Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa
File:                     34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa (raw, json)
Hash identifier:          4MTe5q9v1+RODyYpXAl+hTOa6qdVAoueHQymY2Pvcuo=
Subject key identifier:   8F:8F:85:37:58:4A:8B:F5:7D:D0:C6:22:C3:DA:98:9F:FA:52:0A:8B
Certificate issuer:       /CN=85338CFAF888C0350AE9CB844AEBC476C4367656
Certificate serial:       5EB1ABBDF08DF07FB28732EDDBD2F26AEFF6C00E
Authority key identifier: 85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa
Signing time:             Tue 24 Jun 2025 14:47:52 +0000
ROA not before:           Tue 24 Jun 2025 14:42:52 +0000
ROA not after:            Tue 23 Jun 2026 14:47:52 +0000
asID:                     269056
IP address blocks:        45.178.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl
                          rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 03:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b1:ab:bd:f0:8d:f0:7f:b2:87:32:ed:db:d2:f2:6a:ef:f6:c0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85338CFAF888C0350AE9CB844AEBC476C4367656
        Validity
            Not Before: Jun 24 14:42:52 2025 GMT
            Not After : Jun 23 14:47:52 2026 GMT
        Subject: CN=8F8F8537584A8BF57DD0C622C3DA989FFA520A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:b7:6e:15:df:97:ef:54:62:9a:cf:16:28:
                    3c:c9:be:27:c0:8e:ae:7f:80:34:b7:b6:19:f4:4b:
                    fb:0d:29:9c:88:1a:e6:0f:2a:9f:47:f4:61:14:19:
                    bc:79:21:42:c8:66:ff:e1:a9:fe:16:ee:44:7b:5f:
                    b7:81:d2:6e:04:25:f0:5c:90:48:23:ab:cd:d3:21:
                    c6:f8:8f:30:bf:c9:20:d3:d0:25:a5:da:80:c7:ab:
                    d0:fe:53:6e:3b:ac:aa:87:1d:9e:5b:2a:7a:1b:66:
                    ba:89:4e:cb:c4:35:52:57:12:5d:47:4b:a3:71:88:
                    e0:46:e0:86:52:4f:da:fa:4c:7e:2f:26:da:42:1c:
                    2f:ab:dd:c2:79:52:a5:a8:68:24:f0:48:15:18:d8:
                    3c:28:82:35:e0:d0:0d:29:28:04:f8:32:45:d5:2f:
                    7c:58:9d:4d:1b:75:9d:50:88:0b:b4:8f:44:69:bf:
                    90:cb:01:91:43:0a:af:e3:c5:c5:37:44:27:49:1d:
                    72:91:f8:6a:55:ed:36:e4:a2:07:8a:1b:41:17:62:
                    ab:2a:0e:4e:3c:e3:51:72:ba:13:33:f5:65:42:33:
                    11:a1:eb:81:03:f7:cd:05:03:f9:90:1e:cd:f5:b9:
                    b3:33:dc:84:e4:6b:b9:71:d3:d0:af:8a:04:b5:32:
                    20:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8F:85:37:58:4A:8B:F5:7D:D0:C6:22:C3:DA:98:9F:FA:52:0A:8B
            X509v3 Authority Key Identifier:
                keyid:85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:b0:c6:be:e5:22:a8:5a:ce:8d:d7:0d:cb:ad:52:df:00:ae:
         38:ab:d2:2e:41:1f:b0:4e:7a:9d:51:43:d0:05:b7:7d:0b:38:
         b2:f7:99:33:37:35:2f:4e:15:fb:bf:2a:17:2f:b9:08:40:65:
         05:c3:d4:04:73:07:10:42:6b:f0:30:0c:2a:0e:6c:39:ab:5b:
         46:0f:ee:d6:af:33:38:7e:1a:2e:c1:79:40:02:b1:16:46:4d:
         9d:45:01:e5:84:85:42:70:56:8e:70:e3:1d:a9:76:fd:bd:78:
         b5:ad:10:fa:64:70:d8:f3:cc:5b:2d:6a:0e:82:26:83:e1:1c:
         ed:ca:e3:d3:ad:39:64:fe:a2:53:91:50:ee:62:7d:5d:b6:77:
         8a:f7:78:48:2c:75:88:8a:f2:39:04:5c:9e:a6:72:e9:07:b1:
         99:a4:ed:b8:ec:3c:7d:e1:ac:83:d7:71:bf:e1:3f:02:32:91:
         ff:f0:45:f5:c0:7f:81:2f:0e:42:c9:aa:fb:77:b9:6d:5a:42:
         ff:4c:d8:09:3f:26:1f:66:8d:db:30:e4:c8:b1:ad:99:5c:18:
         28:6f:80:bb:4c:fd:50:09:48:6a:2e:ea:1f:8a:3b:c3:de:b3:
         a9:7a:5b:2e:c7:0a:05:81:98:55:16:0a:5c:14:2e:2d:c1:df:
         43:fe:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:01:18 2025 by rpki-client