Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136352e302f32342d3234203d3e20323638363237.roa
File:                     34352e3136342e3136352e302f32342d3234203d3e20323638363237.roa (raw, json)
Hash identifier:          uRtVt8Mw1rxr8peGlIRLg7KtCPYKHMT144bdktdPyWg=
Subject key identifier:   CD:57:11:0F:30:10:20:27:20:8A:6A:66:A9:80:0F:52:23:AC:49:1A
Certificate issuer:       /CN=B22E94C68C47105DBC96228B65437C19A68102C7
Certificate serial:       6E77BFA023E4C1D00C53BA9DF48F4386FC6E98FF
Authority key identifier: B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136352e302f32342d3234203d3e20323638363237.roa
Signing time:             Wed 04 Jun 2025 18:00:00 +0000
ROA not before:           Wed 04 Jun 2025 17:55:00 +0000
ROA not after:            Wed 03 Jun 2026 18:00:00 +0000
asID:                     268627
IP address blocks:        45.164.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl
                          rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:77:bf:a0:23:e4:c1:d0:0c:53:ba:9d:f4:8f:43:86:fc:6e:98:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B22E94C68C47105DBC96228B65437C19A68102C7
        Validity
            Not Before: Jun  4 17:55:00 2025 GMT
            Not After : Jun  3 18:00:00 2026 GMT
        Subject: CN=CD57110F30102027208A6A66A9800F5223AC491A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e1:10:1b:28:ae:17:e1:c1:f6:d8:b8:3c:05:
                    14:51:bc:13:f6:28:f3:51:3d:14:cb:bb:d2:32:7f:
                    d1:21:e2:4f:9f:58:52:e8:62:cc:8b:35:62:1d:32:
                    55:54:9a:2a:bf:8a:61:26:1f:77:28:55:1a:b5:15:
                    0d:df:34:42:2e:5f:b7:e5:6b:13:34:5a:65:0b:e8:
                    b0:26:33:4b:51:8a:7a:cd:0f:cc:dd:25:2b:c4:99:
                    2d:93:a2:46:4b:e9:84:44:2f:0b:6e:50:be:27:79:
                    bd:3e:e9:14:16:95:b9:17:96:ce:7a:bf:b6:01:d4:
                    bd:4a:9f:9a:fd:c6:24:fa:54:22:55:7f:7a:d2:a0:
                    40:44:ec:08:d6:8a:0d:1c:39:56:a8:a9:1f:b4:bc:
                    64:a5:42:72:56:bd:99:99:01:8d:cd:37:d5:70:09:
                    24:c0:f0:c8:c8:da:84:62:39:ce:73:7c:c7:ff:f2:
                    3b:7d:e7:30:f5:65:58:b6:c5:27:61:67:ef:40:8d:
                    42:c5:da:da:f4:5e:7d:e7:f3:b5:e0:21:01:48:ff:
                    f1:42:8c:d5:6d:7d:a9:f8:63:43:c9:cb:6b:9d:0d:
                    bd:28:9f:72:2e:b4:14:d7:b3:0a:e4:d5:df:2b:f5:
                    31:88:60:5f:62:29:a7:6d:47:a8:28:18:a6:d8:9c:
                    c4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:57:11:0F:30:10:20:27:20:8A:6A:66:A9:80:0F:52:23:AC:49:1A
            X509v3 Authority Key Identifier:
                keyid:B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136352e302f32342d3234203d3e20323638363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:cc:f3:a8:6f:2f:25:8d:c3:2c:a6:5e:b7:b9:a5:89:2b:02:
         7e:55:d2:90:a0:a9:ab:3d:49:ac:50:bf:50:0b:95:5f:95:5e:
         f6:da:23:af:70:56:64:de:2d:9c:da:50:69:59:a5:ce:56:f6:
         ad:9c:26:7d:11:98:ea:87:5a:4c:a4:3a:a6:ad:d4:34:a2:57:
         2d:3d:7b:e0:33:e2:85:c4:2d:75:59:50:3b:0f:89:30:31:97:
         44:93:ee:2c:f4:5f:b3:0e:34:2d:60:0d:b7:d6:19:cd:1b:01:
         35:c1:93:b9:97:4e:f5:43:06:4a:52:ee:c4:44:73:05:ce:3e:
         88:8a:1a:9e:f7:1a:f4:45:50:7e:be:38:69:eb:83:1f:b2:52:
         92:ca:17:75:ca:7d:17:68:1f:ce:ac:8c:37:d0:e9:6f:c9:2f:
         3a:69:77:7b:92:b5:a5:17:0f:78:e5:bf:78:ef:62:a9:fe:9d:
         a5:da:01:89:a1:71:1e:09:d9:23:c1:c8:34:3b:05:82:a1:25:
         78:b7:33:89:6a:9c:01:cb:c7:ba:fb:55:90:ca:0a:34:f4:5e:
         82:5d:d0:fe:eb:97:05:5f:37:a9:d0:43:94:a0:65:76:86:43:
         ba:d7:ad:09:5e:35:1f:b7:84:f9:ca:e1:8c:f2:29:f4:71:2d:
         ca:ce:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:35:01 2025 by rpki-client