Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/34352e3136302e35362e302f32322d3234203d3e20323638333935.roa
File:                     34352e3136302e35362e302f32322d3234203d3e20323638333935.roa (raw, json)
Hash identifier:          WAHnZ2hyA8XZzsrDoDdzOBOMQYjTJnSjhVnXh70zs5g=
Subject key identifier:   CB:98:D6:18:A1:8B:81:04:F0:A6:29:06:86:39:25:52:06:91:6B:70
Certificate issuer:       /CN=BF62A21D9A4D847E29113CAD9E8F6A628C15AACD
Certificate serial:       4CEF16439DF03C495B9C77B35D49859C281FAE3F
Authority key identifier: BF:62:A2:1D:9A:4D:84:7E:29:11:3C:AD:9E:8F:6A:62:8C:15:AA:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF62A21D9A4D847E29113CAD9E8F6A628C15AACD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/34352e3136302e35362e302f32322d3234203d3e20323638333935.roa
Signing time:             Tue 17 Jun 2025 19:36:54 +0000
ROA not before:           Tue 17 Jun 2025 19:31:54 +0000
ROA not after:            Tue 16 Jun 2026 19:36:54 +0000
asID:                     268395
IP address blocks:        45.160.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/BF62A21D9A4D847E29113CAD9E8F6A628C15AACD.crl
                          rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/BF62A21D9A4D847E29113CAD9E8F6A628C15AACD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF62A21D9A4D847E29113CAD9E8F6A628C15AACD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ef:16:43:9d:f0:3c:49:5b:9c:77:b3:5d:49:85:9c:28:1f:ae:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF62A21D9A4D847E29113CAD9E8F6A628C15AACD
        Validity
            Not Before: Jun 17 19:31:54 2025 GMT
            Not After : Jun 16 19:36:54 2026 GMT
        Subject: CN=CB98D618A18B8104F0A629068639255206916B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:4f:6a:60:b0:c7:e4:23:27:43:17:11:d1:
                    95:4b:31:75:2f:8f:f9:6b:c3:68:fe:17:d0:87:23:
                    eb:fe:66:09:6c:f5:6e:1d:5d:60:8f:ce:f6:cd:41:
                    35:b8:66:ba:5d:8c:2f:e7:66:b9:01:01:72:c8:4d:
                    15:4c:e2:a8:67:e4:34:e8:55:fb:ed:24:d3:45:66:
                    1b:c2:83:cf:1d:6d:3f:ee:ae:56:71:f7:74:a7:d3:
                    bd:f6:52:cb:3a:ae:11:35:c1:5a:32:eb:d8:28:fd:
                    74:f4:26:79:b9:b7:14:aa:24:40:07:9f:2d:79:15:
                    fb:55:50:51:95:e7:50:ec:d0:b6:f1:77:6b:1e:b0:
                    c9:f8:0e:ad:49:1e:e8:42:df:2f:3a:ed:01:83:00:
                    ca:e8:32:3e:7d:90:17:de:a4:1b:34:21:dc:79:e5:
                    12:4e:24:66:6e:d9:b6:05:b6:69:dd:79:b5:a4:b1:
                    85:fb:41:89:6a:24:a7:ff:80:fc:aa:77:c7:ea:de:
                    4f:c9:d0:ee:e3:4a:ba:4d:9f:01:30:9e:81:5b:de:
                    be:07:35:eb:3e:c8:87:e9:2f:f0:c9:e9:9f:df:c4:
                    5d:51:1e:e9:d8:b4:7e:27:c4:7d:d2:96:e3:8d:23:
                    a7:b1:aa:56:cc:72:87:41:b7:e1:57:af:a8:be:85:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:98:D6:18:A1:8B:81:04:F0:A6:29:06:86:39:25:52:06:91:6B:70
            X509v3 Authority Key Identifier:
                keyid:BF:62:A2:1D:9A:4D:84:7E:29:11:3C:AD:9E:8F:6A:62:8C:15:AA:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/BF62A21D9A4D847E29113CAD9E8F6A628C15AACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF62A21D9A4D847E29113CAD9E8F6A628C15AACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/34352e3136302e35362e302f32322d3234203d3e20323638333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:f6:df:c6:ac:5d:d3:44:cb:f6:d6:b2:f0:76:41:f4:ad:c0:
         e4:a2:89:91:28:2d:0c:65:c3:df:3c:1c:6b:d1:67:28:b7:1d:
         7c:43:1a:c2:54:ce:a5:2e:c3:25:1a:0c:e4:09:62:3f:32:b6:
         32:bb:0a:ef:d1:96:a1:73:98:52:23:e8:94:e8:ba:7c:ff:8a:
         82:f4:2d:da:cd:fe:a4:69:80:2b:be:ca:23:40:13:ab:7c:4e:
         b6:27:42:b4:43:76:10:ad:e2:6d:0b:ab:32:71:f2:db:4f:0d:
         c4:42:61:c2:6a:b6:36:9d:34:a0:6d:24:1d:dc:6e:88:09:20:
         8a:5b:99:ca:43:76:a5:94:c9:45:2f:bc:95:cc:c0:61:32:e6:
         37:a9:a9:16:ab:19:ac:c3:a7:08:0c:7c:31:a3:b6:fd:a8:4f:
         86:aa:df:08:c4:47:cb:b6:c1:c1:02:c9:6b:30:ba:d0:bd:d0:
         5b:0e:cf:e4:0b:43:c2:d8:58:85:a7:da:f9:45:86:66:df:5b:
         1c:a5:0c:3b:59:cc:16:ec:c2:7d:6a:ef:40:c4:fe:01:68:e1:
         00:15:cd:c6:c8:30:5f:49:12:b7:af:84:30:6c:4c:12:af:4b:
         e9:ed:5e:52:e2:18:02:4f:5c:30:60:36:cd:97:79:aa:63:53:
         9c:a4:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:57:00 2025 by rpki-client