Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa
File:                     34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa (raw, json)
Hash identifier:          X2v6G2N0drDu0z5QWDSZkFLdbvtQUh6ReMeCnXXR1Ow=
Subject key identifier:   F7:8F:C0:B4:61:AE:E0:D3:66:CC:B8:87:90:7F:AC:57:96:9F:B7:C4
Certificate issuer:       /CN=97871ED0A2473339BF0C6BF605F98065C4015967
Certificate serial:       238B0439083B7713BC1234180A387BAF4BD0EDA1
Authority key identifier: 97:87:1E:D0:A2:47:33:39:BF:0C:6B:F6:05:F9:80:65:C4:01:59:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97871ED0A2473339BF0C6BF605F98065C4015967.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa
Signing time:             Tue 03 Jun 2025 18:01:35 +0000
ROA not before:           Tue 03 Jun 2025 17:56:35 +0000
ROA not after:            Tue 02 Jun 2026 18:01:35 +0000
asID:                     269526
IP address blocks:        45.186.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/97871ED0A2473339BF0C6BF605F98065C4015967.crl
                          rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/97871ED0A2473339BF0C6BF605F98065C4015967.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97871ED0A2473339BF0C6BF605F98065C4015967.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 00:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8b:04:39:08:3b:77:13:bc:12:34:18:0a:38:7b:af:4b:d0:ed:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97871ED0A2473339BF0C6BF605F98065C4015967
        Validity
            Not Before: Jun  3 17:56:35 2025 GMT
            Not After : Jun  2 18:01:35 2026 GMT
        Subject: CN=F78FC0B461AEE0D366CCB887907FAC57969FB7C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:3d:0d:ab:cc:ea:c3:cc:95:98:06:58:e5:
                    89:b3:09:c3:52:0c:cd:cd:27:18:a8:5a:58:41:f2:
                    ac:76:7d:5e:9a:7f:fb:fa:2b:d9:f7:12:3a:08:64:
                    a1:79:f0:ad:76:e5:6c:c2:db:fb:57:be:b3:c5:c9:
                    41:21:db:23:b5:fd:af:cf:58:c2:89:10:61:99:fa:
                    ae:cc:73:d9:57:8c:13:c7:89:0b:3a:0c:86:11:1c:
                    ba:05:a7:e4:09:0d:ff:f3:e8:e6:a1:c2:4b:99:d1:
                    a4:89:60:ad:8a:cb:51:26:0e:ba:f1:26:35:ec:cb:
                    ce:86:07:01:e7:3e:f5:69:f0:a4:cf:c8:a7:27:1f:
                    b0:34:8c:5d:c9:72:1e:ab:5c:cc:11:87:87:58:ab:
                    d7:29:b9:da:e2:b7:58:2d:1b:d5:57:f4:2e:43:fb:
                    b2:2e:18:c6:8e:c6:42:77:99:5c:a3:71:12:64:5a:
                    c8:81:0e:17:7b:9c:85:1a:79:34:5b:34:be:d9:0b:
                    45:41:3f:aa:9c:22:20:0f:25:1f:00:b2:e5:08:95:
                    26:bf:48:a5:9c:91:42:62:d4:14:66:18:81:a1:36:
                    47:f0:d0:bf:0f:2c:0a:33:93:7a:e3:2f:39:a3:f9:
                    d7:52:58:fe:f3:02:c9:e5:9a:af:ed:e3:e8:6d:77:
                    63:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8F:C0:B4:61:AE:E0:D3:66:CC:B8:87:90:7F:AC:57:96:9F:B7:C4
            X509v3 Authority Key Identifier:
                keyid:97:87:1E:D0:A2:47:33:39:BF:0C:6B:F6:05:F9:80:65:C4:01:59:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/97871ED0A2473339BF0C6BF605F98065C4015967.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97871ED0A2473339BF0C6BF605F98065C4015967.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:86:29:6a:5c:33:f9:57:b4:8f:f6:fc:87:1c:53:d3:e4:8c:
         58:11:8d:13:61:29:43:3e:07:fd:fc:5d:bf:38:b3:b1:ea:8e:
         01:f8:dd:2e:d2:5e:0f:d0:5a:00:b3:b6:d0:b2:ab:fc:86:98:
         71:d9:69:69:56:61:11:33:9d:10:f4:4d:8b:5a:39:d0:44:28:
         f5:87:4a:06:db:ca:55:de:96:10:ef:b8:ca:0d:a4:9b:e4:eb:
         00:4b:90:02:59:b3:b6:e7:73:e1:d4:ba:1a:6c:d1:30:91:ca:
         cc:62:70:bb:e3:4f:98:49:d6:67:d8:9a:dd:d8:a5:28:ab:30:
         3f:71:6a:61:49:10:db:5f:36:50:ff:40:fd:bd:32:16:d7:60:
         04:19:dd:a3:98:a5:fb:b9:a9:19:81:3d:ca:79:bc:b8:9e:b5:
         c4:7f:a9:71:a6:04:a9:d6:5e:03:ae:2e:63:83:65:6c:c0:61:
         ce:af:a8:cd:7c:4b:2d:51:8e:62:d2:2e:e7:1a:34:12:94:6c:
         e4:82:c9:bc:e8:3b:41:f2:ae:3c:85:06:a5:0a:12:2f:18:c3:
         c0:78:68:f2:3e:aa:73:79:8e:5d:69:8a:5b:0d:a5:d4:e8:fb:
         f0:bd:1c:5d:0a:41:5b:f9:88:2b:12:26:0f:f9:98:11:7a:73:
         4f:81:61:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:39:07 2025 by rpki-client