Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3136342e3232342e302f32322d3332203d3e20323632383933.roa
File:                     34352e3136342e3232342e302f32322d3332203d3e20323632383933.roa (raw, json)
Hash identifier:          /2AhrrmHSMPRRbbo5Kra0eRaM3uZwJNgODWWVKaT2ZE=
Subject key identifier:   F8:A9:3C:82:7D:F2:37:D6:37:06:FA:85:77:67:F8:07:43:7C:BB:F3
Certificate issuer:       /CN=99B35081E0645635AD4D8BE70E34F035910FB764
Certificate serial:       6EF7049A1A73C83837FCA37B8E8CCA0966618A4E
Authority key identifier: 99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3136342e3232342e302f32322d3332203d3e20323632383933.roa
Signing time:             Tue 10 Jun 2025 17:45:16 +0000
ROA not before:           Tue 10 Jun 2025 17:40:16 +0000
ROA not after:            Tue 09 Jun 2026 17:45:16 +0000
asID:                     262893
IP address blocks:        45.164.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl
                          rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 10:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f7:04:9a:1a:73:c8:38:37:fc:a3:7b:8e:8c:ca:09:66:61:8a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99B35081E0645635AD4D8BE70E34F035910FB764
        Validity
            Not Before: Jun 10 17:40:16 2025 GMT
            Not After : Jun  9 17:45:16 2026 GMT
        Subject: CN=F8A93C827DF237D63706FA857767F807437CBBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:09:4d:1e:60:5a:29:9e:94:ef:9d:0d:6f:
                    f3:96:7b:5c:67:8d:eb:b1:55:a0:4f:2a:96:0a:0e:
                    55:59:0f:66:e6:c4:d7:4c:22:aa:09:40:bd:d8:90:
                    90:ba:6e:9d:c6:bd:55:a2:10:e0:3e:76:58:d2:99:
                    bc:97:20:be:96:a2:88:30:cb:ea:e3:fb:42:96:42:
                    02:4a:86:b5:33:00:b7:40:41:5a:1d:28:2e:12:c5:
                    10:52:e2:74:00:53:3e:cb:49:65:8d:cf:4b:9d:ef:
                    ff:75:0b:68:37:58:4b:16:5a:67:36:60:be:32:c6:
                    92:7e:8d:86:c8:4b:06:83:c9:e1:f5:82:25:c2:82:
                    dd:a5:c2:d7:d5:ef:74:1f:3d:76:4b:7d:cc:35:01:
                    d8:7d:68:43:81:66:a5:72:fe:b0:5d:27:24:e7:49:
                    cf:2b:3a:c4:ef:87:74:2d:f4:a8:d4:5b:c5:97:e3:
                    6b:da:25:4e:ae:50:93:70:b1:f6:b1:9b:c6:b3:6e:
                    d8:60:1a:43:95:f3:0f:7b:e3:eb:e1:d4:c9:3b:e5:
                    a0:37:20:0e:ed:0a:3b:fc:db:d4:9e:35:9c:04:6d:
                    09:b0:68:51:84:21:fd:70:34:fd:ad:b8:c6:0a:d6:
                    c9:a3:33:9c:fa:34:18:8b:03:ea:a0:7e:cb:5e:72:
                    10:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A9:3C:82:7D:F2:37:D6:37:06:FA:85:77:67:F8:07:43:7C:BB:F3
            X509v3 Authority Key Identifier:
                keyid:99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/34352e3136342e3232342e302f32322d3332203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:77:17:57:ef:32:62:7f:65:dc:5f:90:c0:a2:61:6c:7b:a8:
         99:6e:20:b3:a2:aa:5f:90:95:3e:a4:02:02:94:75:e7:11:95:
         aa:bd:17:9f:35:72:70:f0:56:24:5d:a1:7f:d4:9e:59:f7:7d:
         e5:5e:21:7e:a4:12:51:ad:3c:37:3e:73:c3:9f:3a:c2:92:22:
         9a:8f:2b:78:34:71:e0:ea:1f:8b:bf:20:f8:8b:87:6b:01:2d:
         6c:09:ef:9f:aa:88:64:36:21:96:e5:f2:4d:1e:f9:07:59:76:
         65:b0:c4:6c:77:cb:4a:ed:e6:d2:59:5f:3f:7e:ea:72:9e:37:
         b5:18:1b:51:66:de:a3:06:5c:3f:51:be:90:ef:b5:16:5c:6e:
         9a:87:c7:ee:f0:8d:fd:1f:6a:33:66:10:d7:5d:fa:e3:48:37:
         37:a3:ed:f2:87:42:6e:6c:e4:16:f5:5d:8c:67:25:2a:4d:5e:
         bf:3a:88:ee:c9:e2:71:5f:25:81:db:31:21:6e:4c:f0:87:72:
         58:33:8c:85:50:87:43:49:67:d3:da:19:fa:54:8d:83:cf:46:
         78:88:27:13:16:f1:1f:8d:fb:17:3e:b9:6f:d4:cf:57:bd:2c:
         29:ea:6f:29:9d:d6:c8:f3:e8:ed:99:ca:ca:62:ed:14:1a:91:
         1a:6b:76:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:15:40 2025 by rpki-client