Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/34352e3233392e38302e302f32322d3234203d3e20323638333834.roa
File:                     34352e3233392e38302e302f32322d3234203d3e20323638333834.roa (raw, json)
Hash identifier:          A2KqNEz/ObTs1Pi9ANZPYw1g+qUl1IXdPem6p7hpsQs=
Subject key identifier:   52:21:3D:C9:51:0A:3C:2E:10:8E:A7:50:B4:5D:37:65:3A:21:4F:06
Certificate issuer:       /CN=AB86F4E4258678DFA2BFCB281FF578C029DF9563
Certificate serial:       200E844CAD4A6BBE45C6934F9CCBDCFC1549F8A5
Authority key identifier: AB:86:F4:E4:25:86:78:DF:A2:BF:CB:28:1F:F5:78:C0:29:DF:95:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/34352e3233392e38302e302f32322d3234203d3e20323638333834.roa
Signing time:             Tue 27 May 2025 11:29:16 +0000
ROA not before:           Tue 27 May 2025 11:24:16 +0000
ROA not after:            Tue 26 May 2026 11:29:16 +0000
asID:                     268384
IP address blocks:        45.239.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.crl
                          rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0e:84:4c:ad:4a:6b:be:45:c6:93:4f:9c:cb:dc:fc:15:49:f8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB86F4E4258678DFA2BFCB281FF578C029DF9563
        Validity
            Not Before: May 27 11:24:16 2025 GMT
            Not After : May 26 11:29:16 2026 GMT
        Subject: CN=52213DC9510A3C2E108EA750B45D37653A214F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c8:7e:1f:3d:25:0e:41:dd:a2:ed:be:a8:c6:
                    58:14:67:aa:07:66:af:c5:33:a7:f5:b3:64:a9:e9:
                    1f:82:73:50:48:1e:3c:96:4e:56:e1:c7:bd:da:c4:
                    50:48:ca:13:58:5d:ca:c8:c3:bf:87:74:0c:ec:67:
                    cf:ae:df:de:be:81:16:65:90:a2:75:48:0c:66:2f:
                    77:6c:42:89:1e:f3:2c:be:e4:6e:6c:9c:ff:b7:f4:
                    0e:9c:dd:03:fb:1e:c3:1b:0d:06:48:c7:81:ac:d1:
                    a8:b8:62:32:87:06:42:e3:1e:92:b5:18:cf:46:6f:
                    64:46:8c:28:37:48:eb:08:83:9c:f2:4c:54:ad:c0:
                    10:fa:2f:e6:06:65:5e:a2:ed:fd:49:3e:81:57:a8:
                    91:1b:5d:67:b2:73:cb:79:0b:4b:9a:3a:86:0a:f3:
                    78:41:ee:5e:21:84:5e:eb:7c:62:f6:0a:c7:94:9d:
                    b2:95:3d:49:8f:7a:92:60:11:8f:77:70:b2:60:55:
                    58:9e:44:bb:21:de:79:00:c4:ae:f9:be:b8:80:0f:
                    7c:60:d0:a8:2f:32:6c:ac:c9:5c:53:02:eb:94:69:
                    a8:0a:92:79:cb:a9:4a:1c:02:ac:01:18:07:2e:5f:
                    50:c4:d1:f3:58:32:38:ae:69:2b:53:13:19:92:7d:
                    8e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:21:3D:C9:51:0A:3C:2E:10:8E:A7:50:B4:5D:37:65:3A:21:4F:06
            X509v3 Authority Key Identifier:
                keyid:AB:86:F4:E4:25:86:78:DF:A2:BF:CB:28:1F:F5:78:C0:29:DF:95:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/34352e3233392e38302e302f32322d3234203d3e20323638333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:01:73:b5:eb:6f:03:b2:11:f5:b4:72:34:67:a9:62:97:63:
         04:a2:68:37:5c:53:ad:02:6c:b2:2b:51:c3:87:65:3a:e7:2b:
         f6:22:c6:41:6c:99:e3:7b:d6:3a:7e:1b:9e:c1:ab:56:55:05:
         58:e4:61:3f:52:06:bc:99:90:e2:b7:3d:42:eb:e1:b9:cb:02:
         2d:22:1e:5b:3e:76:43:7a:5f:06:d7:9f:58:66:16:9e:a9:96:
         c6:32:ef:4d:78:5b:f1:96:b9:a2:0b:cf:53:41:90:64:89:37:
         a0:18:52:64:7f:40:d1:23:19:8e:2b:fa:2b:4c:be:99:c5:e6:
         38:27:ff:54:50:37:e8:97:60:e4:4b:c4:44:25:07:a5:bf:b1:
         0a:04:e0:47:f9:62:8e:e8:fa:ab:89:64:11:df:8d:84:2a:44:
         16:4e:16:06:a8:d5:dc:e3:3c:da:19:b7:f2:96:fa:a3:58:6a:
         52:83:1f:70:b0:45:0c:6b:82:dc:f6:da:6d:5e:69:81:f4:44:
         81:2a:c1:4c:ba:db:2e:93:3a:40:b2:1d:85:0e:93:88:8e:0e:
         4d:bb:ab:52:e4:ca:3e:ab:e6:c1:91:d1:36:0b:bd:4e:dd:74:
         da:49:bb:6c:3e:5c:62:55:cf:cc:72:bf:b4:b7:64:0c:0c:a9:
         a9:02:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:42:58 2025 by rpki-client