Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/34352e3138332e3230302e302f32322d3332203d3e20323639343033.roa
File:                     34352e3138332e3230302e302f32322d3332203d3e20323639343033.roa (raw, json)
Hash identifier:          TivatVBFzmKwFIAL2W3c9etwcicKDT6C+punMfL6Amw=
Subject key identifier:   59:24:AA:7A:35:F9:4E:4A:E0:F6:ED:E7:67:C6:45:30:23:9E:FB:CB
Certificate issuer:       /CN=46E84850835B7708ECE5E3073FFEA7A8DF9BEA60
Certificate serial:       25CC73337BD3B91F66A94C1CEB2F93E81A1AFB51
Authority key identifier: 46:E8:48:50:83:5B:77:08:EC:E5:E3:07:3F:FE:A7:A8:DF:9B:EA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/34352e3138332e3230302e302f32322d3332203d3e20323639343033.roa
Signing time:             Mon 12 May 2025 14:34:34 +0000
ROA not before:           Mon 12 May 2025 14:29:34 +0000
ROA not after:            Mon 11 May 2026 14:34:34 +0000
asID:                     269403
IP address blocks:        45.183.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.crl
                          rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 23:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cc:73:33:7b:d3:b9:1f:66:a9:4c:1c:eb:2f:93:e8:1a:1a:fb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E84850835B7708ECE5E3073FFEA7A8DF9BEA60
        Validity
            Not Before: May 12 14:29:34 2025 GMT
            Not After : May 11 14:34:34 2026 GMT
        Subject: CN=5924AA7A35F94E4AE0F6EDE767C64530239EFBCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:99:9d:6b:64:82:c4:1e:14:a9:9a:0e:79:
                    6f:a6:67:7a:c6:ae:be:d9:ab:29:ee:22:c8:7e:0d:
                    f1:eb:b8:23:d1:3e:1b:f3:48:a5:13:7e:7c:f9:e7:
                    af:77:29:15:28:d9:19:b5:aa:95:be:35:54:bc:98:
                    ba:14:03:d1:1f:f1:d3:00:df:c0:3c:f0:91:63:6e:
                    91:14:95:38:36:8a:3a:8a:56:5d:0b:a2:1e:69:6b:
                    4f:35:b7:ff:de:d1:34:35:11:0b:8f:83:cd:91:0d:
                    8f:5f:be:08:04:8a:4d:4b:2c:22:80:a7:66:10:76:
                    2f:59:62:59:ac:47:c5:00:29:eb:d1:c2:ec:eb:de:
                    eb:39:01:27:15:0a:7f:46:20:a5:b2:9a:33:b0:43:
                    9e:ba:ba:10:01:8d:fe:b2:a4:b3:9c:40:d5:38:bf:
                    76:ef:99:e5:9f:43:b4:b6:a2:fc:e2:30:ae:c1:73:
                    ad:1a:78:2d:4a:f7:84:5e:57:13:13:0d:e0:fe:c8:
                    b9:85:8b:bb:5c:3f:a2:fe:a3:0c:43:38:d1:eb:53:
                    72:91:32:d3:04:ec:b8:a5:22:d4:e7:08:36:09:9d:
                    9e:99:ab:52:6a:40:1a:d1:42:33:bc:09:80:a3:22:
                    7b:32:a4:52:c1:9a:d4:62:96:fd:d1:20:63:34:ae:
                    75:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:24:AA:7A:35:F9:4E:4A:E0:F6:ED:E7:67:C6:45:30:23:9E:FB:CB
            X509v3 Authority Key Identifier:
                keyid:46:E8:48:50:83:5B:77:08:EC:E5:E3:07:3F:FE:A7:A8:DF:9B:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/34352e3138332e3230302e302f32322d3332203d3e20323639343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:03:fb:be:91:3c:4a:b8:82:bc:87:c4:1a:1e:50:c0:05:b0:
         b7:a6:72:b7:e3:b2:4f:16:45:ab:9b:a0:e6:5a:0e:95:8c:64:
         18:50:e5:38:1b:87:38:0b:a6:c6:48:93:23:d8:38:a3:c1:54:
         4d:0e:ed:a0:9b:c5:81:64:44:1e:6a:48:64:63:51:7b:bc:d4:
         d5:09:6b:53:05:5b:73:33:59:68:b0:c5:ce:a1:ea:9a:73:a8:
         ae:6c:af:2d:74:23:54:68:7a:25:c7:40:30:56:d9:4e:2b:59:
         41:be:af:11:7b:0c:cf:ab:76:95:d0:2a:f4:68:3e:a9:ac:70:
         ad:c4:62:7c:f8:3d:38:ae:f9:5d:b5:31:13:57:ce:10:3d:58:
         6f:8d:1e:b5:a6:42:08:db:9a:54:68:2d:ef:ee:5b:3e:d7:32:
         25:bf:67:a2:95:f5:f2:6d:7a:2a:01:f7:8a:a6:2c:59:1d:e4:
         eb:37:69:2d:51:b3:6d:85:8f:47:1b:81:86:d4:d5:3a:c2:7f:
         f1:58:7c:b5:37:62:5c:ae:20:33:bb:82:f6:17:b3:13:10:6c:
         a0:bc:b7:f5:7d:78:7c:4d:bf:ee:07:d5:bf:f6:96:08:37:47:
         5c:da:3b:45:d7:98:12:fa:ee:54:e0:42:1d:b6:10:73:c3:8c:
         57:c0:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:28:28 2025 by rpki-client