Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234342e302f32322d3232203d3e20323638373937.roa
File:                     34352e3137322e3234342e302f32322d3232203d3e20323638373937.roa (raw, json)
Hash identifier:          vxhHsyAFVrhlEMZIk+oK/Mgsa8sZqQzh3AtHoq/pv4c=
Subject key identifier:   89:19:D3:43:9E:F0:33:7C:70:85:7E:8E:41:3F:EE:67:2E:DE:5A:D7
Certificate issuer:       /CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
Certificate serial:       5166CDF35F378E230514BD4F4786B05DBF29C9EB
Authority key identifier: EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234342e302f32322d3232203d3e20323638373937.roa
Signing time:             Fri 02 May 2025 18:06:24 +0000
ROA not before:           Fri 02 May 2025 18:01:24 +0000
ROA not after:            Fri 01 May 2026 18:06:24 +0000
asID:                     268797
IP address blocks:        45.172.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl
                          rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 08:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:66:cd:f3:5f:37:8e:23:05:14:bd:4f:47:86:b0:5d:bf:29:c9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEAE781774BBF39D3939DF8D9AFE5D134958196
        Validity
            Not Before: May  2 18:01:24 2025 GMT
            Not After : May  1 18:06:24 2026 GMT
        Subject: CN=8919D3439EF0337C70857E8E413FEE672EDE5AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:c0:83:2f:94:53:70:3d:63:82:f0:51:99:
                    f4:43:11:9a:f2:df:13:b7:54:f1:ad:a4:e5:1f:b7:
                    c9:ac:34:c2:d6:5b:a1:df:34:04:63:19:e8:fd:93:
                    55:45:dc:ec:9c:89:f6:53:9d:e9:93:d5:a7:74:dd:
                    41:59:da:db:93:b0:0c:19:09:6e:a3:a5:fb:c8:f1:
                    cc:7b:ca:a3:b3:33:6e:0e:43:40:86:e6:e7:86:e8:
                    11:47:9e:1e:58:e8:78:ee:ea:73:20:47:d0:39:04:
                    c9:77:64:84:93:d4:6d:38:6c:e0:81:75:25:48:65:
                    8d:cc:3f:52:e8:a4:7a:08:ca:1b:f1:b4:c8:7e:05:
                    3b:23:6e:38:73:07:f2:4a:31:90:57:69:5b:2e:09:
                    09:c4:53:58:4e:82:d1:25:12:ce:a8:be:93:af:42:
                    66:0b:ba:db:18:b1:02:32:3c:a4:eb:e6:ea:e2:80:
                    69:81:ae:1c:56:c7:ac:01:60:90:ea:64:06:60:38:
                    0c:57:7e:80:49:00:6c:b2:16:42:90:4c:6b:7f:27:
                    ef:02:49:91:18:e4:17:3b:2a:ae:f8:83:c2:0b:7c:
                    72:e4:43:0f:d1:9d:94:ba:a7:51:5e:0f:89:79:e3:
                    ce:68:ab:00:bc:d5:6c:38:3b:a1:1f:14:15:38:c9:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:19:D3:43:9E:F0:33:7C:70:85:7E:8E:41:3F:EE:67:2E:DE:5A:D7
            X509v3 Authority Key Identifier:
                keyid:EE:EA:E7:81:77:4B:BF:39:D3:93:9D:F8:D9:AF:E5:D1:34:95:81:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/EEEAE781774BBF39D3939DF8D9AFE5D134958196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEAE781774BBF39D3939DF8D9AFE5D134958196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/34352e3137322e3234342e302f32322d3232203d3e20323638373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:7c:d2:82:15:de:03:7a:de:a5:b0:a5:32:15:56:1e:6c:00:
         92:e9:c2:95:11:8c:9e:d2:a7:9f:e6:87:08:da:c2:28:73:09:
         19:5d:87:3b:78:07:3b:bd:13:df:ae:36:4d:aa:45:9c:a6:57:
         bd:33:28:c1:2e:b1:e4:05:99:39:d7:2f:09:72:a4:10:9c:5b:
         ee:51:bd:61:97:94:ac:03:89:ba:f5:50:b6:71:c0:e4:eb:57:
         67:d1:7b:ab:f1:da:6b:00:5d:f0:31:16:3d:6f:39:23:fd:c6:
         24:51:8c:a7:1a:61:50:47:ca:0a:6c:ad:66:07:30:65:32:09:
         d6:27:d1:82:c8:5e:7e:19:38:35:e3:79:11:7f:12:93:50:fe:
         b2:34:37:89:f7:36:23:a4:93:ff:4d:97:00:41:2f:08:10:ef:
         37:fe:09:82:24:da:63:c2:79:95:a6:fc:91:7f:94:55:86:cb:
         e0:dd:02:ba:28:c5:37:82:59:97:9e:3e:7a:fa:e8:fa:cb:98:
         47:7e:0f:3c:83:7a:2d:12:cd:e9:86:37:f7:93:1e:ad:b9:8c:
         ee:cd:6d:8d:0a:24:bc:4a:44:ee:b9:25:16:cf:da:14:77:2e:
         73:f5:d1:e7:81:4d:b4:82:8c:a5:4f:33:67:00:5e:03:80:4a:
         87:63:d5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:07:24 2025 by rpki-client