Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/34352e37312e34322e302f32342d3234203d3e20323733333136.roa
File:                     34352e37312e34322e302f32342d3234203d3e20323733333136.roa (raw, json)
Hash identifier:          v8PTqPPRD04rlMWLNC5/9jY/kTJFE3RwygabNnT1HRQ=
Subject key identifier:   A1:8F:26:39:84:82:A1:14:E6:C3:FF:17:2A:66:55:51:F5:0B:C4:5A
Certificate issuer:       /CN=79798C354EE82F89133F9F2BDCA4F8220483498E
Certificate serial:       6F9646B1D7BECE52C09780C4C44F47415C225919
Authority key identifier: 79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/34352e37312e34322e302f32342d3234203d3e20323733333136.roa
Signing time:             Wed 05 Mar 2025 22:00:49 +0000
ROA not before:           Wed 05 Mar 2025 21:55:49 +0000
ROA not after:            Wed 04 Mar 2026 22:00:49 +0000
asID:                     273316
IP address blocks:        45.71.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl
                          rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:15:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:96:46:b1:d7:be:ce:52:c0:97:80:c4:c4:4f:47:41:5c:22:59:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79798C354EE82F89133F9F2BDCA4F8220483498E
        Validity
            Not Before: Mar  5 21:55:49 2025 GMT
            Not After : Mar  4 22:00:49 2026 GMT
        Subject: CN=A18F26398482A114E6C3FF172A665551F50BC45A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:88:49:5f:cf:2f:c9:84:4f:ab:f5:56:62:
                    41:be:4d:9a:3b:dd:70:a8:73:14:81:08:5c:09:21:
                    33:c3:78:f2:8b:5b:d0:97:c9:2b:2a:54:82:c1:e8:
                    08:59:66:f2:6d:7e:21:b8:72:b2:53:f8:96:78:a2:
                    d5:be:81:3c:bd:42:03:a6:a7:aa:c2:4b:48:0f:6a:
                    91:3f:b5:f9:b1:d1:01:bc:0b:fb:1a:a5:8d:ae:48:
                    58:14:83:1e:02:e4:6c:b3:fb:29:62:0a:1c:8c:c4:
                    8e:26:5b:89:8e:ce:9b:fc:2d:a3:ae:e2:97:f4:d4:
                    86:e2:2a:50:a0:2d:c9:9a:0b:da:18:4e:0b:86:b6:
                    7e:50:86:f0:a9:34:15:ee:40:ff:31:ac:2d:b5:3d:
                    59:20:0a:68:26:0b:35:92:83:fe:0a:1f:d7:e6:dc:
                    b6:b3:2e:b0:00:17:a9:9c:b5:b1:d3:0a:06:26:51:
                    b9:bf:3f:3d:fc:6d:0c:f6:69:72:a7:63:53:a9:31:
                    ef:0c:5e:48:f7:7f:3c:52:3d:bd:fc:6d:32:08:fb:
                    6a:f8:4a:a5:d5:74:6a:72:16:13:95:e7:0e:ad:2e:
                    f9:ea:bc:dc:d8:ec:c5:cf:d4:fc:e6:a3:25:1d:8b:
                    ff:3e:04:bf:5a:b1:04:b5:fa:bf:5e:06:66:d1:47:
                    a7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8F:26:39:84:82:A1:14:E6:C3:FF:17:2A:66:55:51:F5:0B:C4:5A
            X509v3 Authority Key Identifier:
                keyid:79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/34352e37312e34322e302f32342d3234203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:35:ff:cb:34:eb:cb:28:d1:ae:c1:0b:0c:6a:1c:36:b2:94:
         b4:33:1c:82:ab:49:73:85:6e:3a:48:54:85:11:0a:50:86:95:
         ca:b2:88:59:45:33:06:93:bf:fd:8b:88:c7:d3:bd:52:f9:cf:
         79:6a:0f:fe:ca:5e:49:dd:37:52:a6:0b:6a:4a:15:31:a0:ae:
         8c:f7:d1:87:85:94:e2:94:6e:81:b1:30:be:fe:6e:8c:15:cb:
         98:ad:ab:da:bb:e8:60:fd:12:a6:24:14:cc:24:97:ef:ac:a0:
         50:bb:37:46:f5:28:7c:46:6e:93:3a:4a:6f:54:52:95:31:16:
         3a:41:65:87:69:ad:71:a9:c9:e7:c9:b5:f1:aa:cf:06:bf:64:
         c3:8b:ac:57:ca:e9:8f:8d:a7:96:2f:49:1c:71:c5:4b:62:1a:
         c4:2d:ae:b7:e7:05:a0:ae:3a:f1:c9:4e:84:3f:07:44:7e:6b:
         a7:54:35:8d:21:6d:fb:60:80:db:e9:b9:22:28:1e:04:4b:24:
         90:b6:b4:c4:77:02:77:ee:16:ba:9b:6b:06:70:ae:c4:b3:a0:
         aa:92:87:5d:e5:f7:e7:8a:34:ee:3b:04:1d:0a:31:63:f2:26:
         bb:bf:6a:1a:9c:1b:45:df:3b:4f:6a:05:04:b0:65:72:5b:c7:
         0f:2e:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:19:09 2025 by rpki-client