Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa
File:                     34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa (raw, json)
Hash identifier:          pVYTDtKIwEPErOqEGAxTC17UiiZyOr8zRm73AdHH6KE=
Subject key identifier:   AB:2F:18:B7:E6:6D:0D:3B:2B:60:78:F4:23:B1:4D:8B:B0:47:EC:F5
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       68C19C19BD4AA0484F64F9A1992EC83189F3DFF0
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa
Signing time:             Thu 24 Apr 2025 18:44:16 +0000
ROA not before:           Thu 24 Apr 2025 18:39:16 +0000
ROA not after:            Thu 23 Apr 2026 18:44:16 +0000
asID:                     267373
IP address blocks:        45.234.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 23:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c1:9c:19:bd:4a:a0:48:4f:64:f9:a1:99:2e:c8:31:89:f3:df:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Apr 24 18:39:16 2025 GMT
            Not After : Apr 23 18:44:16 2026 GMT
        Subject: CN=AB2F18B7E66D0D3B2B6078F423B14D8BB047ECF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:d1:1c:63:d1:e5:ce:1a:d0:63:d2:61:02:
                    d9:7b:2d:fa:e4:47:30:5f:d5:43:0d:ca:98:68:eb:
                    6c:01:92:fb:c8:e7:95:17:c1:fd:cd:a0:97:e6:41:
                    0b:97:90:7e:69:17:e7:c5:de:81:17:f3:d4:db:38:
                    ed:cc:8a:96:ce:f0:08:78:27:f5:df:db:7f:c1:f1:
                    df:57:c1:b3:1b:a4:5e:ee:2a:33:69:73:5e:d4:3f:
                    51:03:ed:5b:52:4f:25:ca:bf:c9:af:6a:00:ce:47:
                    28:95:47:31:46:c4:b1:8e:5c:d3:8f:13:43:2a:e8:
                    26:32:5a:da:a1:91:b0:96:07:5f:26:54:50:98:3d:
                    14:ae:44:bd:bd:91:ea:36:68:9f:af:a7:a4:b4:d2:
                    23:ab:76:d6:9d:c3:10:06:ba:37:1f:41:47:e3:e0:
                    ff:ad:46:bf:22:9e:73:80:21:bd:44:a0:01:3a:e4:
                    fa:a5:75:a9:59:d0:75:fc:6a:11:35:4f:31:fa:71:
                    69:a8:e9:67:90:42:47:ce:b5:f9:32:7b:0a:33:14:
                    77:a2:55:2b:bf:b8:2d:dc:a3:ff:02:3c:3a:3c:80:
                    36:f4:32:66:29:c4:76:72:dc:e7:26:4d:03:a4:43:
                    fc:77:d2:6f:5e:ef:0f:9c:0b:66:b9:39:db:9e:4d:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2F:18:B7:E6:6D:0D:3B:2B:60:78:F4:23:B1:4D:8B:B0:47:EC:F5
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:f2:4b:61:f6:fa:3b:73:9b:db:46:20:b0:fd:97:60:e9:04:
         28:fa:bc:cd:6b:6b:f4:0f:28:35:ae:14:75:05:b6:d3:9a:73:
         72:a5:1f:17:b2:0a:3e:df:98:9d:6b:6f:3a:0d:45:77:29:8d:
         71:d5:b0:96:f1:df:db:56:da:3c:61:33:a2:32:a7:66:34:7c:
         0f:b8:77:ce:fa:9f:48:c4:24:54:90:18:47:43:9e:26:a0:ba:
         60:0c:4d:06:4a:9a:08:c7:94:5b:83:db:24:1d:de:e8:57:8f:
         25:14:b6:fb:ee:77:35:43:c8:06:a9:ea:42:17:10:fc:e0:c2:
         af:a3:dd:31:76:d4:a0:52:61:11:72:c6:e9:6c:c3:cd:7f:e9:
         d7:d7:cf:07:a9:56:69:fb:7f:0e:db:e8:1a:08:a5:1c:a7:28:
         e7:ed:1f:93:d2:23:5d:41:7d:8b:be:af:89:89:ba:ea:5b:18:
         e4:5d:68:d9:86:e3:15:97:bc:ae:fa:d0:e5:b3:2f:f2:c5:c2:
         fb:ea:68:4e:97:b5:01:1e:0b:ae:60:0e:95:b7:cd:fc:61:fe:
         0a:8c:e2:a6:43:fa:65:33:40:68:57:40:df:de:21:8b:ce:37:
         0a:dc:0f:66:d7:d8:76:e4:05:a1:ec:8b:3b:73:95:e9:ef:7c:
         97:2d:34:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:00:31 2025 by rpki-client