Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32332d3233203d3e20323638333038.roa
File:                     34352e3233382e342e302f32332d3233203d3e20323638333038.roa (raw, json)
Hash identifier:          vPMuDfmHt/BmOWfbCpIkpOrftrWAL70jFtUPHD3iR1M=
Subject key identifier:   31:35:28:CB:36:73:29:5B:A0:EE:A1:6E:D3:29:5B:97:DB:B1:96:18
Certificate issuer:       /CN=7F02CF06C24FE53ED352072AD2B5F97F3CF893F1
Certificate serial:       56BB3945E456F5C0A475A968614CB24E396FCE83
Authority key identifier: 7F:02:CF:06:C2:4F:E5:3E:D3:52:07:2A:D2:B5:F9:7F:3C:F8:93:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32332d3233203d3e20323638333038.roa
Signing time:             Fri 02 May 2025 18:50:17 +0000
ROA not before:           Fri 02 May 2025 18:45:17 +0000
ROA not after:            Fri 01 May 2026 18:50:17 +0000
asID:                     268308
IP address blocks:        45.238.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 23:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bb:39:45:e4:56:f5:c0:a4:75:a9:68:61:4c:b2:4e:39:6f:ce:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F02CF06C24FE53ED352072AD2B5F97F3CF893F1
        Validity
            Not Before: May  2 18:45:17 2025 GMT
            Not After : May  1 18:50:17 2026 GMT
        Subject: CN=313528CB3673295BA0EEA16ED3295B97DBB19618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:cf:13:2c:e5:76:fb:38:e0:b6:75:42:52:
                    a3:e6:b5:3f:7e:81:55:1f:43:69:92:e5:9a:49:5d:
                    c8:ad:8b:52:a0:ef:91:71:74:97:5b:6e:ff:8e:7e:
                    ed:15:69:45:12:e3:59:be:ca:65:61:fa:6e:a3:f1:
                    2e:7b:3e:1b:56:a1:51:e8:a2:7c:f5:cc:6e:7a:1e:
                    1a:24:36:28:d7:60:3c:8d:df:1e:85:19:85:db:c4:
                    7a:e3:05:67:3a:9d:25:c9:85:62:9d:c1:e1:71:5e:
                    db:b3:aa:2f:53:9e:fd:cc:4a:49:0f:43:7f:8d:ae:
                    16:c4:4d:fd:d9:6e:a0:1c:11:15:7b:eb:36:25:29:
                    43:9f:76:a0:d0:8a:4c:27:e8:e2:b8:d1:21:f1:7a:
                    cd:38:95:92:39:24:38:b9:51:b8:92:4a:2c:62:36:
                    09:3c:40:0b:8b:56:54:b6:f6:41:6f:d1:24:76:45:
                    92:52:ee:ea:c4:b3:7d:c1:c7:44:af:a9:92:82:11:
                    4f:b8:3f:31:47:fc:c6:c3:6f:43:41:45:35:1b:95:
                    8d:2d:99:04:b0:5f:68:d0:f3:5d:2e:58:20:f8:63:
                    31:9f:94:fe:c0:d8:b7:4b:de:03:0b:ae:5b:02:7e:
                    35:3d:44:f7:6f:1a:da:72:36:ba:81:fd:e7:e1:33:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:35:28:CB:36:73:29:5B:A0:EE:A1:6E:D3:29:5B:97:DB:B1:96:18
            X509v3 Authority Key Identifier:
                keyid:7F:02:CF:06:C2:4F:E5:3E:D3:52:07:2A:D2:B5:F9:7F:3C:F8:93:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F02CF06C24FE53ED352072AD2B5F97F3CF893F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32332d3233203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:11:8a:5d:f2:bc:ce:71:ee:1b:e7:f6:e4:c0:cc:e7:76:1c:
         09:59:0a:c5:51:9a:ca:3f:80:93:61:cf:0d:4b:29:12:49:22:
         b7:f8:6d:a3:0c:13:00:bf:35:62:80:ac:64:0b:65:76:4f:5e:
         f5:a4:08:48:d7:e8:3c:8c:5f:c8:6d:79:e1:ac:0c:02:8a:43:
         bb:15:e4:37:eb:1e:14:53:49:84:1e:07:84:39:4d:89:78:bd:
         64:70:0c:c6:5b:7e:44:fb:55:a5:37:f3:de:d8:ec:5f:51:cd:
         60:cd:fb:72:cb:73:00:78:47:bf:0d:ed:66:aa:c2:87:1c:ef:
         00:5b:8d:16:44:b2:39:0e:f3:9b:5e:44:e6:5f:b5:29:e0:04:
         d5:35:64:b9:63:af:cc:ed:3d:72:e3:d3:be:a1:90:7b:11:12:
         1b:9c:c2:3c:00:33:d9:10:2a:30:35:ae:f2:13:6e:49:fd:ae:
         b0:f7:37:a7:ff:ec:df:25:b7:df:19:3f:90:e0:82:ac:1a:b3:
         87:09:e0:17:e2:8c:f1:7f:7a:7a:7c:28:8f:86:8a:d8:f2:97:
         23:62:e1:58:33:80:60:c3:43:73:67:4e:8d:c9:67:1c:29:9a:
         1f:30:ab:22:b0:f5:fb:5d:d2:e6:30:a5:51:2b:c2:1f:87:6c:
         1e:62:e3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:49:09 2025 by rpki-client