Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/34352e3232392e3131362e302f32322d3234203d3e20323637313136.roa
File:                     34352e3232392e3131362e302f32322d3234203d3e20323637313136.roa (raw, json)
Hash identifier:          fI5/8zLUXdoe5YTRnx/bl7saSUK2MXzzrQOUxxfejE0=
Subject key identifier:   BB:57:6D:44:D0:57:4B:AE:07:8B:9D:17:36:E7:53:38:86:28:1A:F6
Certificate issuer:       /CN=AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF
Certificate serial:       55DC78F7B23399D981832B32303D0FD837971B1A
Authority key identifier: AA:3E:D7:A7:EA:EF:9B:8C:98:95:3A:B6:D5:6D:72:78:BB:8A:BA:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/34352e3232392e3131362e302f32322d3234203d3e20323637313136.roa
Signing time:             Thu 29 May 2025 12:42:57 +0000
ROA not before:           Thu 29 May 2025 12:37:57 +0000
ROA not after:            Thu 28 May 2026 12:42:57 +0000
asID:                     267116
IP address blocks:        45.229.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.crl
                          rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 11:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:dc:78:f7:b2:33:99:d9:81:83:2b:32:30:3d:0f:d8:37:97:1b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF
        Validity
            Not Before: May 29 12:37:57 2025 GMT
            Not After : May 28 12:42:57 2026 GMT
        Subject: CN=BB576D44D0574BAE078B9D1736E7533886281AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:79:b8:f2:3f:b6:1c:07:72:3e:de:17:c9:
                    3c:dd:67:dc:e1:7f:a8:97:17:52:cb:c7:c4:bc:ad:
                    a5:bc:ea:86:5f:79:25:39:49:19:51:46:b4:c3:22:
                    f9:73:81:ad:f8:93:86:92:a0:51:a3:20:62:0f:3f:
                    68:da:52:a2:ad:17:04:65:65:53:94:aa:d5:d5:67:
                    7c:93:d9:19:10:7a:3e:23:0b:ec:7c:15:3f:d8:24:
                    90:cb:52:a9:44:01:af:10:a2:b7:f1:db:77:2e:4e:
                    9b:32:91:a8:72:03:61:36:ef:7b:0b:bf:04:71:27:
                    5b:92:a5:1e:1f:c0:2f:c5:a2:d2:b5:de:f1:73:f2:
                    2c:99:ab:66:67:e1:08:3d:7a:85:56:d9:30:83:81:
                    5f:e2:97:d8:e6:83:9a:f5:8e:7a:79:df:88:05:fc:
                    c9:75:f8:e0:f5:87:fd:99:cc:be:1f:e4:53:a1:97:
                    b0:b1:01:9d:91:6e:ce:11:14:61:f4:14:98:53:56:
                    42:9c:58:08:e3:9f:ba:14:28:ab:2a:d9:bd:46:a9:
                    3b:0a:65:d1:88:16:ee:1c:7e:71:b3:f0:52:51:95:
                    45:50:49:61:ae:5a:9a:c9:f9:a2:9c:36:fb:d7:21:
                    55:16:a8:1d:0e:16:be:58:4b:6c:68:b7:32:be:8c:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:57:6D:44:D0:57:4B:AE:07:8B:9D:17:36:E7:53:38:86:28:1A:F6
            X509v3 Authority Key Identifier:
                keyid:AA:3E:D7:A7:EA:EF:9B:8C:98:95:3A:B6:D5:6D:72:78:BB:8A:BA:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/34352e3232392e3131362e302f32322d3234203d3e20323637313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:7c:ee:77:99:2b:a8:0d:a8:1d:4e:74:7a:02:9e:83:1c:7f:
         e3:b6:12:b6:f9:b6:c3:e8:30:13:db:cf:b9:67:d8:19:08:3d:
         d8:50:c0:ae:cf:9b:92:79:1c:a8:78:f2:30:fd:d6:99:ab:d6:
         7e:29:01:d3:ce:d7:78:ce:9f:c0:2c:6e:ba:9a:42:96:df:fa:
         4b:af:4d:65:8a:7e:80:d3:5c:01:0d:0e:cd:9e:1b:42:c5:67:
         3d:cb:af:09:f7:74:cd:06:5a:09:c7:21:c9:c2:9c:fe:7b:26:
         5b:9d:c4:b7:c2:ba:31:38:33:50:de:fa:79:bd:d9:5a:a7:22:
         3f:2e:de:f3:a2:38:fd:7f:c0:37:d5:e2:b8:fc:b7:bc:0d:39:
         ad:9f:f7:0d:85:f5:0a:25:d4:d1:aa:e7:e3:8b:59:8f:96:74:
         fd:99:56:a7:d0:1e:6e:88:f7:4c:bd:19:f0:35:51:b5:5f:70:
         25:f9:4f:0e:a9:d6:ea:f2:68:38:b1:a8:b9:7c:0c:c6:0a:6e:
         72:b3:2f:b8:9b:b6:32:f2:5f:b9:79:44:48:6c:58:82:e0:55:
         f0:ab:a9:fd:85:e1:b4:09:22:95:31:71:df:e7:96:85:cd:97:
         f2:ae:03:47:70:f6:3e:f7:73:67:9c:44:44:6b:95:20:98:b9:
         49:c8:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:37:27 2025 by rpki-client