Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/34352e3137372e3137342e302f32342d3234203d3e20323639303338.roa
File:                     34352e3137372e3137342e302f32342d3234203d3e20323639303338.roa (raw, json)
Hash identifier:          /IIyOWyNxJ3yY+R0BdUGnNGV0J+flb5rvJ7vY+y9Qhw=
Subject key identifier:   82:6F:39:A1:2D:A5:53:FA:2A:94:48:63:72:CD:83:C3:ED:C2:85:BF
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       4E23AE4C6FC06F61BE973CCAE6109DB6BA855A40
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/34352e3137372e3137342e302f32342d3234203d3e20323639303338.roa
Signing time:             Mon 05 May 2025 13:04:22 +0000
ROA not before:           Mon 05 May 2025 12:59:22 +0000
ROA not after:            Mon 04 May 2026 13:04:22 +0000
asID:                     269038
IP address blocks:        45.177.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 07:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:23:ae:4c:6f:c0:6f:61:be:97:3c:ca:e6:10:9d:b6:ba:85:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: May  5 12:59:22 2025 GMT
            Not After : May  4 13:04:22 2026 GMT
        Subject: CN=826F39A12DA553FA2A94486372CD83C3EDC285BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:3f:dd:60:5d:6f:2a:6d:82:13:5b:4d:55:
                    1b:f5:37:2a:65:44:98:12:49:00:5e:b7:b6:40:b5:
                    9a:d0:79:76:12:d3:1c:e8:36:fb:65:7d:e3:c5:30:
                    4b:10:f7:21:08:c4:1c:51:18:e2:f0:1c:f5:cf:b4:
                    39:17:31:92:ff:19:b3:dc:16:ca:66:e1:53:90:ec:
                    a2:9f:74:74:fd:6a:ef:98:e7:5f:90:fc:13:a9:74:
                    a0:2f:89:07:75:70:9f:02:49:a7:43:bd:e3:4c:f0:
                    57:1d:49:ea:88:34:98:c3:06:70:25:03:23:b7:1e:
                    d3:75:3d:1a:d1:c4:ef:91:68:df:aa:07:4f:7b:dc:
                    21:46:4a:08:74:0f:82:55:78:33:65:96:b8:ed:21:
                    89:86:45:3e:9c:f2:cc:34:24:35:c9:cc:86:b3:bd:
                    4c:39:ae:b4:df:5b:1a:51:ff:13:1e:a0:05:7d:87:
                    43:dc:f7:6e:9e:27:da:d6:d0:05:f4:7c:66:30:db:
                    6b:ed:9b:70:75:4d:79:87:38:b8:8e:d0:eb:aa:65:
                    f7:d3:e5:30:85:6b:0d:c2:06:0e:53:cb:67:bb:1a:
                    a7:22:f4:8d:44:4e:f6:d0:dc:e7:57:65:9c:16:76:
                    27:ab:8a:e8:e5:15:89:0d:5b:0a:be:91:d0:95:d4:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6F:39:A1:2D:A5:53:FA:2A:94:48:63:72:CD:83:C3:ED:C2:85:BF
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/34352e3137372e3137342e302f32342d3234203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:8e:f8:8a:58:70:7b:ed:9c:c8:ad:7f:54:66:76:c9:73:
         da:fc:52:6a:3f:57:04:38:50:bf:79:ef:33:06:ff:ea:69:19:
         e4:0a:c5:39:31:11:48:dd:d4:6c:f3:bd:3e:ba:e3:5f:1b:f3:
         65:b1:20:4a:54:10:8c:60:f3:bc:8e:87:75:2f:4e:d3:5b:87:
         39:ac:2f:fa:d7:40:00:58:d1:46:74:22:5c:0b:ed:be:12:30:
         f1:cd:1e:19:3d:80:c5:0c:0b:98:c8:6e:42:67:67:55:53:f0:
         6c:39:32:5c:d3:6d:35:47:81:5f:16:8b:f9:eb:b4:de:d2:c7:
         c6:e9:0b:66:6c:be:b4:a6:51:63:cb:8a:6e:ff:f6:8f:b4:d0:
         a6:64:c8:60:88:2a:5b:e1:7b:16:f5:b4:fb:ce:eb:e1:80:ed:
         d6:53:de:ce:e9:fc:d9:00:bf:05:f8:81:b9:5b:e1:f7:c6:87:
         27:63:e3:8c:3e:c9:a5:f5:18:cf:70:3e:97:8d:57:3d:93:bb:
         92:c7:5a:47:3c:72:46:9b:cb:eb:88:c5:e5:ff:fa:f5:8e:43:
         c6:42:f5:a3:9a:b4:11:66:79:97:9c:dc:3d:dc:de:a1:1c:50:
         87:e5:1e:18:8d:44:b5:1a:3f:dd:9e:83:f0:6a:d2:4d:01:a5:
         86:b7:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:51:25 2025 by rpki-client