Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32352e302f32342d3332203d3e20323638303336.roa
File:                     34352e3136382e32352e302f32342d3332203d3e20323638303336.roa (raw, json)
Hash identifier:          97DnTDVmcwQmPFbbvFpjfkOWA3W1y/Aij7BelIwGscU=
Subject key identifier:   CA:AC:E5:F1:D5:AB:A8:7E:9D:E0:0B:10:DE:74:CD:86:A0:BB:5C:12
Certificate issuer:       /CN=9B679E5B793CBDF49D875F5BD7BDF01252A88452
Certificate serial:       4B29E545BBF485DAE5D93CFFF110FBC17EC8C21D
Authority key identifier: 9B:67:9E:5B:79:3C:BD:F4:9D:87:5F:5B:D7:BD:F0:12:52:A8:84:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32352e302f32342d3332203d3e20323638303336.roa
Signing time:             Wed 23 Apr 2025 11:12:03 +0000
ROA not before:           Wed 23 Apr 2025 11:07:03 +0000
ROA not after:            Wed 22 Apr 2026 11:12:03 +0000
asID:                     268036
IP address blocks:        45.168.25.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.crl
                          rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 03:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:29:e5:45:bb:f4:85:da:e5:d9:3c:ff:f1:10:fb:c1:7e:c8:c2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B679E5B793CBDF49D875F5BD7BDF01252A88452
        Validity
            Not Before: Apr 23 11:07:03 2025 GMT
            Not After : Apr 22 11:12:03 2026 GMT
        Subject: CN=CAACE5F1D5ABA87E9DE00B10DE74CD86A0BB5C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:23:5f:c0:07:49:62:41:6c:e8:f9:5f:be:
                    81:d3:1e:66:11:60:de:29:21:d3:b0:00:0c:04:65:
                    da:bd:a5:15:38:7f:b8:f9:e2:0f:ae:b6:16:ba:52:
                    14:f6:40:15:07:d6:ca:6e:4f:36:2d:9a:4a:33:c2:
                    08:a9:98:aa:e7:58:ac:58:60:af:4c:f7:d9:a7:9a:
                    11:ea:f8:bc:e4:a1:2b:9c:04:6d:81:28:a4:75:52:
                    b2:4f:9a:b1:cf:95:47:cc:ae:2d:89:d1:5a:c8:b2:
                    ee:18:8c:60:f6:a8:57:24:bc:d3:6d:ae:b7:db:1e:
                    46:ea:8b:bd:92:cf:95:1e:ec:17:0f:77:38:f5:61:
                    ef:e6:99:a5:82:3e:c5:30:b7:be:6b:0c:1f:cb:28:
                    d1:06:a6:82:7d:ed:72:b0:68:d1:d5:48:26:27:f3:
                    4d:6d:78:72:34:ae:55:73:b4:fb:f4:53:68:52:b8:
                    3f:9f:e5:9e:0c:79:46:6e:39:ae:67:07:4f:7b:1c:
                    ac:a3:e5:8f:5a:55:2e:82:cf:b4:ed:38:a9:3f:10:
                    c7:4f:24:3b:9a:bb:d2:85:2d:52:ec:9f:c6:f3:9b:
                    d2:94:5c:e0:8d:70:22:7a:e5:97:72:c3:8c:13:d5:
                    de:52:d4:7a:65:49:5c:5b:85:80:d5:9a:4f:ab:d7:
                    6f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AC:E5:F1:D5:AB:A8:7E:9D:E0:0B:10:DE:74:CD:86:A0:BB:5C:12
            X509v3 Authority Key Identifier:
                keyid:9B:67:9E:5B:79:3C:BD:F4:9D:87:5F:5B:D7:BD:F0:12:52:A8:84:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32352e302f32342d3332203d3e20323638303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:4f:64:d5:6b:a9:ea:b7:6b:f6:65:5b:88:38:07:9e:f4:b0:
         43:fb:16:ad:ab:f5:e6:83:d4:12:ed:dd:d3:66:22:5d:3c:47:
         1b:67:ac:e0:eb:bb:b6:e4:60:73:96:0a:55:e6:cb:9a:f2:c2:
         f3:8c:9e:dd:ba:8f:82:51:cd:d8:e8:9c:50:fe:07:28:3a:6a:
         7a:1f:48:5b:42:36:2c:42:ce:ec:f6:9e:2a:73:f7:bb:a5:63:
         28:fa:74:76:b5:61:56:a3:64:d7:b2:47:0c:23:ea:b2:08:a7:
         8c:d0:81:34:33:d3:39:9c:9c:78:2c:d5:d7:3f:40:7c:48:56:
         e0:d6:49:6c:44:da:ed:18:27:ab:c2:e4:8c:bf:22:e6:ac:c5:
         83:7c:52:52:85:3a:97:6b:09:51:d3:45:88:f3:25:71:8d:73:
         8f:46:09:c3:46:37:95:aa:8f:62:49:71:3c:63:68:a6:0d:51:
         04:67:02:82:5b:bb:55:3a:97:d9:ac:c4:31:36:af:73:cb:a8:
         16:f3:a8:4d:8c:9c:8b:59:d5:54:0d:39:bc:7d:39:fe:15:f7:
         8a:67:be:77:03:46:5e:b6:f8:a3:a1:89:ea:2a:fd:b3:78:df:
         c0:84:03:fc:ee:10:8e:21:c9:aa:04:cb:06:98:b9:31:9d:1e:
         32:2a:7e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:16:25 2025 by rpki-client