Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa
File:                     34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa (raw, json)
Hash identifier:          lUtz7MKekr+hul63UNYZ6gl3ng1S5V5Tq0UmFue47Dc=
Subject key identifier:   94:DA:56:DE:DD:99:B4:E1:25:19:74:A2:AE:42:FF:E7:43:43:E3:18
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       3847F073E7F45D6433DAF796503235B09FC2CEC4
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa
Signing time:             Thu 24 Apr 2025 18:44:22 +0000
ROA not before:           Thu 24 Apr 2025 18:39:22 +0000
ROA not after:            Thu 23 Apr 2026 18:44:22 +0000
asID:                     267373
IP address blocks:        45.234.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 15:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:47:f0:73:e7:f4:5d:64:33:da:f7:96:50:32:35:b0:9f:c2:ce:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Apr 24 18:39:22 2025 GMT
            Not After : Apr 23 18:44:22 2026 GMT
        Subject: CN=94DA56DEDD99B4E1251974A2AE42FFE74343E318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:92:a6:19:c5:9a:af:63:d6:e7:6f:60:77:
                    b0:87:39:53:00:a2:89:56:d7:c4:de:1a:8d:cc:5c:
                    12:63:4d:01:2d:08:0e:97:5d:e1:76:dd:e7:6a:72:
                    6a:36:d3:4c:a1:93:5a:75:06:98:35:86:b3:ae:d3:
                    db:6c:ee:79:08:28:46:1e:ad:d3:3d:2f:32:77:61:
                    77:5f:5c:b6:2b:90:f2:e9:80:8a:a9:3b:c9:55:be:
                    09:92:94:35:45:ad:eb:0b:88:55:d2:3b:4e:14:28:
                    a3:9c:ac:5c:1d:d0:27:c0:1e:87:91:f1:66:20:2f:
                    35:f0:87:3a:94:a8:b8:b7:5b:8e:64:08:5a:0a:61:
                    78:13:b8:f8:ca:0e:0d:d3:cb:ba:cd:a9:72:88:52:
                    7e:6d:13:e3:3f:be:c4:39:25:7d:67:7d:47:ff:db:
                    fc:1c:7e:59:d0:24:2a:4c:9b:af:6c:4c:29:5f:50:
                    e7:85:ac:6d:e1:84:8c:f2:d6:d6:43:dc:68:af:97:
                    44:a0:6e:a9:74:48:99:dc:24:30:8b:6d:e4:74:05:
                    2a:86:5c:b7:a1:cd:62:c8:7b:41:71:e6:c9:b6:93:
                    1b:4f:1d:5d:2d:f4:49:c9:e3:77:82:f0:90:90:e8:
                    0f:63:4b:1a:94:e1:3d:30:2c:27:c3:5e:1a:fa:4d:
                    ea:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DA:56:DE:DD:99:B4:E1:25:19:74:A2:AE:42:FF:E7:43:43:E3:18
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:76:1b:59:5c:1c:f3:36:03:2f:c1:ea:ae:1a:e3:cf:4b:d5:
         15:0e:69:56:a1:36:01:2c:6b:cf:9a:bb:04:50:21:2b:21:53:
         b1:93:d5:4a:9b:92:e4:7e:b5:60:99:84:e1:87:de:2e:78:e0:
         6c:a3:2e:9a:cd:20:c4:5f:36:79:31:a5:92:5f:ec:a5:2f:69:
         e8:0a:10:85:c8:80:c1:1a:a6:36:18:ab:01:83:03:76:fa:fd:
         e2:2f:e5:8f:36:c7:87:eb:27:9d:e8:f0:40:30:bf:ee:90:7e:
         53:63:ee:66:f0:48:55:25:cf:c0:13:cb:e1:af:b2:ae:19:71:
         91:63:83:b2:52:44:b5:bc:c8:64:2a:7d:81:46:e7:83:12:26:
         63:81:b4:32:78:a4:e9:47:00:27:fe:83:c4:84:c5:56:3f:c0:
         a7:3a:c5:a4:1c:23:96:2e:75:56:3b:05:91:4c:3c:b9:9b:f6:
         a3:34:4e:49:71:e0:60:6e:9d:57:41:ab:2b:c4:f1:ad:a6:de:
         0c:77:2f:8d:5c:fc:b9:1b:7d:85:7c:84:fd:e2:6e:48:d4:76:
         cd:f5:de:9f:c9:5e:bd:5c:e2:78:ff:6a:99:15:97:33:77:32:
         2c:aa:00:0f:10:df:13:d5:d3:b9:34:ee:91:e1:cd:99:c5:7b:
         bd:ea:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:29:09 2025 by rpki-client