Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32372e302f32342d3332203d3e20323638303336.roa
File:                     34352e3136382e32372e302f32342d3332203d3e20323638303336.roa (raw, json)
Hash identifier:          SMgiLb8IAWvwq0j1/6Pb5FCUdwzN2cMYgTZMNGhkuw4=
Subject key identifier:   49:A6:BD:1A:9F:3E:3D:FF:68:A4:6B:47:76:97:27:F6:4D:A7:D0:35
Certificate issuer:       /CN=9B679E5B793CBDF49D875F5BD7BDF01252A88452
Certificate serial:       1E9A0852C449AD76A10A122D5D37F3B8525D11A6
Authority key identifier: 9B:67:9E:5B:79:3C:BD:F4:9D:87:5F:5B:D7:BD:F0:12:52:A8:84:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32372e302f32342d3332203d3e20323638303336.roa
Signing time:             Wed 23 Apr 2025 11:11:45 +0000
ROA not before:           Wed 23 Apr 2025 11:06:45 +0000
ROA not after:            Wed 22 Apr 2026 11:11:45 +0000
asID:                     268036
IP address blocks:        45.168.27.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.crl
                          rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 07:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9a:08:52:c4:49:ad:76:a1:0a:12:2d:5d:37:f3:b8:52:5d:11:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B679E5B793CBDF49D875F5BD7BDF01252A88452
        Validity
            Not Before: Apr 23 11:06:45 2025 GMT
            Not After : Apr 22 11:11:45 2026 GMT
        Subject: CN=49A6BD1A9F3E3DFF68A46B47769727F64DA7D035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:3e:f2:b9:6e:96:43:c3:5d:dc:10:67:2d:
                    ee:1e:dc:3d:7b:fa:49:f3:43:12:b3:73:35:ac:bd:
                    7c:68:5a:bd:02:68:45:66:18:28:6e:c5:79:5d:4b:
                    da:9f:e8:e6:2d:5c:fd:5d:02:1b:35:37:83:75:43:
                    9f:64:b2:23:e7:a7:16:cd:cb:07:e7:bb:06:25:e0:
                    37:d1:e6:29:32:cb:cd:5c:71:4a:3e:53:56:64:09:
                    fe:ba:a8:8c:27:3e:61:3d:ef:94:f7:12:36:de:7b:
                    0a:82:11:d3:5e:49:57:99:52:92:ab:67:06:bb:9c:
                    c6:7d:e5:ea:e2:76:fe:c7:0a:0f:77:73:44:b2:5d:
                    82:a7:f3:6a:3d:2f:d0:15:79:3e:71:ac:69:fb:a6:
                    f6:60:76:84:62:fa:d4:8c:34:4c:3c:98:66:12:b4:
                    a0:25:6f:85:03:bd:43:b0:d0:0c:0e:26:c8:ef:ed:
                    b3:6b:65:82:fd:84:47:d1:ab:23:08:4a:c0:60:50:
                    71:ee:6b:36:27:32:06:a7:93:4f:7f:e0:4e:71:4b:
                    f1:f3:9e:a3:9f:5a:80:bc:d0:fd:a4:96:f3:c8:13:
                    34:df:7a:9a:bd:7a:36:39:f6:ec:97:c1:38:a8:0e:
                    f1:03:13:e5:e2:25:16:39:f2:9c:6a:c5:ed:b9:20:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A6:BD:1A:9F:3E:3D:FF:68:A4:6B:47:76:97:27:F6:4D:A7:D0:35
            X509v3 Authority Key Identifier:
                keyid:9B:67:9E:5B:79:3C:BD:F4:9D:87:5F:5B:D7:BD:F0:12:52:A8:84:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32372e302f32342d3332203d3e20323638303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b7:64:78:57:21:06:d2:da:4f:28:fe:0f:10:e2:19:5e:3f:
         a8:13:ea:26:58:7f:b9:ba:f2:f0:89:17:13:73:29:60:0b:de:
         95:00:c7:03:62:b9:95:24:ef:13:0f:b8:da:67:5d:62:1a:20:
         ad:d9:d6:fe:02:54:e2:01:e3:f2:da:30:30:e9:d1:fc:a7:64:
         6e:ae:12:c9:ce:51:c7:6e:21:cb:7e:0c:5d:37:ab:cb:fe:21:
         d8:63:6a:7b:c1:80:32:d0:01:8c:98:6f:67:c6:04:9d:fd:e6:
         22:06:3c:49:84:9e:7a:8e:e4:c5:8d:89:55:55:63:1a:ef:de:
         f4:46:45:b1:bd:88:21:2b:90:8b:42:e7:71:3a:86:18:a3:26:
         ff:5d:95:b9:bc:60:bf:59:89:e5:b4:01:d3:a3:45:0f:1d:3c:
         99:0c:f9:2a:fd:c2:93:60:ef:b4:3c:fd:1a:15:ad:d2:ae:60:
         e7:4c:d1:e5:4f:1d:15:d2:c1:d0:e7:e8:e0:7b:b6:6f:74:ad:
         a7:3a:48:b0:4d:40:a0:9f:dd:ff:cb:6a:ef:ba:e7:2c:ce:56:
         79:38:84:dc:72:fd:f7:0d:06:37:0d:06:76:84:b9:df:bf:b3:
         85:d1:a5:5f:76:ff:17:9c:37:54:a1:7e:60:05:c5:5a:31:e7:
         ca:43:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:32:33 2025 by rpki-client