Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234372e302f32342d3234203d3e20323638373937.roa
File:                     34352e3137322e3234372e302f32342d3234203d3e20323638373937.roa (raw, json)
Hash identifier:          Qv4gHglLZ+o76vjO3uNR2qQ3ZRy2nbMjVIqnjRFyXIk=
Subject key identifier:   0F:DC:BB:8D:3D:3E:72:69:D2:D5:3D:A8:C8:50:AC:0E:C6:93:6D:1C
Certificate issuer:       /CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
Certificate serial:       4392976AE758596877203F82095C4288DDF52ED0
Authority key identifier: EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234372e302f32342d3234203d3e20323638373937.roa
Signing time:             Fri 02 May 2025 18:06:25 +0000
ROA not before:           Fri 02 May 2025 18:01:25 +0000
ROA not after:            Fri 01 May 2026 18:06:25 +0000
asID:                     268797
IP address blocks:        45.172.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl
                          rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 23:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:92:97:6a:e7:58:59:68:77:20:3f:82:09:5c:42:88:dd:f5:2e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
        Validity
            Not Before: May  2 18:01:25 2025 GMT
            Not After : May  1 18:06:25 2026 GMT
        Subject: CN=0FDCBB8D3D3E7269D2D53DA8C850AC0EC6936D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:b4:8d:29:53:23:c5:0d:ff:e0:f4:ed:4c:
                    cd:15:bd:6d:e4:4a:6c:76:ae:15:d3:c1:cf:a6:f3:
                    b5:cd:4b:fb:a7:e0:35:0d:61:c5:b0:47:f1:60:bf:
                    c8:27:1a:2f:c7:c8:ed:cc:e2:df:8f:33:da:d9:b3:
                    05:42:98:50:4e:5c:22:79:77:0a:d5:6e:07:8b:79:
                    f4:08:c4:38:37:aa:e6:d5:4b:8c:4e:b4:2f:4b:0a:
                    60:3d:d0:f9:66:32:af:21:df:c6:3d:69:82:15:91:
                    51:ed:9e:5c:3a:9e:c7:8a:3c:fb:f5:d2:9b:7c:8e:
                    36:8c:c0:19:7c:42:8e:51:f4:5a:d7:4d:05:5d:74:
                    ac:4d:eb:28:bd:17:0f:27:f1:8a:f7:43:00:64:4c:
                    2b:94:80:8d:50:4d:65:99:5e:0f:89:8c:31:a6:ad:
                    fb:bb:a4:02:93:ae:b4:12:d9:39:0c:7d:0c:a1:05:
                    9d:af:53:3b:49:2d:80:ea:b8:46:30:ca:16:79:2d:
                    4c:77:ff:ce:dc:18:b0:ab:f2:4e:bd:8c:9d:99:8c:
                    64:b4:b7:5e:92:71:6f:26:84:88:1c:28:51:bb:9d:
                    dd:c8:8e:ea:0d:14:2f:b5:c6:41:92:9f:ae:d8:ae:
                    02:4e:c1:d0:33:96:76:73:bc:43:ef:73:20:90:97:
                    26:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DC:BB:8D:3D:3E:72:69:D2:D5:3D:A8:C8:50:AC:0E:C6:93:6D:1C
            X509v3 Authority Key Identifier:
                keyid:EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234372e302f32342d3234203d3e20323638373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a4:f3:23:6d:68:6c:7d:58:b4:4f:d3:a2:b8:9d:89:cc:0a:
         71:1f:81:2e:cd:db:65:df:41:8e:48:b4:6b:c6:2e:82:fd:8b:
         22:83:43:4c:cb:a2:27:18:81:15:96:bc:c2:8a:1f:60:5b:49:
         2c:94:d7:41:1a:5e:4d:4c:2a:5b:b0:73:77:33:6a:c4:d2:e6:
         e4:41:6e:91:6e:8a:f8:b9:d0:0f:76:05:1a:d1:eb:2a:83:bd:
         40:30:9c:0b:e5:16:5e:87:c3:24:1e:f2:0e:9a:0a:c0:ba:47:
         ad:ca:13:87:4d:75:c4:38:4e:8b:2b:67:09:e8:3b:30:72:f1:
         a0:00:b7:80:31:4c:d1:1b:7b:8a:bb:61:57:1d:3b:0f:84:49:
         75:b8:cb:ef:53:90:0d:78:e7:c9:75:16:38:96:0e:21:89:a4:
         63:b2:b1:c4:43:df:b9:a6:d5:5b:fc:b9:96:17:ab:91:2d:09:
         72:25:9b:b7:8f:48:13:7c:64:2a:30:fb:25:ce:14:f3:37:e8:
         95:04:89:7b:eb:b9:68:26:f3:cf:6d:74:ce:c9:9b:5e:f6:03:
         b2:d7:48:05:cb:d0:42:8f:d1:78:3f:32:c6:8f:a2:06:68:b3:
         36:06:e9:57:e2:14:32:2e:1f:8b:cc:6c:ec:5c:6c:b4:dc:3e:
         40:54:4f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:12:02 2025 by rpki-client