Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231392e302f32342d3234203d3e20323638373332.roa
File:                     34352e3137312e3231392e302f32342d3234203d3e20323638373332.roa (raw, json)
Hash identifier:          Fdq1w0781rYcVbIe7UQ6njhXnMUZkZOPjbWjqlltOPs=
Subject key identifier:   5A:9C:FF:6E:19:66:D6:3F:1B:B4:6A:6F:54:11:66:E2:8C:4A:17:4C
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       02A9833DCC9B2D713E85A05BA3C4CADBFEDA9580
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231392e302f32342d3234203d3e20323638373332.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     268732
IP address blocks:        45.171.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a9:83:3d:cc:9b:2d:71:3e:85:a0:5b:a3:c4:ca:db:fe:da:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=5A9CFF6E1966D63F1BB46A6F541166E28C4A174C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4a:fd:58:30:27:76:37:43:bd:82:9e:5b:22:
                    f7:56:05:51:8e:0f:e9:21:58:eb:e0:82:44:80:72:
                    4b:75:d3:b9:51:cc:60:c6:30:2b:ab:d0:68:57:9b:
                    86:06:69:5e:2d:04:ff:38:39:fc:d5:27:8b:60:06:
                    0f:22:d8:78:c8:68:c6:b6:79:85:d6:69:18:08:fc:
                    40:87:53:2b:29:aa:ae:7d:37:a5:b6:55:74:28:28:
                    5b:66:48:d7:e7:f2:3e:3c:32:17:1c:1a:a9:e9:9b:
                    4e:24:3e:80:63:4b:e4:b4:ba:96:c3:b9:c3:55:16:
                    3e:bd:6d:ef:4e:72:24:28:33:22:d4:16:41:97:2b:
                    23:ed:b7:4f:b6:3e:8d:6d:86:50:4d:a7:a9:06:0b:
                    99:8f:16:2b:70:f1:f8:bc:d0:6e:b7:87:b4:cc:45:
                    dc:6d:0e:a5:33:a0:45:40:9c:01:0a:85:e9:55:6b:
                    57:4c:23:04:b5:39:80:eb:c6:f5:23:0e:08:fb:28:
                    96:6f:03:12:56:2b:8a:ca:66:1f:63:bb:57:b3:66:
                    87:25:df:a5:f5:09:d2:fb:16:ca:68:ac:0a:a5:b1:
                    b0:53:c2:58:b8:6b:d5:f6:1b:f5:6b:45:af:9d:7f:
                    7b:f8:cf:a5:8f:85:80:78:ce:a0:ba:c9:5d:e2:10:
                    38:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9C:FF:6E:19:66:D6:3F:1B:B4:6A:6F:54:11:66:E2:8C:4A:17:4C
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231392e302f32342d3234203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ad:03:16:de:28:83:5d:a6:c6:61:aa:d9:cb:d5:e5:3a:0a:
         00:ef:02:a8:6a:53:60:54:99:78:56:f6:ed:36:53:7e:68:dd:
         45:70:c4:cb:87:0a:84:6a:0b:cb:65:43:78:f7:ff:73:83:ea:
         03:dd:52:ca:66:9d:de:a0:93:59:4f:dc:a0:21:80:d7:ab:70:
         fe:bd:0b:e7:73:0f:0b:5b:6e:ea:45:57:cc:80:ca:80:1e:a2:
         6b:c7:7f:0d:91:be:1a:42:4f:79:c1:9b:3b:39:a8:db:d1:ca:
         83:36:1e:7d:b5:a6:e4:2a:63:10:d8:df:3a:a0:2c:86:0b:f1:
         f1:d5:fc:9c:12:58:75:98:cc:99:a8:b8:e6:4f:7d:a4:ce:c6:
         11:47:78:0c:06:af:98:be:a2:2c:ea:d8:74:11:1f:9f:cb:24:
         69:68:10:9e:ac:44:54:2b:8f:66:58:6c:f1:80:75:7e:57:8b:
         5b:0e:d9:cf:58:34:28:19:95:ff:f3:dd:8b:c5:1c:66:26:94:
         a8:a7:76:bd:09:75:01:42:94:17:0a:cc:28:5d:77:84:0b:5e:
         34:8a:f6:f1:59:7a:96:b9:23:14:77:40:55:9f:18:c0:fc:96:
         d2:ed:ec:3a:91:c9:9a:c7:67:cb:e9:62:0d:e0:79:69:23:f8:
         8c:c0:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:44 2025 by rpki-client