Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/34352e3233372e3231342e302f32342d3234203d3e20323638333033.roa
File:                     34352e3233372e3231342e302f32342d3234203d3e20323638333033.roa (raw, json)
Hash identifier:          uTP2y0g3xC49RrchxzEhE2vPMueiPDIqiuN3r/u83Fc=
Subject key identifier:   B9:A4:FC:1E:BF:03:E1:1F:1B:D4:55:AD:39:85:25:C1:5F:94:45:F7
Certificate issuer:       /CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
Certificate serial:       1FBFABF111AD86D12867C3B6073AFDA7CE6EC6E4
Authority key identifier: 7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/34352e3233372e3231342e302f32342d3234203d3e20323638333033.roa
Signing time:             Fri 02 May 2025 14:16:00 +0000
ROA not before:           Fri 02 May 2025 14:11:00 +0000
ROA not after:            Fri 01 May 2026 14:16:00 +0000
asID:                     268303
IP address blocks:        45.237.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl
                          rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 18:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bf:ab:f1:11:ad:86:d1:28:67:c3:b6:07:3a:fd:a7:ce:6e:c6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
        Validity
            Not Before: May  2 14:11:00 2025 GMT
            Not After : May  1 14:16:00 2026 GMT
        Subject: CN=B9A4FC1EBF03E11F1BD455AD398525C15F9445F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:c3:5c:e7:04:9e:da:68:ce:7a:80:f3:a3:
                    d5:40:ce:5f:9a:44:da:53:c0:88:af:4c:5d:2c:e5:
                    e4:34:1d:cb:6c:3a:bc:7c:b1:34:bc:c8:7a:ad:e1:
                    f4:a3:17:c5:8c:22:8e:3c:f5:bf:33:d1:6b:55:75:
                    66:bc:2a:f7:db:d4:48:0d:99:9f:e4:58:5e:5e:79:
                    c7:81:99:e0:a6:c5:3b:a2:04:db:d9:f6:e9:1d:7d:
                    89:02:b2:2e:b6:bf:67:d8:64:cd:69:b5:7e:ff:dc:
                    ef:23:e1:da:44:e9:a1:c5:ee:1e:26:5b:07:8e:72:
                    14:21:4c:44:24:91:11:95:fd:03:82:cc:e7:f7:f2:
                    76:0f:6e:b7:df:02:9c:4d:39:cf:c3:4f:b1:f6:b9:
                    58:e9:22:b1:c7:a1:25:fd:ec:07:46:3e:64:20:bf:
                    ea:91:2d:27:4e:95:8f:ee:dd:b7:e9:1b:e2:79:52:
                    8b:1b:69:91:b5:81:44:34:1e:99:56:d8:4c:b9:e3:
                    70:6c:aa:bf:dd:67:91:33:c0:8b:a0:5d:72:28:60:
                    af:b2:43:ad:81:ce:96:54:3d:73:59:1f:a7:ff:2b:
                    ad:d4:26:22:57:42:df:05:6b:5d:ed:81:a0:78:63:
                    76:80:a7:02:00:ad:9b:8f:58:29:67:56:f9:5f:d1:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A4:FC:1E:BF:03:E1:1F:1B:D4:55:AD:39:85:25:C1:5F:94:45:F7
            X509v3 Authority Key Identifier:
                keyid:7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/34352e3233372e3231342e302f32342d3234203d3e20323638333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:94:84:26:d5:b0:cb:54:77:ca:3f:c3:3e:fd:60:ab:73:c4:
         4c:5d:6f:33:38:10:64:12:4c:78:8b:89:28:92:fa:da:bc:73:
         09:2f:d9:37:b2:15:71:3e:46:93:4e:2d:8a:eb:80:7b:6d:8e:
         3c:36:43:bd:f8:b5:ed:f2:f3:8d:ac:52:53:f5:2c:65:9a:3f:
         52:a2:3c:ce:c3:c1:20:eb:73:d4:7c:42:72:16:d2:b8:de:fa:
         71:4a:f4:0b:ab:d5:60:0c:e7:b7:c6:98:41:d1:cf:d7:0d:e8:
         85:ad:a7:d2:9e:4f:69:ae:9b:ed:8e:18:c2:84:1c:a7:a7:8a:
         8a:67:21:2a:88:c2:4e:9e:e2:0e:01:a1:9a:e0:e9:46:c4:40:
         72:4c:5a:43:3e:ab:87:9d:4f:c5:18:33:1b:4b:53:b2:67:a8:
         7f:8c:1b:58:79:98:30:d1:7e:c5:b2:24:4d:ab:a3:10:2f:9b:
         2e:eb:20:ee:53:79:bd:00:fc:a5:72:a4:be:d1:fa:68:fe:a6:
         05:88:2c:bd:54:ac:e3:70:a3:1b:0a:94:08:21:4f:66:52:83:
         30:ae:bb:3a:e9:50:67:9e:b2:98:d5:87:f4:01:0d:6d:0d:50:
         02:ea:9b:f3:1e:f4:12:0a:bc:75:16:1b:a4:f2:6a:01:7a:96:
         b1:aa:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:01:56 2025 by rpki-client