Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/34352e3136382e3132302e302f32322d3332203d3e20323638303630.roa
File:                     34352e3136382e3132302e302f32322d3332203d3e20323638303630.roa (raw, json)
Hash identifier:          LGU1uDs7qmodIPVNz57rcBWH4V/XIEXRa1eG1YwZIJ0=
Subject key identifier:   64:69:91:6F:DB:50:A7:5D:71:7D:21:5F:32:44:27:38:7C:28:D2:AE
Certificate issuer:       /CN=96FCF9B0D62C9BDBC742130C738D203D85019EB7
Certificate serial:       2787041BA253E4D699C3C88483A0D7BDBD7A7886
Authority key identifier: 96:FC:F9:B0:D6:2C:9B:DB:C7:42:13:0C:73:8D:20:3D:85:01:9E:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FCF9B0D62C9BDBC742130C738D203D85019EB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/34352e3136382e3132302e302f32322d3332203d3e20323638303630.roa
Signing time:             Wed 30 Apr 2025 19:31:49 +0000
ROA not before:           Wed 30 Apr 2025 19:26:49 +0000
ROA not after:            Wed 29 Apr 2026 19:31:49 +0000
asID:                     268060
IP address blocks:        45.168.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/96FCF9B0D62C9BDBC742130C738D203D85019EB7.crl
                          rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/96FCF9B0D62C9BDBC742130C738D203D85019EB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FCF9B0D62C9BDBC742130C738D203D85019EB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 00:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:87:04:1b:a2:53:e4:d6:99:c3:c8:84:83:a0:d7:bd:bd:7a:78:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96FCF9B0D62C9BDBC742130C738D203D85019EB7
        Validity
            Not Before: Apr 30 19:26:49 2025 GMT
            Not After : Apr 29 19:31:49 2026 GMT
        Subject: CN=6469916FDB50A75D717D215F324427387C28D2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:2f:dc:64:22:00:03:be:17:a4:1d:28:bf:
                    1f:bb:d8:e6:e1:40:23:fe:21:4c:13:98:d6:4b:37:
                    34:81:3e:6c:98:95:96:1d:c5:9f:54:22:be:85:cc:
                    8b:c1:22:9e:46:0c:04:f4:5e:ff:69:1e:c9:1c:62:
                    24:cc:22:31:e2:fa:c5:d3:80:9b:08:f8:96:11:3f:
                    df:92:31:9a:ac:80:ae:65:db:0f:59:e2:cf:96:b3:
                    04:64:3e:c9:e3:a4:91:2e:ad:f8:fe:da:c7:84:3e:
                    e2:d8:ae:5f:b4:52:2a:f4:19:e0:c8:ef:d0:d7:82:
                    a6:dd:92:1c:c9:0b:d1:17:8b:f4:ba:35:66:99:c4:
                    74:72:4f:a5:b9:15:ba:20:ff:80:e4:c6:90:ab:7a:
                    94:24:95:cb:59:88:fc:7c:f6:33:a1:a8:6b:bb:80:
                    71:60:78:08:da:5f:ce:f9:d4:08:73:dc:4c:b6:54:
                    97:88:c8:55:e5:91:90:9b:42:c0:93:b5:e1:45:ed:
                    2d:c4:b3:5b:c4:27:fe:21:e1:07:65:a4:0e:de:53:
                    0a:95:fd:e5:7e:56:36:81:e6:e9:85:2c:c6:da:d1:
                    97:6c:ad:48:99:e2:61:6d:74:a2:b1:b2:10:8e:ca:
                    bc:54:a9:91:0d:c5:35:03:68:ca:0b:3f:ae:94:d0:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:69:91:6F:DB:50:A7:5D:71:7D:21:5F:32:44:27:38:7C:28:D2:AE
            X509v3 Authority Key Identifier:
                keyid:96:FC:F9:B0:D6:2C:9B:DB:C7:42:13:0C:73:8D:20:3D:85:01:9E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/96FCF9B0D62C9BDBC742130C738D203D85019EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FCF9B0D62C9BDBC742130C738D203D85019EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/34352e3136382e3132302e302f32322d3332203d3e20323638303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         df:99:f6:f0:ed:06:c0:20:05:4c:3a:84:22:b4:1c:bf:75:2f:
         87:ee:7b:07:fb:df:1e:ef:4f:3a:72:18:ec:74:7e:a9:19:4e:
         6d:82:01:d8:a8:19:08:44:9a:6d:84:75:7d:13:e6:35:9b:f6:
         19:68:f8:4e:ab:db:70:b7:f6:2a:6a:e4:5a:78:62:71:80:4d:
         a6:8d:92:db:2f:08:c3:e2:15:c5:07:1e:6f:c2:fa:9a:85:b5:
         61:d3:a7:9f:88:fa:72:94:4d:ad:87:39:b9:23:c2:38:3a:d5:
         9e:f0:b3:5e:19:a6:47:1a:e4:08:5b:df:cf:42:f3:60:b7:74:
         cc:b4:9c:56:0f:92:8c:85:d6:74:21:69:aa:0e:5e:de:c0:40:
         f9:40:c6:16:22:2f:4f:05:33:d8:df:d1:41:d8:e5:34:f5:c8:
         0a:a9:46:70:72:60:6e:e7:e3:9c:45:07:15:e9:74:81:ef:dc:
         d2:e9:be:88:d0:3c:0d:eb:89:78:7d:dd:50:32:8e:2a:3b:5f:
         08:59:e9:d2:85:29:a0:0a:12:40:06:db:6b:82:f7:b8:b1:19:
         36:97:72:d4:8e:14:52:e4:18:b3:1c:84:c5:ae:23:ec:ba:98:
         ed:16:67:30:d4:6a:56:1c:c1:a9:27:44:e3:1b:d3:c8:79:e6:
         a3:fc:4e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:34:53 2025 by rpki-client