Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/34352e3233322e38342e302f32342d3234203d3e20323731323534.roa
File:                     34352e3233322e38342e302f32342d3234203d3e20323731323534.roa (raw, json)
Hash identifier:          Ox3gkWdk5DFjWVNeLugWW5jte/MOdiHqIifU9RFpraE=
Subject key identifier:   45:50:B0:34:19:F2:56:F1:BE:5A:4B:A2:C7:03:53:9B:AC:2F:5C:CB
Certificate issuer:       /CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7
Certificate serial:       7AA2108081E02318E7212AB9C6F55026D333F1A3
Authority key identifier: 9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/34352e3233322e38342e302f32342d3234203d3e20323731323534.roa
Signing time:             Mon 02 Jun 2025 18:24:07 +0000
ROA not before:           Mon 02 Jun 2025 18:19:07 +0000
ROA not after:            Mon 01 Jun 2026 18:24:07 +0000
asID:                     271254
IP address blocks:        45.232.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl
                          rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 07:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a2:10:80:81:e0:23:18:e7:21:2a:b9:c6:f5:50:26:d3:33:f1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7
        Validity
            Not Before: Jun  2 18:19:07 2025 GMT
            Not After : Jun  1 18:24:07 2026 GMT
        Subject: CN=4550B03419F256F1BE5A4BA2C703539BAC2F5CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:d8:5b:fb:0c:ef:4a:ae:b3:0c:e5:31:38:
                    4f:2f:2b:1c:32:a1:a4:ed:49:58:2f:f0:ef:23:74:
                    62:5a:b7:8e:14:36:1e:51:59:f8:49:11:7f:c0:b2:
                    41:9e:6b:67:3a:ff:9f:7f:d1:27:c4:b0:6d:93:c2:
                    d9:b5:e4:65:4e:cd:3a:a4:ca:06:e2:a8:3f:64:d5:
                    74:46:ef:96:a4:99:d1:c9:88:f0:d5:8a:54:74:ba:
                    23:6b:eb:75:91:ee:1c:3c:0d:84:8f:2b:5c:0a:7d:
                    dc:e1:5f:b6:a4:2a:f6:d5:e5:a2:dd:49:18:f7:5c:
                    8e:35:bb:c5:68:0b:71:dd:27:14:b5:b8:ea:6e:e7:
                    9f:d1:c3:11:b5:5b:b3:b7:ba:c0:0f:b2:10:9e:84:
                    62:79:13:e7:10:bb:a8:cb:39:12:0b:c2:66:1b:e0:
                    fb:1e:11:1e:17:e0:2e:b8:5e:9a:a9:35:bb:10:0c:
                    22:09:89:95:21:bf:f8:2c:de:b1:df:3a:c3:f6:c3:
                    5e:d4:dc:d7:5a:10:8f:bc:d1:84:6c:23:75:68:53:
                    63:14:a6:af:1a:77:2c:29:70:58:04:bf:f6:ad:ce:
                    7b:14:9a:aa:24:46:a3:3b:d4:36:b6:30:e8:2d:6c:
                    69:90:0f:e1:9f:a4:24:32:ce:f7:11:b7:fd:d1:4f:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:50:B0:34:19:F2:56:F1:BE:5A:4B:A2:C7:03:53:9B:AC:2F:5C:CB
            X509v3 Authority Key Identifier:
                keyid:9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/34352e3233322e38342e302f32342d3234203d3e20323731323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:53:41:6a:74:04:e7:70:99:45:ec:eb:2b:2e:07:ce:e8:
         31:ea:ed:df:ce:20:3d:34:75:2f:06:13:84:bd:86:4a:02:7f:
         fc:91:a7:66:ed:6e:2a:20:1e:36:ec:b9:12:80:16:8a:e5:24:
         60:aa:d2:1b:5a:46:c7:74:90:50:4a:3b:f1:79:d7:78:19:1c:
         a3:e7:c9:59:c0:d2:01:d3:01:d0:3d:7a:fc:14:fb:fb:1b:fb:
         c0:3d:0b:5b:7d:aa:16:ce:57:be:59:ba:2a:a3:eb:ec:e9:1e:
         68:be:5e:f2:a8:a6:80:4a:4f:dc:fd:f8:d8:9c:af:e5:b4:1d:
         2e:29:61:ed:02:cd:aa:85:b2:39:6a:9b:08:85:b3:b8:84:ba:
         61:e6:f0:99:7b:eb:7f:a2:52:26:5f:f1:34:59:88:e5:e4:2f:
         e2:ac:0b:a8:8a:66:f8:9c:f8:a7:37:13:c1:41:d5:b5:da:c7:
         83:b7:05:cd:a9:64:12:92:43:67:17:54:0a:78:16:0e:ee:13:
         43:85:3f:ad:ff:db:02:39:f3:3a:2b:9b:0d:5a:2e:e6:a7:20:
         e1:26:50:5f:09:b3:c8:a7:de:54:fb:9f:e0:fd:02:f3:7e:df:
         e4:a6:2a:51:76:b9:b2:66:97:0b:8a:87:ce:61:d1:5e:0b:96:
         6f:12:bb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:06:30 2025 by rpki-client