Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa
File:                     34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa (raw, json)
Hash identifier:          Fe3slJe0kAz3P+lnt9VNZRIbJY9aNCulq95Hm/heJSI=
Subject key identifier:   15:50:50:22:5E:FE:2D:4C:BE:31:48:D4:F5:9B:77:14:C8:C1:F1:88
Certificate issuer:       /CN=2FF3BD981631E49037509A952007559286688690
Certificate serial:       0D7FF169376CAB5D1587CF71BCC9009445ADE337
Authority key identifier: 2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa
Signing time:             Mon 26 May 2025 13:39:06 +0000
ROA not before:           Mon 26 May 2025 13:34:06 +0000
ROA not after:            Mon 25 May 2026 13:39:06 +0000
asID:                     268668
IP address blocks:        45.164.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl
                          rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 17:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7f:f1:69:37:6c:ab:5d:15:87:cf:71:bc:c9:00:94:45:ad:e3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF3BD981631E49037509A952007559286688690
        Validity
            Not Before: May 26 13:34:06 2025 GMT
            Not After : May 25 13:39:06 2026 GMT
        Subject: CN=155050225EFE2D4CBE3148D4F59B7714C8C1F188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:62:27:35:19:75:82:fd:3f:b5:68:14:55:
                    a6:0c:01:f0:0c:40:85:32:6e:4f:f5:2b:66:04:55:
                    32:db:f2:03:4d:96:d7:d4:a4:a8:69:4f:05:29:61:
                    d9:d5:0a:1e:85:bb:65:84:2d:46:82:c8:c4:63:08:
                    b6:d6:15:1d:40:22:bd:89:56:24:59:02:84:6a:dc:
                    fe:2d:3b:c6:6e:7c:fe:e9:f9:43:43:64:92:22:97:
                    f1:c6:fa:40:16:7c:dc:78:7e:8a:67:98:b0:f6:78:
                    3f:d3:e6:d7:7f:c3:12:90:4e:ad:57:d2:ea:28:a5:
                    54:65:3e:ed:91:c4:03:0a:2f:cf:1a:23:2d:4e:1d:
                    f9:5e:49:c5:31:79:3a:51:13:81:58:f7:b6:b7:d3:
                    62:f2:81:19:91:0f:b5:8c:93:6e:03:98:45:e8:15:
                    9c:4a:b7:8b:eb:3b:46:bf:22:27:2f:6d:ee:d4:54:
                    e3:4a:7a:42:01:b4:44:1d:90:23:bc:74:c4:0d:6f:
                    17:7b:e3:a1:07:85:e0:19:15:24:24:5a:c0:5f:e9:
                    ee:c9:2a:57:b3:5d:10:7c:61:11:50:32:1c:20:15:
                    24:e4:ac:f4:a5:24:16:54:f0:b8:04:55:d0:ac:81:
                    cb:25:8e:6c:a7:dd:6c:dd:cc:d2:1e:c0:5c:a8:f3:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:50:50:22:5E:FE:2D:4C:BE:31:48:D4:F5:9B:77:14:C8:C1:F1:88
            X509v3 Authority Key Identifier:
                keyid:2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:a9:85:cd:5e:15:1b:a5:24:2a:5e:67:eb:50:df:2c:d1:a1:
         a2:51:43:ec:db:49:8c:7e:50:38:e0:04:16:04:82:c3:e0:5e:
         f7:72:cc:81:f6:4d:80:83:6e:c5:1d:ba:30:92:13:ef:55:85:
         9d:7c:d1:58:f1:79:5a:9e:b5:7b:12:75:74:03:cb:47:93:8d:
         9a:a2:75:70:d5:2a:cb:62:eb:5a:cb:4d:9c:b2:4a:18:72:2a:
         2d:73:b7:cc:6e:b9:5b:ad:17:4c:3f:a6:9c:2d:52:7a:b6:3e:
         32:f3:16:aa:c2:b8:fa:60:cd:41:75:a1:5f:a6:6a:2b:d4:66:
         72:ee:19:22:97:b2:fe:59:fd:1e:d3:8d:64:a9:d9:b2:c4:14:
         be:86:ce:6b:4d:5d:0a:3d:73:d2:18:0b:d2:1e:80:29:02:cb:
         9b:60:fd:a5:28:b0:9f:ec:70:38:39:ef:bf:c6:0c:04:57:5b:
         82:ca:28:38:a6:f5:9e:03:33:05:00:48:43:9e:bf:eb:7d:ce:
         e1:e3:6c:0f:bd:5a:fd:dd:b5:86:7e:4b:03:8d:c8:79:43:ba:
         d6:04:ab:9f:ad:b2:3c:cc:d3:fd:aa:eb:8a:7e:ef:a9:e3:6f:
         a2:98:c5:ee:20:90:b7:43:91:51:f1:7c:ed:61:ed:2b:7d:ca:
         b5:bb:91:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:30:44 2025 by rpki-client