Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35372e302f32342d3234203d3e20323638313438.roa
File:                     34352e3137302e35372e302f32342d3234203d3e20323638313438.roa (raw, json)
Hash identifier:          fZuxL2H/McwhqF3eWGOSLVFPaLHn9GVCUQ5HIDIvm7w=
Subject key identifier:   CD:CA:F1:21:5D:BC:BC:0D:1F:4D:87:92:F3:FA:F1:16:99:F4:CF:1E
Certificate issuer:       /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Certificate serial:       240A4E9CDBE920603EBCCD35C6BE03F130D4F376
Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35372e302f32342d3234203d3e20323638313438.roa
Signing time:             Thu 01 May 2025 00:02:42 +0000
ROA not before:           Wed 30 Apr 2025 23:57:42 +0000
ROA not after:            Thu 30 Apr 2026 00:02:42 +0000
asID:                     268148
IP address blocks:        45.170.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl
                          rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 17:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0a:4e:9c:db:e9:20:60:3e:bc:cd:35:c6:be:03:f1:30:d4:f3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
        Validity
            Not Before: Apr 30 23:57:42 2025 GMT
            Not After : Apr 30 00:02:42 2026 GMT
        Subject: CN=CDCAF1215DBCBC0D1F4D8792F3FAF11699F4CF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:27:0c:a2:21:79:5d:45:dd:bb:49:7f:ed:
                    bb:57:65:b7:c7:75:67:11:64:c2:34:41:2f:a7:62:
                    fd:96:1b:f7:d4:5a:b5:88:54:bb:39:24:8f:34:7e:
                    73:38:f0:25:91:ae:2e:b5:eb:2e:81:db:8f:df:fc:
                    3e:2b:db:e1:86:9c:ee:23:c6:11:88:62:2c:11:35:
                    b4:58:e6:42:6b:86:11:b2:22:d0:1e:90:cb:56:1d:
                    74:89:bd:75:f4:c1:64:d0:e4:d4:71:38:f3:c5:76:
                    1b:1b:ec:97:ba:9c:f9:8e:bd:62:ea:91:8c:33:f1:
                    da:1e:7d:bd:e7:df:ce:7d:0d:4e:e5:b1:22:b9:ac:
                    80:1f:58:1a:ee:3e:0c:db:ca:c7:d7:1a:9d:db:22:
                    6e:a2:7a:20:e5:56:c5:f3:c1:9e:1f:cf:b4:15:fc:
                    39:ee:51:14:06:e0:c1:60:69:63:e5:ee:77:f8:27:
                    04:ea:ef:93:55:a5:0b:5e:31:41:21:57:12:f7:73:
                    34:f0:a3:0b:62:86:4d:c2:76:15:cd:f0:a9:80:f8:
                    ec:db:d2:a1:f0:08:4a:49:71:9f:0d:88:d5:86:17:
                    51:e9:38:b3:18:94:74:1a:33:9e:d7:ef:09:c7:7f:
                    d7:4a:fc:72:e0:5d:21:4b:d4:b7:fe:7c:49:26:a8:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CA:F1:21:5D:BC:BC:0D:1F:4D:87:92:F3:FA:F1:16:99:F4:CF:1E
            X509v3 Authority Key Identifier:
                keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35372e302f32342d3234203d3e20323638313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:05:97:13:df:4e:ef:07:ad:85:41:c9:3d:40:88:b4:e0:21:
         ec:4f:19:63:ed:98:bb:b2:c9:fc:2a:b1:dd:50:a2:a1:6b:61:
         ee:80:e7:eb:c3:0d:04:44:1a:bc:c6:65:64:b1:dd:e3:7b:1b:
         4b:35:e2:e1:e8:68:12:a1:fa:ed:5c:d6:93:e7:1d:79:8b:3f:
         a2:a3:91:f6:2d:fc:bc:7e:ec:8e:a8:58:ea:e3:8b:d0:0c:3e:
         6f:34:73:a2:11:92:a5:2b:43:48:77:09:cd:24:ee:c5:4d:ad:
         e4:c1:b7:52:0b:59:14:26:cb:9b:06:83:54:c1:04:b3:0d:69:
         f3:49:cf:38:70:e4:d4:cd:36:9f:98:9e:e1:d1:b5:a2:47:43:
         e1:05:5d:e9:65:ca:9b:8e:7c:52:98:55:81:4b:f3:3b:92:85:
         18:c3:38:88:67:12:24:8d:ae:31:c8:15:5b:1f:2e:0c:09:41:
         b1:8a:7e:6d:86:de:fd:52:02:67:69:1d:e4:58:37:05:5b:a2:
         e5:e4:f8:bc:3c:86:71:cd:21:6c:17:f3:7d:ac:77:94:6a:ce:
         3a:19:ca:4d:1e:1d:ea:d3:a6:3c:f5:da:a3:6d:23:31:80:31:
         f9:3b:0d:02:d7:27:24:67:fa:ee:93:14:94:36:1c:d8:50:83:
         4b:1b:98:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:51:31 2025 by rpki-client