Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa
File:                     34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa (raw, json)
Hash identifier:          SFgnoC9b6XsOBWOxtYvSuXC8DcOSjBAvZ5UdN6KIgQ0=
Subject key identifier:   EA:C3:A4:77:FA:7D:37:8D:6A:09:F9:44:0B:86:C5:05:8C:E0:0D:35
Certificate issuer:       /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
Certificate serial:       017B039751C02F5B6E487A8EA1533FCD6F3BC417
Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa
Signing time:             Thu 06 Mar 2025 10:04:40 +0000
ROA not before:           Thu 06 Mar 2025 09:59:40 +0000
ROA not after:            Thu 05 Mar 2026 10:04:40 +0000
asID:                     268683
IP address blocks:        45.165.164.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl
                          rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7b:03:97:51:c0:2f:5b:6e:48:7a:8e:a1:53:3f:cd:6f:3b:c4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
        Validity
            Not Before: Mar  6 09:59:40 2025 GMT
            Not After : Mar  5 10:04:40 2026 GMT
        Subject: CN=EAC3A477FA7D378D6A09F9440B86C5058CE00D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:ff:1c:07:8c:83:26:4a:da:47:42:3e:40:
                    af:4d:8d:a5:6f:df:95:93:2c:56:8b:d8:57:64:37:
                    ad:07:a2:df:84:67:8e:fb:14:9c:7e:66:cf:f2:0b:
                    f8:fb:46:b3:52:d5:e3:d1:66:2b:04:29:4e:59:6f:
                    e4:9c:14:93:8c:79:dc:eb:36:5c:2d:56:a6:b9:7b:
                    69:b8:8b:83:1a:b4:c5:0e:6f:aa:6d:08:d3:43:46:
                    8b:8f:2f:b2:50:8e:f4:03:2a:0d:50:7f:7f:09:13:
                    4d:fd:29:97:06:cd:64:91:0e:92:21:f6:64:ad:94:
                    e1:bc:20:2f:d9:b8:d4:97:c6:2e:f3:f7:c5:5a:cb:
                    9d:c8:9c:48:84:68:01:7a:08:ea:1b:71:f6:7f:5c:
                    3c:97:77:2b:72:e5:09:cc:fb:b4:2a:4b:aa:a7:b6:
                    17:07:ba:97:8b:e3:bd:25:dd:20:1a:a7:98:62:3f:
                    1e:73:5d:bb:31:7d:7f:c8:bd:51:55:3e:ae:91:d9:
                    ba:75:97:51:1e:0d:6f:81:0f:ce:83:45:68:80:7f:
                    13:fa:26:a6:0b:a9:e3:70:b6:e9:59:10:72:e1:78:
                    12:b2:47:e4:81:65:47:8b:24:76:9c:07:ec:05:78:
                    01:5b:6b:66:c0:23:74:ea:ec:ed:54:f3:80:c7:c6:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C3:A4:77:FA:7D:37:8D:6A:09:F9:44:0B:86:C5:05:8C:E0:0D:35
            X509v3 Authority Key Identifier:
                keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:ba:c1:2c:f0:42:7d:c6:94:97:1d:94:45:f4:76:f4:e8:
         00:30:06:c3:7d:13:d3:3e:d4:42:11:ea:5c:3e:7c:27:02:6e:
         74:da:c3:d8:63:c1:f9:53:36:00:f1:83:09:d8:36:4c:6c:97:
         24:2b:66:9a:a9:81:be:d8:66:5c:62:8c:46:b4:a5:cf:9d:e7:
         1e:c2:7c:82:cc:45:85:19:a3:4a:d9:a9:30:a2:a8:4c:5d:94:
         df:7c:35:46:62:92:36:81:33:a1:4e:c3:2a:8c:ea:19:11:9e:
         46:f2:48:65:9d:26:60:a3:34:f5:67:e4:41:03:6f:22:11:82:
         16:1c:22:c4:2e:a3:ad:ec:c4:82:b0:22:c3:f7:6f:bf:3f:91:
         58:44:3a:ed:d1:09:3f:e0:6d:42:fe:ec:7a:2a:10:db:8a:3c:
         6b:9b:e3:03:9c:f9:9f:0d:53:e4:35:eb:98:77:6e:1e:a2:81:
         ab:41:4f:ce:b6:6f:ac:1f:61:d7:38:7a:f1:70:0f:e3:06:2e:
         3c:8b:0f:28:dd:a4:60:2d:42:80:f5:78:c9:ce:fb:6d:70:69:
         37:21:0d:4c:21:72:f7:ed:cd:8a:9d:57:63:99:7c:33:1d:c8:
         69:75:d4:3e:59:91:06:14:9c:46:a6:a5:8a:0e:7d:9c:cf:4b:
         0a:85:63:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:21:13 2025 by rpki-client