Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137372e342e302f32332d3332203d3e20323638393433.roa
File:                     34352e3137372e342e302f32332d3332203d3e20323638393433.roa (raw, json)
Hash identifier:          0+kYLD8yHBn8SEvHZmP6Lna69QmTu4oRBPJPDeUnb5c=
Subject key identifier:   44:CB:6D:EE:C8:F3:27:24:31:3D:A9:31:B5:CA:0F:6E:DE:23:E6:55
Certificate issuer:       /CN=99CBE612CF987BC19B2EBFA775C37AA88704A02A
Certificate serial:       5889536166D50B6B53952092CFBA081EDACFE1E5
Authority key identifier: 99:CB:E6:12:CF:98:7B:C1:9B:2E:BF:A7:75:C3:7A:A8:87:04:A0:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137372e342e302f32332d3332203d3e20323638393433.roa
Signing time:             Mon 05 May 2025 21:10:45 +0000
ROA not before:           Mon 05 May 2025 21:05:45 +0000
ROA not after:            Mon 04 May 2026 21:10:45 +0000
asID:                     268943
IP address blocks:        45.177.4.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl
                          rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 09:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:89:53:61:66:d5:0b:6b:53:95:20:92:cf:ba:08:1e:da:cf:e1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99CBE612CF987BC19B2EBFA775C37AA88704A02A
        Validity
            Not Before: May  5 21:05:45 2025 GMT
            Not After : May  4 21:10:45 2026 GMT
        Subject: CN=44CB6DEEC8F32724313DA931B5CA0F6EDE23E655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:7d:9b:3f:32:83:1f:86:cb:10:19:8a:87:
                    1e:27:05:37:9e:47:10:82:af:9e:c7:40:a1:19:98:
                    b7:24:f5:57:d4:5f:31:9d:63:eb:72:9f:29:b8:8e:
                    e2:ee:de:2c:0d:b7:69:66:cd:5d:e1:23:80:88:32:
                    de:f9:f5:f0:3a:06:ef:6b:33:75:11:e9:98:41:ae:
                    99:d0:17:39:b7:37:82:60:89:df:87:4b:1d:0e:62:
                    e7:65:fd:10:1d:b1:25:00:23:6d:9b:39:30:b6:6b:
                    8b:71:ce:fe:0b:8c:53:9d:2b:db:6f:77:3c:09:70:
                    5c:2e:44:22:66:c4:9b:5c:95:f5:92:93:7c:42:0f:
                    0f:5f:01:7e:02:91:7c:dd:6b:8f:2e:d0:33:a2:b7:
                    d4:4c:de:b1:47:79:bf:a6:6e:18:5e:68:ad:24:b8:
                    74:3a:6a:e1:3f:c2:02:4e:3d:5b:eb:55:a6:19:1a:
                    19:50:a4:c7:da:40:83:5d:14:a5:cb:d1:b4:78:c9:
                    03:02:81:b6:44:63:45:dc:5e:b1:93:7c:6c:0a:4e:
                    00:cc:36:5b:5e:9f:fc:e6:b7:8e:ac:2d:ca:5c:80:
                    c5:17:4a:6d:ef:c8:21:14:d1:07:5f:dc:f1:4b:a7:
                    1f:1f:48:9d:aa:a6:6e:81:95:6c:9f:b7:4e:5c:db:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CB:6D:EE:C8:F3:27:24:31:3D:A9:31:B5:CA:0F:6E:DE:23:E6:55
            X509v3 Authority Key Identifier:
                keyid:99:CB:E6:12:CF:98:7B:C1:9B:2E:BF:A7:75:C3:7A:A8:87:04:A0:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137372e342e302f32332d3332203d3e20323638393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:50:29:26:20:cf:5b:d0:c5:7b:5d:d7:cc:d2:56:b9:a5:f2:
         bb:ec:9c:60:25:bc:4f:8d:7a:24:eb:79:a8:a4:68:16:12:c9:
         e1:ff:c2:9d:ce:84:78:c4:9d:4c:e0:4d:93:6d:27:4a:18:0e:
         13:07:e7:60:f3:c6:39:22:25:69:cc:21:4a:8c:ac:9d:5c:49:
         b4:6c:0a:88:c0:d1:b7:d4:7f:9a:eb:f2:7f:15:28:9f:37:42:
         27:c0:64:bf:6a:53:85:b3:0d:8a:54:5e:d7:8a:46:d0:86:25:
         94:9a:0e:b2:9e:90:57:d8:8c:b8:82:66:ad:c9:4a:c6:76:90:
         31:b4:e9:be:8f:19:01:97:8b:ac:25:6f:1f:59:dd:c4:c5:f4:
         fa:c7:1a:80:69:e7:fe:a0:3e:f5:d1:ad:04:aa:63:ed:f9:d9:
         e4:f5:f7:64:bf:20:53:0c:3f:94:4b:bb:ec:67:1a:be:69:fa:
         02:82:da:e0:8a:bb:a2:8c:31:c1:0d:3b:de:0b:85:5d:ee:18:
         93:b1:25:80:74:49:42:5b:b5:09:07:a1:ab:be:1b:34:31:78:
         11:26:93:90:79:93:b2:a8:d3:5d:b4:c7:18:74:05:d8:8e:80:
         dd:a2:75:05:d5:47:fb:29:6e:9f:02:36:79:59:a3:dc:8d:cb:
         bd:b7:d6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:30:24 2025 by rpki-client