Mar 19 19:38:27 2026 GMT
        Subject: CN=4B5E577CBDE0809342FC09B8E091B4D6B58D4DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:98:3e:df:0b:4f:a6:82:89:b0:04:82:07:
                    4e:02:13:06:26:a2:a9:4c:8a:6e:34:63:9a:a1:1d:
                    23:2f:f7:5c:2c:37:e1:ad:05:e2:5d:c8:9c:10:f5:
                    52:f1:3e:e5:6d:1c:99:46:8c:59:5a:1d:80:ac:2d:
                    a2:ed:81:10:eb:ea:2a:b0:ad:e5:35:6c:14:31:17:
                    63:e0:70:43:d2:ce:34:a2:20:98:59:18:30:8c:0e:
                    64:d7:61:ff:8c:b1:17:8a:c3:44:65:c4:9a:96:9f:
                    a4:72:df:a9:b2:c2:a0:9a:1f:d0:2a:10:99:ef:3c:
                    62:45:5a:bc:82:0d:8a:4c:0b:c8:f0:6c:d0:e3:38:
                    29:d3:89:26:23:a4:f9:50:0a:86:c1:d0:72:ec:3a:
                    bc:d5:da:f3:d5:3c:56:d4:04:f4:dd:d4:66:a5:75:
                    4b:6e:4d:c9:b8:0c:32:dc:88:44:3e:4b:72:0a:98:
                    61:01:1c:ac:3f:61:77:cf:5c:4e:6e:26:ae:09:34:
                    50:5c:31:11:30:f8:31:d3:c3:3f:86:f6:85:94:83:
                    03:a3:85:b8:69:a3:cb:5c:f6:7b:60:55:59:84:ec:
                    cb:5d:ae:05:d1:39:a2:01:30:0d:16:17:17:f7:b6:
                    0c:36:6f:7b:a2:df:a7:3f:b5:82:d9:18:db:5f:a0:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5E:57:7C:BD:E0:80:93:42:FC:09:B8:E0:91:B4:D6:B5:8D:4D:BE
            X509v3 Authority Key Identifier:
                keyid:7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3133302e302f32332d3233203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:3e:be:36:d0:39:e0:e3:92:6a:1e:fd:f8:10:c4:e5:3f:7f:
         79:43:cd:bf:3d:15:56:6f:a5:09:5b:13:d1:59:12:ad:f6:af:
         50:dc:9f:ea:02:4c:10:82:96:b3:88:eb:7b:7e:bc:ff:1b:b5:
         28:79:da:f9:fb:0c:19:51:17:cf:c3:8e:e5:c3:30:17:23:10:
         7e:94:cc:e8:97:98:35:c8:cb:b4:d7:b7:d5:68:60:42:c8:23:
         49:ce:88:59:3f:bf:24:d8:8b:66:dc:59:45:40:d3:eb:b5:dc:
         d1:77:e6:65:1a:90:c4:ac:29:f7:55:22:89:2f:0b:f8:c8:fd:
         aa:aa:fb:7e:69:aa:fb:ab:0e:ed:64:e7:47:3f:e8:e4:6f:01:
         98:e8:7f:cd:ba:1b:d6:f8:8e:8c:18:46:fb:7b:b0:4f:2f:74:
         de:db:83:d7:3d:35:4a:4a:40:5b:e9:40:75:31:cb:33:dd:24:
         42:c7:55:4e:00:3b:b4:03:d2:a8:c1:71:ff:47:a8:1b:43:ee:
         42:e7:81:0c:ad:7c:12:83:40:79:ef:93:9c:e3:6b:fd:2c:f8:
         2d:5e:ad:40:a7:64:26:4d:de:f0:c6:dd:5a:c9:36:17:e0:bc:
         d3:12:0f:58:cd:f6:2f:ec:49:59:c5:f7:23:69:d3:5b:49:a4:
         47:0e:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:09:49 2025 by rpki-client