Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/34352e3233302e3136362e302f32342d3234203d3e20323637323031.roa
File:                     34352e3233302e3136362e302f32342d3234203d3e20323637323031.roa (raw, json)
Hash identifier:          RHvXDeXQTgbO7jDg6M5ciBA1KhW2nO5BI1DytdsjK/s=
Subject key identifier:   10:FB:1F:F1:83:3D:06:DE:5A:41:58:1B:36:B5:77:05:F5:BD:ED:8C
Certificate issuer:       /CN=C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B
Certificate serial:       D3DBB195A626768674B51FAC0215753DB9E8C8
Authority key identifier: C0:60:8D:D6:D5:C5:A1:5C:1E:13:FA:1F:34:55:F2:A5:59:DD:4C:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/34352e3233302e3136362e302f32342d3234203d3e20323637323031.roa
Signing time:             Thu 24 Apr 2025 13:47:19 +0000
ROA not before:           Thu 24 Apr 2025 13:42:19 +0000
ROA not after:            Thu 23 Apr 2026 13:47:19 +0000
asID:                     267201
IP address blocks:        45.230.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B.crl
                          rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 10:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d3:db:b1:95:a6:26:76:86:74:b5:1f:ac:02:15:75:3d:b9:e8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B
        Validity
            Not Before: Apr 24 13:42:19 2025 GMT
            Not After : Apr 23 13:47:19 2026 GMT
        Subject: CN=10FB1FF1833D06DE5A41581B36B57705F5BDED8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:19:67:af:f4:92:d0:2f:9f:ee:01:14:fa:
                    51:b6:8c:41:c6:31:ac:69:85:9a:03:38:9b:f3:c3:
                    06:a9:6b:f7:e0:2e:97:09:d0:49:8c:c6:6b:b2:13:
                    1f:63:45:77:6d:1a:28:5b:31:4c:1e:a9:6a:90:af:
                    84:2a:36:ce:11:ed:c2:44:94:66:fd:87:71:50:7f:
                    dd:ed:0f:12:b4:45:da:9c:33:7d:20:ec:fe:a1:f8:
                    d6:c4:84:2e:6b:21:1c:fb:37:1b:3e:5a:cc:41:f9:
                    2f:b5:85:8a:3f:05:9d:c4:1f:65:72:f4:33:a0:1f:
                    44:31:b3:52:50:f7:3a:cc:4a:66:f2:40:a4:a2:50:
                    bc:0b:a3:ed:c5:d4:be:d9:15:b2:aa:3c:59:17:f7:
                    6d:e9:fa:d7:7f:1b:e2:7a:0f:3c:ce:39:39:18:77:
                    f9:c1:ca:55:6b:3a:a0:f9:35:b8:de:0d:e1:53:0a:
                    4e:ff:12:cd:26:0e:be:d1:6b:fb:b1:93:19:15:0a:
                    9d:74:57:83:8b:9a:0d:ac:4f:40:09:8a:2c:6a:69:
                    32:a8:d4:19:ea:fd:6b:d8:2c:3e:03:15:53:ba:cc:
                    35:22:1b:46:15:c6:7c:51:4f:1f:a7:35:61:95:98:
                    af:bc:e0:2a:89:3a:5f:ee:44:5b:95:23:c8:62:60:
                    bf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FB:1F:F1:83:3D:06:DE:5A:41:58:1B:36:B5:77:05:F5:BD:ED:8C
            X509v3 Authority Key Identifier:
                keyid:C0:60:8D:D6:D5:C5:A1:5C:1E:13:FA:1F:34:55:F2:A5:59:DD:4C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0608DD6D5C5A15C1E13FA1F3455F2A559DD4C2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/34352e3233302e3136362e302f32342d3234203d3e20323637323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:60:cc:9a:0d:e9:60:f9:c8:ff:5a:5c:3e:8d:e5:2c:fd:19:
         8e:48:2a:da:6c:bd:18:70:92:a3:a3:ce:0c:7a:ec:7d:a4:4a:
         3a:a2:2a:27:7f:1e:e1:c3:8a:2d:7e:48:2c:22:dd:da:6e:83:
         49:34:cf:0a:c9:dd:7b:a3:34:ed:37:3f:ff:90:ab:80:11:12:
         e4:98:9a:8c:75:2b:33:f0:0d:92:50:45:f6:9e:a8:e0:a9:5d:
         d8:84:01:29:e6:0a:c9:b6:d0:76:02:0c:00:2b:f6:70:90:fb:
         ba:29:27:75:cc:c0:96:1c:c9:b2:b5:e3:20:45:4a:90:93:88:
         4e:37:83:aa:30:3b:71:06:48:31:03:d2:aa:54:69:98:7e:79:
         4c:79:0c:84:0b:d4:4b:37:cb:61:fe:e8:82:c3:bf:27:d4:d8:
         2f:05:cb:2d:64:21:46:35:02:a4:14:04:0b:18:d6:17:02:85:
         87:6c:7a:58:65:ba:6b:04:a6:20:ba:a8:45:75:8e:51:86:d8:
         4c:3f:65:28:29:a7:f5:18:a2:83:7e:a1:5e:6e:82:0e:4a:6b:
         99:94:28:9b:bf:d8:fe:30:e4:77:b0:8c:01:17:4f:ff:84:39:
         b1:e2:89:55:71:60:80:cd:87:12:22:ae:a1:91:6c:8a:b2:fc:
         08:ba:cd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:09:38 2025 by rpki-client