Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/34352e3233322e38362e302f32332d3233203d3e20323731323534.roa
File:                     34352e3233322e38362e302f32332d3233203d3e20323731323534.roa (raw, json)
Hash identifier:          BCpTeNeXQT1EfTeFL+azl+e6UrL6wbW9CppwvvbgnPc=
Subject key identifier:   B8:0F:CF:AB:CB:A8:30:F1:D8:78:39:85:37:0F:31:D5:53:C9:C6:18
Certificate issuer:       /CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7
Certificate serial:       28D421637A568F774863E3CE0FA3FBA5F26AA018
Authority key identifier: 9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/34352e3233322e38362e302f32332d3233203d3e20323731323534.roa
Signing time:             Mon 02 Jun 2025 18:24:13 +0000
ROA not before:           Mon 02 Jun 2025 18:19:13 +0000
ROA not after:            Mon 01 Jun 2026 18:24:13 +0000
asID:                     271254
IP address blocks:        45.232.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl
                          rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 01:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d4:21:63:7a:56:8f:77:48:63:e3:ce:0f:a3:fb:a5:f2:6a:a0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7
        Validity
            Not Before: Jun  2 18:19:13 2025 GMT
            Not After : Jun  1 18:24:13 2026 GMT
        Subject: CN=B80FCFABCBA830F1D8783985370F31D553C9C618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9c:12:2b:27:a3:30:f8:fe:e0:8f:d0:cb:35:
                    92:e7:6a:ae:76:7b:1d:38:de:10:af:cf:2b:53:88:
                    28:de:9f:05:37:9b:6f:5e:81:ca:c2:e5:30:fd:9f:
                    10:04:7f:4f:03:c5:4c:e9:0f:ce:6e:2f:22:78:4f:
                    d4:8f:e1:03:a9:31:94:84:2c:d3:1b:23:77:7f:8e:
                    cf:74:6b:e6:86:38:17:e8:39:a2:fc:52:0c:5f:24:
                    dc:79:5f:27:98:1c:54:e7:db:cd:0f:ca:33:48:b0:
                    52:60:78:ce:d2:cb:61:68:78:4d:01:54:10:52:fb:
                    66:0c:c1:13:fb:78:da:fa:17:6f:9c:f7:45:5f:26:
                    14:99:6d:51:6a:d3:e2:2c:77:6d:93:a7:4d:bc:40:
                    fa:50:01:d5:89:65:63:72:50:30:4c:45:69:9d:e5:
                    dd:2d:09:c2:18:9c:cc:9b:53:cb:d9:1f:72:c0:b8:
                    61:a2:04:50:a7:47:45:93:94:af:07:f8:cc:68:8f:
                    91:6f:a8:56:ee:ac:5b:a6:9c:b8:20:d8:dd:7c:dc:
                    55:66:cb:9b:b4:d1:0c:6d:d1:c4:74:ca:fc:cb:7e:
                    ab:82:8b:1d:dc:01:12:11:64:c1:10:8f:36:60:1c:
                    86:c5:68:3f:b5:d8:03:74:0c:11:1c:87:6f:c2:b2:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0F:CF:AB:CB:A8:30:F1:D8:78:39:85:37:0F:31:D5:53:C9:C6:18
            X509v3 Authority Key Identifier:
                keyid:9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/34352e3233322e38362e302f32332d3233203d3e20323731323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:06:01:8b:21:0b:8b:ae:a1:fe:3a:3f:9b:c3:3e:1f:cd:6b:
         1f:c8:9c:fa:65:cc:7a:f0:74:66:f9:c1:9e:8d:d6:88:3b:9c:
         66:68:59:b0:2b:97:7c:ad:ab:f5:43:95:10:a0:76:79:cb:6f:
         1a:5c:8a:4d:22:2e:ff:fa:f6:4f:b6:5d:2f:68:c9:2a:ba:56:
         d4:f2:8d:08:0d:e5:b9:3d:5c:be:c2:f3:01:8a:c7:60:05:4d:
         65:6d:e6:ad:d3:51:f5:d3:7e:6b:93:6c:82:f6:2c:29:b0:ba:
         2a:77:3f:61:05:b0:40:7a:ca:5d:69:ed:0e:c8:d8:91:5f:fe:
         fa:fc:c0:80:7d:57:7e:b6:57:ad:1c:51:e9:01:f2:f8:a5:89:
         56:3e:8c:fa:5d:54:c5:43:ff:3e:55:9c:2e:d1:d1:da:8c:6b:
         15:56:83:5c:dd:12:2f:5b:24:32:35:3e:c4:d7:14:0e:d8:ff:
         40:5e:3a:d8:62:0a:7b:a8:d8:cd:2f:5d:57:3f:c7:35:3b:7d:
         11:7e:33:51:ab:e4:02:9a:98:23:1e:33:66:de:e5:76:57:3c:
         7d:49:a9:23:a5:4f:8f:41:74:0d:43:d3:80:af:3c:2e:f3:e7:
         ba:84:c3:fe:39:8b:42:37:29:6b:64:f4:78:3e:96:fc:d6:89:
         43:9f:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:53:04 2025 by rpki-client