Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136342e302f32342d3234203d3e20323638363237.roa
File:                     34352e3136342e3136342e302f32342d3234203d3e20323638363237.roa (raw, json)
Hash identifier:          yfT3bTajVRL9z/LweUNLJt9ENDpxRfC1w7Y+B8aEvgg=
Subject key identifier:   75:6D:D8:11:17:A4:54:56:F2:38:6B:D2:43:FC:BC:86:B3:FB:B3:6B
Certificate issuer:       /CN=B22E94C68C47105DBC96228B65437C19A68102C7
Certificate serial:       3801E620CE8453C054969D1ED4EDD205741739D3
Authority key identifier: B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136342e302f32342d3234203d3e20323638363237.roa
Signing time:             Wed 04 Jun 2025 18:00:00 +0000
ROA not before:           Wed 04 Jun 2025 17:55:00 +0000
ROA not after:            Wed 03 Jun 2026 18:00:00 +0000
asID:                     268627
IP address blocks:        45.164.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl
                          rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:01:e6:20:ce:84:53:c0:54:96:9d:1e:d4:ed:d2:05:74:17:39:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B22E94C68C47105DBC96228B65437C19A68102C7
        Validity
            Not Before: Jun  4 17:55:00 2025 GMT
            Not After : Jun  3 18:00:00 2026 GMT
        Subject: CN=756DD81117A45456F2386BD243FCBC86B3FBB36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:40:15:de:ab:34:f9:a3:ee:6d:f6:79:8c:
                    29:d5:7e:b4:ed:aa:b0:b0:d9:b1:1a:d2:79:f9:67:
                    78:94:cf:c2:a6:09:e4:14:5b:b7:19:1c:5f:15:15:
                    26:ce:66:53:39:cf:6a:6a:ba:e4:b6:56:42:c0:64:
                    61:00:10:84:49:c8:e6:be:9d:45:3d:f8:a3:67:fe:
                    bb:21:39:dd:98:e4:c0:08:79:ec:76:fb:0f:41:94:
                    f9:1a:f3:50:cf:4d:75:fc:ad:20:56:d5:2e:0e:f9:
                    43:44:92:91:37:b1:f4:07:2b:bf:56:3c:70:e8:56:
                    83:94:b4:ce:b0:d8:d3:18:95:73:8f:c5:8a:32:5d:
                    b8:e5:4d:b3:2c:4a:5b:db:51:cb:d5:43:04:6b:82:
                    4e:28:3f:ce:c5:2a:d4:45:02:9b:b0:90:9a:d1:c3:
                    57:76:82:1d:ab:f4:04:7a:b5:ee:7d:a7:fb:fd:f8:
                    66:3d:f6:20:45:89:78:97:51:7c:c3:6f:90:ee:65:
                    4f:38:57:ff:ab:01:ac:23:97:ea:1a:1a:1c:fe:56:
                    ce:f8:04:ff:99:4e:ca:f6:c0:37:91:49:11:41:f9:
                    52:6b:07:53:cf:75:6f:33:71:24:dc:44:ea:bb:2b:
                    9e:7f:10:2d:69:df:0a:78:20:68:4d:92:17:49:98:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6D:D8:11:17:A4:54:56:F2:38:6B:D2:43:FC:BC:86:B3:FB:B3:6B
            X509v3 Authority Key Identifier:
                keyid:B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136342e302f32342d3234203d3e20323638363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:de:f7:e5:2e:96:07:8e:2e:9e:4e:01:ec:fe:d1:32:bb:3a:
         74:bb:65:17:71:25:4d:43:ae:d3:a9:98:49:3b:60:6f:23:f3:
         7a:74:7b:01:e7:82:c6:17:76:66:22:ab:1f:bd:d0:a4:5a:cb:
         d7:53:bc:2c:c3:13:5d:67:0d:8d:51:21:c1:c5:6c:63:96:0f:
         90:be:71:66:e0:ac:d8:80:43:0d:30:55:11:5a:0b:ce:6c:5d:
         c8:5e:ff:c0:eb:53:36:fa:26:e3:b7:0f:bc:58:35:a5:02:d7:
         fd:79:ff:48:f8:0c:3a:d5:53:b7:98:ce:0a:46:ca:d0:74:72:
         c3:25:6b:01:a0:c8:07:fd:02:60:6c:e3:a9:31:d9:de:db:fe:
         fb:6c:c4:68:ac:1f:be:f2:6b:de:ee:a9:9b:80:e5:90:c9:26:
         0c:ae:cb:83:bf:07:1c:b4:b0:44:ce:20:38:6e:e6:b0:9c:2d:
         0f:1a:79:23:3f:92:9b:c0:9b:e1:be:d9:38:5c:ee:eb:f7:b0:
         09:40:ae:6d:61:53:30:a2:4c:e2:50:62:34:f1:00:30:10:94:
         24:ab:e9:d1:a3:ef:9b:e8:65:40:8f:cd:79:85:71:5e:ae:8e:
         de:8e:37:61:db:40:27:c9:73:9e:d4:d4:e2:a1:3a:cb:22:74:
         bb:31:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:31:50 2025 by rpki-client