Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa
File:                     34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa (raw, json)
Hash identifier:          R15YTkRJ3W72ZnFA6avnc9eN/ptizZx04DGxkFZvLE0=
Subject key identifier:   90:08:5F:3F:60:5C:25:4D:41:20:D9:EF:75:67:BF:4A:30:51:F4:A1
Certificate issuer:       /CN=9B922140BC53E1C85FC2E0891EF246C829930B1F
Certificate serial:       30D816ADB7EAFB65074BB1E34C7D63B3B8F7C15B
Authority key identifier: 9B:92:21:40:BC:53:E1:C8:5F:C2:E0:89:1E:F2:46:C8:29:93:0B:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B922140BC53E1C85FC2E0891EF246C829930B1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa
Signing time:             Fri 23 May 2025 18:31:12 +0000
ROA not before:           Fri 23 May 2025 18:26:12 +0000
ROA not after:            Fri 22 May 2026 18:31:12 +0000
asID:                     262278
IP address blocks:        45.190.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/9B922140BC53E1C85FC2E0891EF246C829930B1F.crl
                          rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/9B922140BC53E1C85FC2E0891EF246C829930B1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B922140BC53E1C85FC2E0891EF246C829930B1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 14:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d8:16:ad:b7:ea:fb:65:07:4b:b1:e3:4c:7d:63:b3:b8:f7:c1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B922140BC53E1C85FC2E0891EF246C829930B1F
        Validity
            Not Before: May 23 18:26:12 2025 GMT
            Not After : May 22 18:31:12 2026 GMT
        Subject: CN=90085F3F605C254D4120D9EF7567BF4A3051F4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:7a:c4:dd:42:4f:79:0c:e5:2f:d1:29:8b:
                    46:21:0e:ec:68:85:41:d8:aa:d7:d5:c5:a3:09:88:
                    27:ed:6f:10:25:f7:c8:78:56:41:2b:4b:10:ed:9a:
                    1d:cf:63:83:8b:af:3d:47:a9:8d:e3:2f:c6:bf:19:
                    df:41:8c:93:7d:64:9d:c3:81:46:db:2b:6c:41:5e:
                    34:05:31:1c:31:9e:da:6f:4d:ae:d7:26:a8:0e:bf:
                    b1:7b:d6:7e:c5:83:2f:43:d9:6f:e6:2b:c3:5f:5e:
                    0a:70:9f:50:dc:dc:5a:a4:13:45:97:9e:f6:0d:5e:
                    67:fb:2c:d7:d5:49:52:9f:93:30:f2:fd:cd:8d:f4:
                    8b:7a:ed:30:6b:25:55:f7:9b:13:3e:e7:c0:b1:ed:
                    1c:8e:77:97:68:cc:1f:7d:58:5d:86:0f:02:40:51:
                    06:b2:96:16:45:45:a8:63:3b:7e:87:ef:10:4f:9f:
                    2d:e5:06:4c:76:9d:8a:11:10:ef:dd:ff:7b:47:8d:
                    bf:a6:5f:c9:b3:a7:f4:83:c8:e8:02:0a:3a:3a:9f:
                    f9:bd:a6:40:d4:13:71:15:c1:71:d3:a2:2f:ac:a7:
                    c2:5a:6c:32:84:9d:b5:c5:10:be:8b:59:ce:6e:a3:
                    a3:96:b9:83:8d:55:73:ef:b8:a3:4b:51:7e:a2:d4:
                    4f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:08:5F:3F:60:5C:25:4D:41:20:D9:EF:75:67:BF:4A:30:51:F4:A1
            X509v3 Authority Key Identifier:
                keyid:9B:92:21:40:BC:53:E1:C8:5F:C2:E0:89:1E:F2:46:C8:29:93:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/9B922140BC53E1C85FC2E0891EF246C829930B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B922140BC53E1C85FC2E0891EF246C829930B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:b3:79:21:12:5e:e7:7f:d4:b0:40:f0:6c:4c:a9:53:1d:a3:
         ae:fc:cf:98:ec:e2:3f:42:db:24:ec:2b:9e:2e:05:ea:06:06:
         b3:8a:09:f6:d9:ba:cc:15:2c:c2:3e:d6:5d:ed:a9:21:c8:d9:
         eb:a7:a6:0b:b9:08:5a:20:5a:1e:67:f1:6a:40:cd:46:9e:e3:
         60:2a:a4:c8:b4:5c:51:67:19:09:34:31:c6:49:13:22:21:38:
         32:c0:be:de:72:d4:11:8f:77:ae:40:aa:86:bc:00:8c:e8:14:
         87:ad:97:93:3c:cf:50:86:84:43:98:c3:43:83:31:a7:ec:80:
         87:2f:8c:52:60:8a:e3:0d:ea:25:4c:79:e3:f4:df:2e:a6:50:
         ac:0d:75:85:f9:95:4a:7d:2b:fe:a7:0e:b5:88:44:f0:cf:4e:
         18:bd:7e:f0:22:98:9d:a3:25:9a:d6:4e:f6:5c:23:d1:dc:67:
         9c:48:3b:63:a8:3c:28:9c:81:0f:a4:60:b3:6b:e9:41:ea:f9:
         54:52:fa:1a:70:d3:8c:74:4a:39:d6:e0:1b:ed:19:e5:9d:18:
         7c:81:bc:cd:56:8c:e4:13:d4:2b:bf:67:bd:4e:6a:59:bf:35:
         9e:1b:bb:7e:7b:ca:d3:ff:c8:21:8b:88:77:de:88:2e:7e:5e:
         82:7d:48:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:54:44 2025 by rpki-client