Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/34352e3137392e3235322e302f32332d3234203d3e20323733363634.roa
File:                     34352e3137392e3235322e302f32332d3234203d3e20323733363634.roa (raw, json)
Hash identifier:          qiTJnElBKyT5lsjhppAsuKt3s4WFcSxaqY1Z+OuyJiQ=
Subject key identifier:   AC:E3:A9:04:3E:AE:C1:55:1F:14:C7:2C:9F:88:F7:EA:39:BB:B3:CB
Certificate issuer:       /CN=62877F2B1F6C47CB9BE968F819C94EFC7AA528B9
Certificate serial:       200656DAB07FF4775BA01288958B089035833D27
Authority key identifier: 62:87:7F:2B:1F:6C:47:CB:9B:E9:68:F8:19:C9:4E:FC:7A:A5:28:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/34352e3137392e3235322e302f32332d3234203d3e20323733363634.roa
Signing time:             Fri 20 Jun 2025 01:00:00 +0000
ROA not before:           Fri 20 Jun 2025 00:55:00 +0000
ROA not after:            Fri 19 Jun 2026 01:00:00 +0000
asID:                     273664
IP address blocks:        45.179.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.crl
                          rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 09:34:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:06:56:da:b0:7f:f4:77:5b:a0:12:88:95:8b:08:90:35:83:3d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62877F2B1F6C47CB9BE968F819C94EFC7AA528B9
        Validity
            Not Before: Jun 20 00:55:00 2025 GMT
            Not After : Jun 19 01:00:00 2026 GMT
        Subject: CN=ACE3A9043EAEC1551F14C72C9F88F7EA39BBB3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:95:8c:a5:02:d3:98:4c:88:0e:63:66:aa:
                    cd:d8:89:df:f3:ce:a2:d1:e3:75:4f:67:73:d3:af:
                    7a:f6:9d:54:37:37:fa:42:54:8c:d1:b0:99:e3:9d:
                    45:20:b7:d8:56:0d:b7:ff:62:62:d7:c5:3b:23:0e:
                    1c:6c:0c:9f:63:08:31:8b:d7:a5:11:8c:2c:bc:b9:
                    78:b4:a7:d6:6d:f0:aa:08:29:a0:3e:ed:b5:bc:ec:
                    a3:bc:8a:83:66:f0:ae:c1:a1:19:e4:7d:e4:56:5c:
                    6d:10:44:1d:9f:bb:d5:d6:2c:b2:c0:21:8a:d6:3b:
                    fa:3c:f4:b4:8d:8b:fd:b2:21:14:28:4f:49:94:de:
                    d7:d0:8b:94:8d:c4:db:36:02:fc:82:c4:8f:af:53:
                    54:ed:5d:14:d0:0f:67:86:79:93:fc:63:f1:2d:bc:
                    46:b5:39:6d:a0:01:c3:35:b3:65:c4:51:73:85:9a:
                    95:bb:b9:3f:5b:66:69:db:a1:f9:f0:14:1b:c4:59:
                    bc:74:25:5b:8e:78:0e:e0:52:78:64:43:68:7a:4a:
                    84:9f:23:27:e1:cb:e6:7b:5f:4b:7a:51:84:71:59:
                    b5:a0:e8:a4:ac:ae:86:99:8d:fd:b1:39:72:68:b4:
                    10:81:58:fe:2f:c5:c4:04:36:94:ec:4d:18:1d:ff:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E3:A9:04:3E:AE:C1:55:1F:14:C7:2C:9F:88:F7:EA:39:BB:B3:CB
            X509v3 Authority Key Identifier:
                keyid:62:87:7F:2B:1F:6C:47:CB:9B:E9:68:F8:19:C9:4E:FC:7A:A5:28:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/34352e3137392e3235322e302f32332d3234203d3e20323733363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:4f:fc:e4:e8:59:2c:fc:4c:f5:d9:81:88:61:b9:df:a8:1d:
         73:81:eb:99:1d:bc:5d:81:86:30:06:64:86:a9:de:e5:52:a7:
         48:c6:7a:8b:f0:03:54:89:15:38:87:14:d5:58:7e:7b:cf:05:
         98:e9:fe:e9:58:41:c3:32:a4:57:80:5b:91:bf:c4:c9:33:be:
         9d:bd:b4:66:f7:75:ab:27:8e:b2:45:3f:7d:cb:35:fe:0e:74:
         87:06:9f:a8:81:9e:f3:07:0c:f8:f6:f4:9c:6c:24:03:2a:a3:
         32:cf:3c:82:3f:63:a0:62:56:53:1d:c2:39:3b:7c:1f:51:96:
         c6:52:08:67:39:44:db:cb:09:da:2b:09:fd:69:47:62:f2:e0:
         25:f3:a8:2d:d7:85:26:0b:49:b4:d8:3f:0f:fc:8e:32:83:70:
         3f:dc:72:4b:3e:46:f9:91:73:68:89:35:4f:e0:cb:22:cf:0b:
         89:86:3b:7e:82:2a:e0:dd:00:38:70:4c:1e:e6:c3:0b:72:50:
         05:81:fa:0c:4b:98:85:13:5e:ce:dd:40:4c:eb:b3:fb:64:c4:
         32:6b:2b:b1:7e:7c:df:2d:4b:5b:5e:17:d6:57:90:91:d1:e6:
         c8:c4:13:36:13:a2:a5:ca:85:7b:65:86:37:2b:0d:42:c8:1e:
         6a:f2:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 14:32:59 2025 by rpki-client