Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32342d3332203d3e20323638353738.roa
File:                     34352e3136332e3137362e302f32342d3332203d3e20323638353738.roa (raw, json)
Hash identifier:          aINBIPtZJ0SwO64c9kZ5emK4lUDvGAD+eVuAstJvLW8=
Subject key identifier:   DE:FE:9C:D1:36:C4:05:C4:6D:20:45:8B:15:AE:60:08:B2:1C:83:8F
Certificate issuer:       /CN=8515DAD8B5B782A7E8448EFEB96B22E9B9617746
Certificate serial:       282F9AAAFBCB269BA37E479DD207B071A877D59A
Authority key identifier: 85:15:DA:D8:B5:B7:82:A7:E8:44:8E:FE:B9:6B:22:E9:B9:61:77:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32342d3332203d3e20323638353738.roa
Signing time:             Wed 07 May 2025 00:42:09 +0000
ROA not before:           Wed 07 May 2025 00:37:09 +0000
ROA not after:            Wed 06 May 2026 00:42:09 +0000
asID:                     268578
IP address blocks:        45.163.176.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2f:9a:aa:fb:cb:26:9b:a3:7e:47:9d:d2:07:b0:71:a8:77:d5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8515DAD8B5B782A7E8448EFEB96B22E9B9617746
        Validity
            Not Before: May  7 00:37:09 2025 GMT
            Not After : May  6 00:42:09 2026 GMT
        Subject: CN=DEFE9CD136C405C46D20458B15AE6008B21C838F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:5e:0a:56:87:07:a7:fd:6f:3c:1e:e6:6e:
                    61:94:d3:51:e0:f9:00:e0:ed:de:9c:67:c0:60:73:
                    da:71:4f:d3:69:9e:c5:a6:6e:16:3e:d0:9c:44:ed:
                    81:a7:6a:37:72:b1:da:d1:bf:fc:b9:e3:4c:16:d0:
                    9f:61:a8:6b:63:cb:66:02:65:a9:4e:f1:cc:dd:32:
                    c2:fe:52:8a:62:67:96:e4:bc:56:01:12:9d:7b:1d:
                    cd:76:ab:75:1e:16:bf:c6:48:0e:31:80:91:5d:0e:
                    e6:eb:b0:08:f9:4a:c0:4d:43:0c:6f:f9:dd:e2:51:
                    b3:a0:b2:b7:fb:a8:5f:9b:66:1c:99:2c:bf:f9:9d:
                    6c:d0:4b:41:7c:23:1f:af:2a:3a:cb:c7:00:63:ec:
                    10:30:d1:74:41:c9:9c:0e:d3:90:44:b6:a1:31:24:
                    d5:1c:13:e0:4f:bb:9e:51:30:ee:6a:58:b1:b9:21:
                    0b:13:31:1a:38:b3:ea:fa:0b:6b:c8:9c:67:fb:01:
                    40:23:df:fa:0c:5a:87:d0:a3:5d:67:7e:38:98:f7:
                    02:7d:fb:4e:b5:cb:24:05:98:07:b8:40:26:08:b6:
                    07:bb:99:8b:17:f8:ff:3e:53:a4:9a:ce:a1:5e:98:
                    47:da:51:d1:d3:66:d7:1d:ec:45:1f:37:52:30:51:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FE:9C:D1:36:C4:05:C4:6D:20:45:8B:15:AE:60:08:B2:1C:83:8F
            X509v3 Authority Key Identifier:
                keyid:85:15:DA:D8:B5:B7:82:A7:E8:44:8E:FE:B9:6B:22:E9:B9:61:77:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32342d3332203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:76:c2:39:f6:f4:7b:52:01:7f:79:63:7b:dc:06:93:35:
         0c:04:44:8e:68:25:1d:a8:47:c2:8d:c4:64:8d:d1:74:82:f3:
         64:3d:d5:9f:6f:28:40:23:ed:2d:3b:ea:3f:52:dd:88:fe:0c:
         eb:5b:68:4b:fd:d7:d7:0d:3c:e8:de:2e:17:b8:74:67:5e:da:
         de:3b:f1:c7:f4:f9:84:e9:bc:f4:22:6c:f5:2f:67:b3:a4:bd:
         71:1f:e7:f5:75:30:0c:0d:34:e5:04:83:e9:25:e6:60:bc:4f:
         b3:1c:4e:1a:17:a7:75:a0:76:cc:ed:45:1e:dd:9f:01:55:3a:
         00:8f:d9:ba:f5:0c:5e:32:cc:91:40:78:45:43:34:85:34:8a:
         2e:69:8f:5b:55:30:b0:ad:47:fa:ce:03:0e:b1:21:b1:4a:a1:
         b6:1e:3f:f4:55:e7:8b:e9:45:94:26:90:b6:17:49:95:6d:ec:
         d2:60:7b:b4:09:1f:67:68:58:9a:f2:e8:2c:58:a0:4b:a3:5b:
         7c:37:76:77:24:0a:4a:c7:2b:87:4f:b4:41:d8:cc:a7:02:cd:
         bf:53:2f:39:7d:fe:d7:f8:13:64:be:55:52:d0:66:d5:84:95:
         39:ca:22:ea:f8:3b:c9:11:b8:75:79:69:a1:b0:43:2c:f5:7c:
         aa:8d:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:39:46 2025 by rpki-client