Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa
File:                     3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa (raw, json)
Hash identifier:          Tf62AUOV4Ri2+pZsYEhg3vp6UBe/dmPqHUsQXKWK9CU=
Subject key identifier:   0B:FB:4B:37:6C:55:39:2A:36:4D:DB:19:33:F5:E9:C1:2F:20:DD:FA
Certificate issuer:       /CN=9CC2CE01A6286693B83AC51F507492F995DE365D
Certificate serial:       5650B0EB24A360FF34B2EF7C51457F76EF44348A
Authority key identifier: 9C:C2:CE:01:A6:28:66:93:B8:3A:C5:1F:50:74:92:F9:95:DE:36:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CC2CE01A6286693B83AC51F507492F995DE365D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa
Signing time:             Fri 02 May 2025 20:02:06 +0000
ROA not before:           Fri 02 May 2025 19:57:06 +0000
ROA not after:            Fri 01 May 2026 20:02:06 +0000
asID:                     267455
IP address blocks:        164.163.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/9CC2CE01A6286693B83AC51F507492F995DE365D.crl
                          rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/9CC2CE01A6286693B83AC51F507492F995DE365D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CC2CE01A6286693B83AC51F507492F995DE365D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 11:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:50:b0:eb:24:a3:60:ff:34:b2:ef:7c:51:45:7f:76:ef:44:34:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC2CE01A6286693B83AC51F507492F995DE365D
        Validity
            Not Before: May  2 19:57:06 2025 GMT
            Not After : May  1 20:02:06 2026 GMT
        Subject: CN=0BFB4B376C55392A364DDB1933F5E9C12F20DDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:c0:4b:b9:d1:ee:1e:25:6b:28:2f:bc:17:
                    b1:c1:81:ae:e6:f0:78:52:46:61:43:51:7c:b8:6f:
                    f4:88:a2:b3:0b:9b:70:e4:7f:ed:2b:6a:c8:5c:dc:
                    84:c3:c7:9c:df:bd:0d:06:1b:49:75:7a:d0:2e:8b:
                    4a:01:c3:37:02:0a:23:eb:1a:86:24:cd:5f:67:97:
                    95:66:63:cb:29:94:5b:0f:28:47:9e:09:38:c9:c6:
                    ee:27:93:99:77:36:16:0a:1e:6d:3d:6b:b2:86:79:
                    6c:94:6b:4a:75:10:b7:73:7d:af:52:a3:26:5d:05:
                    1e:49:04:a0:b9:0b:67:0d:9e:be:71:00:2a:40:c6:
                    70:4d:a8:83:bf:fb:f1:34:83:d3:ad:05:cf:4d:63:
                    3f:ba:97:77:4d:4b:aa:ab:01:f5:06:e7:36:52:6c:
                    85:cc:e6:dc:4a:91:04:57:94:5e:95:58:38:4f:93:
                    cd:71:86:9b:3e:b4:8f:f2:14:83:aa:81:98:99:da:
                    8c:de:ff:c5:38:40:b8:0a:52:1b:c0:72:32:54:6d:
                    dd:06:a4:fe:cf:f8:61:85:be:00:27:09:f1:c0:b4:
                    45:8f:2c:4a:c2:0c:79:52:6c:07:cc:de:1b:b7:0f:
                    9f:99:88:09:f1:7c:a8:e3:8e:d9:b3:47:5f:a4:94:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FB:4B:37:6C:55:39:2A:36:4D:DB:19:33:F5:E9:C1:2F:20:DD:FA
            X509v3 Authority Key Identifier:
                keyid:9C:C2:CE:01:A6:28:66:93:B8:3A:C5:1F:50:74:92:F9:95:DE:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/9CC2CE01A6286693B83AC51F507492F995DE365D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CC2CE01A6286693B83AC51F507492F995DE365D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:27:1f:74:68:91:da:ad:9d:2e:47:56:b6:94:8a:d1:4a:4e:
         fa:c5:54:d0:45:49:03:88:47:45:8c:7e:14:8e:76:0d:d3:b9:
         69:f2:76:87:aa:3d:46:97:3b:d0:9d:0a:62:de:ca:19:25:31:
         c8:f8:11:d5:16:55:8c:eb:49:34:68:86:a7:6b:2d:8a:41:0a:
         37:ca:17:7f:ec:6b:a5:00:2c:87:2e:f4:f6:ff:c5:e1:85:ac:
         50:93:b8:23:21:91:38:b3:97:8e:04:97:0c:e2:af:6b:31:8f:
         d3:f2:10:4c:25:53:17:f3:b7:ab:a3:d2:96:12:23:22:d4:1c:
         cb:69:69:5e:46:55:d1:d9:fa:f4:ae:4f:f5:35:ab:a2:34:66:
         ce:c1:83:00:e4:79:22:e4:1b:c6:d0:40:2b:ed:6e:3f:9b:84:
         a3:96:f7:17:9a:01:a5:df:4b:6f:89:bd:a3:5c:87:bd:1f:40:
         a8:bc:49:f4:9d:71:b8:f9:6d:37:a3:e9:88:9c:e1:ca:dd:b9:
         a1:98:ed:16:b7:55:fc:08:c5:3b:3a:31:be:28:d9:09:0c:aa:
         03:2c:15:62:5c:76:d8:30:8c:5d:85:80:5f:b4:0a:f0:bd:01:
         3b:97:3a:3c:2d:90:f2:09:e2:28:f6:63:e0:25:0f:4d:73:55:
         8a:59:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:12:42 2025 by rpki-client