Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136362e302f32342d3234203d3e20323638363237.roa
File:                     34352e3136342e3136362e302f32342d3234203d3e20323638363237.roa (raw, json)
Hash identifier:          8/zd7qxZFFHUklDyNCW4ghzKe7KRT+Yy0aBnQPFKBr4=
Subject key identifier:   15:71:00:BA:12:F6:2D:29:AC:63:EC:10:13:CE:DF:5D:5E:EC:68:18
Certificate issuer:       /CN=B22E94C68C47105DBC96228B65437C19A68102C7
Certificate serial:       39B6EF2EE6A6FC4CDF2066C44D6F660263AAD129
Authority key identifier: B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136362e302f32342d3234203d3e20323638363237.roa
Signing time:             Wed 04 Jun 2025 18:00:00 +0000
ROA not before:           Wed 04 Jun 2025 17:55:00 +0000
ROA not after:            Wed 03 Jun 2026 18:00:00 +0000
asID:                     268627
IP address blocks:        45.164.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl
                          rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b6:ef:2e:e6:a6:fc:4c:df:20:66:c4:4d:6f:66:02:63:aa:d1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B22E94C68C47105DBC96228B65437C19A68102C7
        Validity
            Not Before: Jun  4 17:55:00 2025 GMT
            Not After : Jun  3 18:00:00 2026 GMT
        Subject: CN=157100BA12F62D29AC63EC1013CEDF5D5EEC6818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c1:21:62:bc:b1:10:a9:e6:2e:65:25:9f:21:
                    37:06:b2:48:ac:fc:0a:cb:b6:89:5f:b0:a0:b3:85:
                    97:bf:45:50:e1:55:91:c4:c6:f3:9e:75:58:e0:66:
                    71:47:5d:96:0b:78:e5:00:4b:fd:98:b2:97:14:e2:
                    42:bd:2e:62:1c:80:fd:cf:bd:b0:46:ef:10:0d:d1:
                    f1:96:5b:38:a3:c6:c2:53:9d:42:b6:64:da:93:be:
                    16:c9:28:dd:26:60:a0:6d:25:95:ca:dc:52:18:55:
                    9d:86:67:bc:66:7a:85:94:c0:e8:f0:09:af:8d:95:
                    b5:6d:ad:f9:81:7a:b8:af:17:15:63:b5:0b:60:0e:
                    97:aa:c0:68:8c:19:70:50:7a:c6:59:1c:5e:cc:1a:
                    3c:1f:7a:9c:fd:4d:b0:0d:f9:23:41:6f:84:76:36:
                    cd:31:99:b9:53:c5:49:3b:06:fb:d8:5a:b0:c9:03:
                    30:0b:9f:1d:fb:02:93:60:49:df:b1:e0:dd:ec:0d:
                    26:e7:5b:6b:a8:1b:99:09:a0:6d:45:54:02:d5:76:
                    19:6d:79:fb:d8:16:45:18:11:28:f5:1b:85:23:82:
                    b5:ec:96:8a:a3:f8:4c:49:6d:a3:eb:31:c0:cf:a6:
                    4f:d3:3f:f4:3b:f8:26:ef:6f:ea:85:2e:72:a4:d2:
                    4c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:00:BA:12:F6:2D:29:AC:63:EC:10:13:CE:DF:5D:5E:EC:68:18
            X509v3 Authority Key Identifier:
                keyid:B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/34352e3136342e3136362e302f32342d3234203d3e20323638363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:39:9c:07:b2:b6:b1:46:bf:6e:c9:7e:b4:4e:27:1d:a8:5d:
         11:cb:73:f8:e7:5d:ea:1c:2d:86:d8:ef:67:37:ee:18:46:b7:
         35:82:d3:57:7d:6f:f9:2e:22:34:75:21:ae:bd:1c:5a:5b:42:
         0a:4a:35:60:2d:bb:45:6e:68:81:9a:db:76:80:c9:1a:b6:0e:
         36:21:3d:d4:e9:fc:93:53:ec:b0:95:e4:7c:9a:f5:04:0c:7b:
         ef:a4:6e:e7:c5:c6:79:4a:f4:9a:28:94:4d:a4:53:76:c0:90:
         df:11:2b:9e:c4:29:4d:44:1d:f1:db:85:93:a5:53:9a:d1:8a:
         90:cc:c8:58:1b:40:ed:b8:a1:6b:59:df:10:6a:f2:14:55:1f:
         c2:09:ea:f1:ef:42:35:53:a5:06:ad:47:c4:c3:68:8a:0f:ce:
         18:dc:61:ce:8e:9b:cf:aa:84:f3:f0:98:1e:d8:51:52:05:01:
         63:31:cb:1e:58:49:07:36:11:26:59:20:3e:b9:36:8f:80:28:
         67:8b:2d:0f:6b:83:c3:b6:c4:66:62:06:44:b3:3f:bf:8b:19:
         1b:5e:a8:97:82:76:1b:a2:b3:86:85:a6:b7:0f:84:f0:4a:88:
         88:bf:ee:eb:0f:8e:f0:4b:c2:8b:bf:ca:bd:29:93:e4:aa:1f:
         c8:d4:c4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:35:02 2025 by rpki-client