Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/34352e3136362e3136342e302f32322d3332203d3e20323634303735.roa
File:                     34352e3136362e3136342e302f32322d3332203d3e20323634303735.roa (raw, json)
Hash identifier:          pH4nH9XnoINKxujLS+1Xl9tkL61JzzencLAT+Z/UbQ0=
Subject key identifier:   B4:4E:3A:28:B4:AF:80:E8:66:DE:0F:E3:BB:74:77:50:D3:62:48:04
Certificate issuer:       /CN=1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07
Certificate serial:       2F8EFD1A55693D1ECA7235725119002DD93C5FEA
Authority key identifier: 1F:88:BE:2C:C4:CA:60:A3:45:8E:9F:8C:F2:FB:AA:FF:1F:ED:7A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/34352e3136362e3136342e302f32322d3332203d3e20323634303735.roa
Signing time:             Fri 21 Feb 2025 16:23:42 +0000
ROA not before:           Fri 21 Feb 2025 16:18:42 +0000
ROA not after:            Fri 20 Feb 2026 16:23:42 +0000
asID:                     264075
IP address blocks:        45.166.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.crl
                          rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8e:fd:1a:55:69:3d:1e:ca:72:35:72:51:19:00:2d:d9:3c:5f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07
        Validity
            Not Before: Feb 21 16:18:42 2025 GMT
            Not After : Feb 20 16:23:42 2026 GMT
        Subject: CN=B44E3A28B4AF80E866DE0FE3BB747750D3624804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8f:be:8a:18:71:59:aa:12:e8:30:74:72:82:
                    53:4c:ab:1f:67:97:9c:85:67:bd:50:93:3d:23:31:
                    9b:2c:4e:34:e6:04:cd:58:34:ce:09:0d:68:39:06:
                    c9:0e:fb:d1:72:1f:15:a0:06:4e:0e:51:28:ae:2a:
                    6b:6a:c6:1e:6b:de:89:f4:6f:b4:9b:04:82:1c:cb:
                    9d:7b:4d:75:8e:46:6a:52:d6:6c:9b:c6:6c:d0:cc:
                    a8:33:c8:90:ff:ac:2c:e3:4e:22:a3:ed:03:c8:31:
                    cd:9b:44:93:e3:ba:ef:bb:32:36:27:9b:e4:a5:9c:
                    45:2d:0f:3f:c3:e4:9c:17:e4:1e:bc:4b:3e:a7:cc:
                    4d:d3:47:05:b6:24:b2:7d:be:32:6f:a3:e4:01:a6:
                    c9:b9:11:6f:92:c8:61:78:80:05:d5:d4:b4:af:a0:
                    e7:29:f7:38:e5:ac:aa:e7:c9:ab:58:af:af:eb:4e:
                    df:06:0c:ca:6a:a4:bc:05:0e:bb:69:87:d6:09:99:
                    40:d8:2b:90:01:b2:61:7d:98:0c:6a:dd:88:3c:8d:
                    7b:dd:5d:f3:bc:63:7e:2d:5c:8a:3b:bc:3f:dc:c5:
                    05:cc:a1:9d:b5:46:e1:2e:aa:7b:65:44:1c:90:ce:
                    17:86:22:7d:db:be:3a:62:9c:b6:5b:fd:29:11:23:
                    ad:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4E:3A:28:B4:AF:80:E8:66:DE:0F:E3:BB:74:77:50:D3:62:48:04
            X509v3 Authority Key Identifier:
                keyid:1F:88:BE:2C:C4:CA:60:A3:45:8E:9F:8C:F2:FB:AA:FF:1F:ED:7A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/34352e3136362e3136342e302f32322d3332203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:c1:c6:06:da:71:b5:80:f7:0a:67:8e:7c:88:64:5d:69:2c:
         be:ff:10:11:f2:ea:97:af:79:2b:0c:64:94:d7:bb:66:03:f7:
         60:02:13:79:af:96:9e:23:fe:af:ca:6a:89:a7:aa:35:2e:0e:
         44:1d:3b:5c:15:67:3c:fc:36:2f:0a:a7:ed:4a:ee:d6:74:a3:
         bf:dd:8a:f8:16:78:ae:62:1a:2e:45:ab:28:41:9d:20:0f:dc:
         d5:a5:72:c1:f3:28:bb:b3:76:46:9b:76:91:ee:69:95:ec:c3:
         3a:aa:c4:2f:52:2b:55:87:5b:51:c2:93:c9:8c:a3:de:5b:cb:
         e7:73:7c:fb:36:f0:b9:9d:57:8c:15:5d:f5:2f:d1:6e:e8:b1:
         49:dc:1d:42:16:29:4a:f8:87:c2:0e:c8:2e:ef:cd:50:49:a0:
         2f:8d:37:e7:a2:8f:9d:94:1b:e2:46:d8:94:fb:37:d1:35:61:
         e2:a2:a9:a7:8f:36:0c:58:ca:57:27:12:e7:68:96:6f:63:4d:
         b0:53:9a:ee:e4:ad:2a:8c:84:bf:7e:92:11:08:3b:fa:81:f3:
         ad:e5:23:76:c5:8e:1e:67:87:22:fc:86:15:74:63:76:6f:25:
         30:a9:bb:1b:28:30:81:3e:12:30:1c:ca:a6:42:ca:e8:76:9e:
         fd:a6:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:06:21 2025 by rpki-client