Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/34352e3138302e31362e302f32322d3234203d3e20323731323533.roa
File:                     34352e3138302e31362e302f32322d3234203d3e20323731323533.roa (raw, json)
Hash identifier:          gNxewEk1bc1q+VmakKNcM9Eafy5+OOaaUNJYU7vllrs=
Subject key identifier:   1F:28:B5:33:1E:FC:27:83:B7:7C:FC:78:47:D1:9A:D5:A0:73:51:45
Certificate issuer:       /CN=16F623F7E404FC45279199F873CB67B24D28DD2E
Certificate serial:       4B99C5F5F3C0D196AC2CD698C82DD872A9CA1542
Authority key identifier: 16:F6:23:F7:E4:04:FC:45:27:91:99:F8:73:CB:67:B2:4D:28:DD:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/34352e3138302e31362e302f32322d3234203d3e20323731323533.roa
Signing time:             Thu 08 May 2025 13:16:48 +0000
ROA not before:           Thu 08 May 2025 13:11:48 +0000
ROA not after:            Thu 07 May 2026 13:16:48 +0000
asID:                     271253
IP address blocks:        45.180.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 13:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:99:c5:f5:f3:c0:d1:96:ac:2c:d6:98:c8:2d:d8:72:a9:ca:15:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F623F7E404FC45279199F873CB67B24D28DD2E
        Validity
            Not Before: May  8 13:11:48 2025 GMT
            Not After : May  7 13:16:48 2026 GMT
        Subject: CN=1F28B5331EFC2783B77CFC7847D19AD5A0735145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:a3:8d:48:19:d9:1a:a0:f7:76:8c:4b:fa:
                    7d:eb:fd:37:1c:6d:d0:24:ba:3e:b4:d0:60:d2:af:
                    2d:3c:89:81:a6:46:80:95:51:9b:3d:72:25:70:4a:
                    22:30:6d:36:da:68:36:76:5b:8e:ee:7b:d0:98:8b:
                    6e:da:b8:5e:b9:0b:1e:97:e3:16:30:17:33:10:25:
                    75:e3:cb:76:3e:99:59:80:5f:61:10:ae:97:04:29:
                    f8:13:f6:14:a3:53:10:80:03:24:04:4f:2e:48:d0:
                    7f:74:8d:40:37:41:64:6a:b1:4b:a6:0f:63:2c:6f:
                    54:f1:13:61:f2:a6:13:77:10:e4:79:41:af:88:91:
                    e7:5b:f2:97:2f:eb:d3:13:ab:f6:46:cf:ff:81:f2:
                    96:11:9b:81:68:5e:75:cf:a2:54:51:d8:93:d0:f6:
                    a2:6e:d6:8e:37:7e:1e:15:26:83:be:48:9a:7e:53:
                    ef:41:14:a0:df:2e:8f:79:4f:26:e1:70:88:91:bb:
                    f9:3c:86:50:52:c2:c4:f0:a8:5d:98:54:53:26:03:
                    30:72:9b:ef:98:ab:b9:73:c1:85:d9:12:3c:8b:24:
                    d8:2f:b8:98:25:5f:e8:c3:24:a4:52:8b:35:1f:a6:
                    b3:60:07:1c:35:df:e7:2f:c7:ba:be:ef:fb:7a:5b:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:28:B5:33:1E:FC:27:83:B7:7C:FC:78:47:D1:9A:D5:A0:73:51:45
            X509v3 Authority Key Identifier:
                keyid:16:F6:23:F7:E4:04:FC:45:27:91:99:F8:73:CB:67:B2:4D:28:DD:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/34352e3138302e31362e302f32322d3234203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:e8:98:3c:d7:4e:00:7d:97:40:73:14:fe:d8:80:e9:aa:9d:
         a2:d2:4d:83:fa:99:ff:8c:17:1c:9b:52:08:8f:b6:cd:1e:30:
         2f:97:a8:79:17:18:a5:ce:f8:ec:18:ae:2a:4c:ff:fb:14:19:
         a1:86:c2:73:e2:c1:95:5e:93:2d:89:0d:36:b3:c0:25:63:de:
         66:be:91:ac:ee:54:f2:b4:58:49:59:3d:86:9a:61:4f:dd:87:
         67:9d:93:50:50:fc:54:14:09:02:f9:c0:f1:bf:24:a5:8d:0d:
         e6:d1:fa:71:8c:b4:0f:1b:14:da:1f:da:60:85:9d:56:6d:a3:
         4b:c0:bd:ba:bf:c4:f7:12:2b:6b:04:17:6e:5d:ef:8c:d7:4b:
         4d:5f:a5:87:5f:de:f9:06:d4:be:54:30:f1:32:d4:de:9c:d0:
         9c:67:3a:8b:f3:d2:2c:8a:58:ff:ba:6a:a0:84:54:5d:f6:56:
         e8:34:cc:db:61:b6:ba:f3:69:c6:7b:cb:75:b2:80:6b:08:8c:
         c1:68:a3:2f:57:e5:ee:a5:c2:70:3b:25:e0:e1:9e:49:3e:b8:
         d8:23:1c:b7:6f:8d:05:b8:89:c8:e0:b2:15:e8:9a:ed:62:93:
         8a:1b:63:f1:38:4e:12:47:0d:6b:11:43:cc:8d:72:1a:3d:07:
         a8:3c:5f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:28:20 2025 by rpki-client