Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa
File:                     34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (raw, json)
Hash identifier:          F+mot+FSQP0fE+UXpORQq/D2rcEErdSMSnaWMURftDk=
Subject key identifier:   21:6A:49:99:D9:A4:75:5A:23:64:F9:56:8B:EF:57:7C:AD:B0:10:9A
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       345C6AF48F7440F968690A06CC44C961F0C2A304
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa
Signing time:             Thu 24 Apr 2025 18:44:13 +0000
ROA not before:           Thu 24 Apr 2025 18:39:13 +0000
ROA not after:            Thu 23 Apr 2026 18:44:13 +0000
asID:                     267373
IP address blocks:        45.234.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 23:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5c:6a:f4:8f:74:40:f9:68:69:0a:06:cc:44:c9:61:f0:c2:a3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Apr 24 18:39:13 2025 GMT
            Not After : Apr 23 18:44:13 2026 GMT
        Subject: CN=216A4999D9A4755A2364F9568BEF577CADB0109A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:68:b8:e6:05:41:96:a5:1d:49:12:52:26:
                    18:e4:b1:1b:c5:92:36:47:bf:cc:60:9a:f4:58:51:
                    94:36:39:b8:3c:48:40:18:3c:32:69:94:dc:f5:f7:
                    af:db:21:c7:e6:b3:84:dc:16:03:b7:f7:77:d0:70:
                    8f:a7:e0:24:0d:ed:b6:6c:75:a9:bd:fc:00:76:9d:
                    7a:2f:c1:3b:bf:c7:d9:c9:b1:c6:95:46:d9:76:16:
                    64:b6:76:bd:40:ea:67:ea:6b:1b:8c:12:82:3b:fb:
                    9c:76:88:5a:39:ef:eb:41:f8:db:90:1d:3a:68:4f:
                    3f:be:c5:32:f0:22:b7:5e:2a:e3:47:ba:19:d8:0d:
                    fc:b5:53:51:93:8e:f3:6c:e2:cb:51:46:1d:6f:35:
                    60:e5:6a:a1:ec:6d:a0:82:4c:b5:e8:db:2c:6d:ef:
                    4a:90:ba:b3:d1:fb:b4:0b:d2:3e:3d:a4:5a:c8:f4:
                    be:b9:8a:9c:31:0e:00:b8:c4:40:98:70:78:4a:82:
                    74:45:16:6a:55:e3:aa:2c:bc:43:f0:bd:12:5c:79:
                    85:19:92:b2:7b:66:09:a8:09:90:fc:64:eb:34:3a:
                    d5:99:f3:d9:af:28:fc:73:8c:75:75:54:8b:a6:6c:
                    48:1e:1d:99:70:8b:dd:f2:39:14:2e:51:de:46:de:
                    32:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6A:49:99:D9:A4:75:5A:23:64:F9:56:8B:EF:57:7C:AD:B0:10:9A
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:c6:bb:02:bd:7d:a0:06:eb:db:9c:8c:26:38:ae:e1:97:f7:
         f4:ec:0f:9d:0d:a3:c4:03:0e:b5:da:c0:1a:40:16:65:6b:07:
         b3:8f:2c:15:8e:d9:ab:fc:e3:de:68:77:c0:e7:d5:01:62:c4:
         2b:ce:44:a4:ba:f8:ab:76:59:81:05:b3:dd:be:4d:05:42:3f:
         5b:65:d6:69:6d:94:b3:6f:f3:2a:ac:51:09:fe:e2:f1:38:42:
         8b:bc:46:c7:af:e0:4b:9b:ba:b2:ab:37:71:41:90:96:8d:f6:
         8c:c4:73:ee:2f:d7:fb:5a:69:94:94:7c:86:b9:af:a6:19:7a:
         a6:ed:ef:3e:87:69:44:8c:67:12:0a:81:fb:ee:93:a5:9f:4b:
         1c:20:eb:fe:10:d5:b7:84:1a:71:3c:18:dd:ca:da:69:89:a6:
         2a:35:20:00:dc:ff:7a:30:50:cc:2c:d1:07:b8:75:5e:ba:14:
         11:e0:54:be:09:e0:15:6f:fc:28:26:5e:95:f2:55:09:b6:e7:
         22:ee:f1:36:29:f0:28:2e:df:e0:f7:b2:c7:fa:4c:c0:33:c7:
         66:59:b1:b9:0c:b3:a5:0d:f4:96:60:2b:79:41:c5:b0:7a:ec:
         3a:00:39:1c:1c:bb:30:fc:21:5f:e0:c5:17:2f:d5:62:df:78:
         6f:9f:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:21:16 2025 by rpki-client