Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32332d3233203d3e20323638303931.roa
File:                     34352e3136392e32342e302f32332d3233203d3e20323638303931.roa (raw, json)
Hash identifier:          V/v0Vcnx8IgELN260Tne+Gz1U0goK7dkt9QWajvlzUs=
Subject key identifier:   63:E7:FE:82:E0:DE:BD:3D:44:3C:01:69:3B:45:66:D6:AB:34:F5:33
Certificate issuer:       /CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C
Certificate serial:       73ADB1B7CEE8BCAA22064BC16521E414D24263EE
Authority key identifier: 89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32332d3233203d3e20323638303931.roa
Signing time:             Thu 08 May 2025 18:33:44 +0000
ROA not before:           Thu 08 May 2025 18:28:44 +0000
ROA not after:            Thu 07 May 2026 18:33:44 +0000
asID:                     268091
IP address blocks:        45.169.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl
                          rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 11:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ad:b1:b7:ce:e8:bc:aa:22:06:4b:c1:65:21:e4:14:d2:42:63:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C
        Validity
            Not Before: May  8 18:28:44 2025 GMT
            Not After : May  7 18:33:44 2026 GMT
        Subject: CN=63E7FE82E0DEBD3D443C01693B4566D6AB34F533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:82:7c:aa:be:77:5e:4a:7c:4a:6d:44:51:
                    cc:16:c7:9d:bc:e9:8b:d1:7b:18:b2:ca:a5:a9:ae:
                    a1:a0:85:68:69:d4:c7:d2:3a:ae:c4:44:a3:d5:fa:
                    0e:3a:0b:9e:d7:ff:be:64:0b:93:23:22:fe:c8:34:
                    df:d3:f3:9f:cf:40:41:fb:c6:e1:f9:6a:c2:59:e0:
                    b1:39:cd:75:72:94:c2:00:c8:88:14:61:51:25:04:
                    a2:5c:79:de:19:13:86:7a:c6:a8:f4:24:df:9d:bf:
                    77:8e:cb:51:fa:65:1f:89:95:8f:c2:b1:e7:74:5e:
                    97:1f:6c:5b:8e:1f:b3:67:cc:c3:da:ec:ea:40:1c:
                    99:bc:6d:c5:dc:5b:31:bd:aa:72:12:27:79:35:dd:
                    f3:8e:7b:19:84:45:5d:58:78:3e:60:17:ae:be:f2:
                    00:68:c2:a0:6c:4e:b5:09:da:27:2a:9f:07:03:8a:
                    55:80:e0:26:1f:7c:2e:0a:fc:a9:d9:1c:1f:74:87:
                    b2:d9:02:6f:61:c3:e1:21:85:5a:27:0d:17:f6:73:
                    73:ff:a6:83:d7:dd:75:0e:5a:27:4a:9b:73:39:99:
                    1a:7e:d7:c8:81:9e:fa:61:2a:fc:fd:6e:09:75:15:
                    b2:e6:0a:ed:6d:ba:c0:be:38:6e:c2:0f:ee:5e:c7:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E7:FE:82:E0:DE:BD:3D:44:3C:01:69:3B:45:66:D6:AB:34:F5:33
            X509v3 Authority Key Identifier:
                keyid:89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32332d3233203d3e20323638303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:7d:64:d2:a6:7a:a1:db:f9:dc:e3:bc:09:aa:21:b6:0c:
         77:5e:50:9b:ff:3f:24:d9:5f:2a:a2:71:4b:5c:c0:e9:71:df:
         7d:d8:c6:b2:f6:34:a6:67:84:a9:8e:2c:a4:20:70:9f:39:9e:
         d4:0b:5a:8a:c0:56:48:26:4d:ea:98:00:04:c1:65:fa:14:4d:
         fd:71:39:8c:d2:02:98:9b:d4:eb:0a:2e:ab:cf:42:67:60:df:
         d1:c0:be:c7:f7:e0:e8:e7:84:86:36:72:fc:08:c2:c1:12:bb:
         c1:8f:4d:de:48:42:bd:a0:3f:86:a2:af:de:81:6e:ba:56:2b:
         65:93:3f:1d:1b:8c:0c:8a:0a:00:27:5f:4f:91:35:9a:76:6a:
         fd:80:d6:77:42:22:48:b1:c5:18:5f:c5:ef:63:ec:8b:97:a8:
         40:98:db:6b:f9:3c:ad:d2:96:5e:1f:d1:2f:18:6c:76:96:53:
         9d:35:36:d5:82:ab:ab:ab:8d:b7:b0:ca:52:ca:00:40:29:ef:
         40:71:b0:b6:2d:a6:d8:f1:76:64:6c:79:53:ed:d6:47:7b:ac:
         2b:a3:a1:28:8e:a4:5d:fd:ea:48:bd:a9:18:de:ff:52:08:7f:
         35:ec:1b:7f:ad:92:d3:82:6e:45:fe:cc:60:b7:46:59:4c:dc:
         d4:32:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:01:40 2025 by rpki-client