Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/34352e3138372e32382e302f32322d3234203d3e20323639343530.roa
File:                     34352e3138372e32382e302f32322d3234203d3e20323639343530.roa (raw, json)
Hash identifier:          FDci40yvcK7JjTem9zJy0mIrp7QPcFKrN44FtfIWQIE=
Subject key identifier:   CD:69:27:FA:D1:F3:73:9F:16:BC:67:D5:45:A5:D6:33:DC:35:68:B4
Certificate issuer:       /CN=BEF25DBD3AC7F344FE086C16B051C5B219A969C1
Certificate serial:       7320545F619D1C540B18CB9666FB28CEBC3893B7
Authority key identifier: BE:F2:5D:BD:3A:C7:F3:44:FE:08:6C:16:B0:51:C5:B2:19:A9:69:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/34352e3138372e32382e302f32322d3234203d3e20323639343530.roa
Signing time:             Thu 17 Apr 2025 18:22:32 +0000
ROA not before:           Thu 17 Apr 2025 18:17:32 +0000
ROA not after:            Thu 16 Apr 2026 18:22:32 +0000
asID:                     269450
IP address blocks:        45.187.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.crl
                          rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 01:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:20:54:5f:61:9d:1c:54:0b:18:cb:96:66:fb:28:ce:bc:38:93:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEF25DBD3AC7F344FE086C16B051C5B219A969C1
        Validity
            Not Before: Apr 17 18:17:32 2025 GMT
            Not After : Apr 16 18:22:32 2026 GMT
        Subject: CN=CD6927FAD1F3739F16BC67D545A5D633DC3568B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c7:f6:b3:06:fc:31:1d:7f:f6:55:d1:7a:30:
                    1d:39:e0:45:75:14:9d:44:10:19:ba:b5:7e:89:8a:
                    1e:34:03:cf:78:e7:07:9f:46:7a:e7:46:d1:55:b0:
                    13:01:75:99:5b:de:99:ec:70:e8:bc:04:85:71:67:
                    e9:30:c4:a8:b7:7d:4b:9a:80:37:58:7f:7a:23:fb:
                    1a:42:cf:ff:d6:c3:95:a1:ac:7d:6f:be:dd:44:1e:
                    13:c0:21:cf:21:32:2a:b0:90:e4:7e:a2:df:f7:93:
                    29:72:9d:cb:37:0e:2e:74:c4:16:be:3e:eb:14:20:
                    af:5c:93:20:bd:6b:e6:cf:54:f4:2d:d2:83:44:17:
                    ea:fc:1b:0e:d1:ca:ea:a6:cd:e0:0d:ce:4a:b5:93:
                    64:60:9f:34:04:08:f0:02:2c:bf:76:48:1c:ad:3a:
                    1f:f2:7a:98:8c:36:94:43:e8:75:96:70:09:b2:02:
                    f9:85:72:c3:d6:9b:f6:79:79:62:2b:df:d8:8a:07:
                    65:a1:7f:c8:ad:c5:fe:35:ca:0e:07:ef:75:3f:a3:
                    ca:b1:78:ad:c0:3b:bc:85:19:76:62:75:b9:13:f4:
                    32:84:ca:84:29:92:cd:40:9e:13:df:88:49:68:92:
                    b4:dd:51:8d:1b:fa:ae:a0:72:7a:1e:3f:10:dd:6c:
                    e7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:69:27:FA:D1:F3:73:9F:16:BC:67:D5:45:A5:D6:33:DC:35:68:B4
            X509v3 Authority Key Identifier:
                keyid:BE:F2:5D:BD:3A:C7:F3:44:FE:08:6C:16:B0:51:C5:B2:19:A9:69:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/34352e3138372e32382e302f32322d3234203d3e20323639343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:e1:6c:2a:28:ca:4c:53:44:df:52:e6:02:ed:66:0c:0f:a9:
         d0:1a:5c:36:03:bb:34:ea:02:b0:35:b9:7c:07:1e:ed:84:95:
         1f:5e:3f:3a:83:94:81:d7:6a:2f:c3:dd:e6:4e:e9:38:02:ae:
         27:0c:5d:e2:f3:36:dc:f4:fd:97:f1:9b:98:fc:4d:bb:2e:58:
         08:c3:e0:60:13:73:22:c0:b1:cc:3f:ab:9a:01:f9:05:09:c0:
         0f:5d:a7:52:4e:f8:b8:74:a0:12:3f:42:49:d0:97:f7:f6:61:
         d7:1c:72:bf:c8:d8:8f:70:44:b7:51:25:43:d0:33:15:75:14:
         3d:4f:c2:21:de:14:41:94:52:9c:93:68:e7:b2:f1:15:af:17:
         f4:db:f1:d9:57:49:7b:35:c4:6b:30:9d:5d:ad:f9:9c:19:99:
         f1:2c:74:ca:f9:ed:9d:fd:29:5a:a5:f4:cc:87:82:6b:0a:61:
         dc:ed:1d:61:e9:f9:14:35:e6:15:93:38:cc:58:da:53:f0:2f:
         49:48:91:de:2f:58:c1:5c:ac:6b:2c:e1:6b:3f:c2:b7:0c:2c:
         6d:4a:38:e2:9f:55:42:c4:74:5f:e7:b3:c0:ee:6a:b2:6d:51:
         1c:4a:d1:f5:14:b1:8b:f4:22:93:85:97:6c:df:94:f1:ef:55:
         5d:c0:e9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:47:59 2025 by rpki-client