Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38302e302f32322d3234203d3e20323638363038.roa
File:                     34352e3136342e38302e302f32322d3234203d3e20323638363038.roa (raw, json)
Hash identifier:          pqLvHbzmP4x78jyx1dxR5gDOtnJfUhYy3maP/rdj1Hk=
Subject key identifier:   7B:AB:11:2C:D1:03:75:9A:D7:C9:51:5A:31:39:FC:86:30:8C:17:39
Certificate issuer:       /CN=B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2
Certificate serial:       17DA50645EA919AA5E45BD901BBBBD218A1A5059
Authority key identifier: B7:9F:6A:EA:A7:F8:12:9E:7F:C6:13:0A:0B:0D:EA:71:7E:8F:A3:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38302e302f32322d3234203d3e20323638363038.roa
Signing time:             Mon 10 Mar 2025 19:59:50 +0000
ROA not before:           Mon 10 Mar 2025 19:54:50 +0000
ROA not after:            Mon 09 Mar 2026 19:59:50 +0000
asID:                     268608
IP address blocks:        45.164.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2.crl
                          rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:da:50:64:5e:a9:19:aa:5e:45:bd:90:1b:bb:bd:21:8a:1a:50:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2
        Validity
            Not Before: Mar 10 19:54:50 2025 GMT
            Not After : Mar  9 19:59:50 2026 GMT
        Subject: CN=7BAB112CD103759AD7C9515A3139FC86308C1739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8f:8c:ac:26:d6:9f:f9:75:c8:12:dd:86:2d:
                    30:96:f8:1c:26:a7:ab:89:51:f0:0e:1f:20:39:23:
                    37:af:ca:68:ed:61:60:6e:e4:ac:a5:a2:6f:cb:60:
                    91:e6:8e:6e:64:1b:b9:86:04:a5:33:1a:09:e8:5e:
                    9f:cf:e3:6b:1d:3a:ac:04:b9:fe:f1:cb:31:50:9c:
                    2f:80:2c:d5:91:92:ea:ed:34:66:2f:a8:de:8b:c2:
                    44:40:7d:3d:d7:c7:c2:3d:a6:a5:57:03:ac:22:e6:
                    dd:29:5f:c7:ea:a9:6e:51:dc:3b:ce:a3:54:0f:1d:
                    e7:82:ec:9a:b2:cc:cf:38:64:a0:62:62:09:9f:9c:
                    35:75:f3:15:f4:13:37:66:7f:2b:9a:9a:c9:53:f4:
                    06:67:49:45:af:9f:eb:2e:95:bd:78:b4:8c:6b:df:
                    ca:97:97:7b:1c:59:15:60:2f:fd:74:f3:54:b8:c1:
                    e2:c7:d3:b9:3b:a3:8b:fc:ac:45:0e:1d:cf:ea:37:
                    88:01:c4:25:8f:02:86:f1:53:30:92:ef:43:15:80:
                    ae:89:aa:2f:1d:6b:3c:71:21:50:04:55:17:4d:c5:
                    77:5d:8f:20:54:1a:25:9e:33:41:8a:dc:6e:02:de:
                    1e:a3:50:da:44:c8:96:1b:fb:e1:dd:ee:2e:8b:3e:
                    93:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AB:11:2C:D1:03:75:9A:D7:C9:51:5A:31:39:FC:86:30:8C:17:39
            X509v3 Authority Key Identifier:
                keyid:B7:9F:6A:EA:A7:F8:12:9E:7F:C6:13:0A:0B:0D:EA:71:7E:8F:A3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B79F6AEAA7F8129E7FC6130A0B0DEA717E8FA3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38302e302f32322d3234203d3e20323638363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:7f:74:bd:51:ed:84:b6:f4:5d:88:fa:41:30:d0:97:5d:
         cb:82:71:07:ab:14:f5:ff:0e:87:9e:8d:c3:37:66:76:af:14:
         02:b0:f5:22:6f:9e:25:0c:4a:30:2c:68:71:d8:2c:b7:d2:99:
         80:bd:ba:82:2b:3a:f7:b0:d7:70:90:b8:a9:ec:d2:01:bf:5a:
         42:b9:07:fa:50:5f:5e:84:9d:bf:94:67:83:f3:7c:e0:b2:66:
         a3:23:26:d7:60:f5:8a:95:86:be:1f:94:04:46:61:9c:5a:4b:
         28:3e:06:a3:8e:d2:e6:52:48:31:d1:a3:00:ae:4c:c1:5e:19:
         e1:d3:8a:c8:62:89:31:f7:16:41:2e:4c:e3:0d:c6:db:e7:08:
         db:bf:2a:4d:72:bf:1f:86:c3:e5:aa:79:39:c6:61:db:1d:dd:
         fc:80:a6:73:39:46:5c:04:20:6b:b2:80:90:8c:93:5e:d6:0f:
         db:e5:18:f8:44:68:00:e3:87:89:d5:6a:47:d2:0e:8a:ef:09:
         7e:48:4d:9f:4f:c4:8c:f5:ac:19:fb:fb:88:15:54:ed:9c:c8:
         34:01:89:8a:9a:3b:50:67:a5:81:56:cd:49:6e:09:bd:3d:be:
         ae:8b:fd:08:da:13:be:00:a1:f8:cf:d1:0e:a8:c8:be:f7:cc:
         48:32:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:25:16 2025 by rpki-client