Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137372e302f32342d3332203d3e20323638353738.roa
File:                     34352e3136332e3137372e302f32342d3332203d3e20323638353738.roa (raw, json)
Hash identifier:          pC0iwlpYRxMd1IFgONOBlkLh23Gm2Uhu12KmMeAknsE=
Subject key identifier:   FE:79:A7:72:00:F1:71:06:69:FD:2E:B2:3B:FB:FA:A4:71:DE:2B:4B
Certificate issuer:       /CN=8515DAD8B5B782A7E8448EFEB96B22E9B9617746
Certificate serial:       16755E5A9DE5C212A7C2DB2C73F1CB25F07A8C72
Authority key identifier: 85:15:DA:D8:B5:B7:82:A7:E8:44:8E:FE:B9:6B:22:E9:B9:61:77:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137372e302f32342d3332203d3e20323638353738.roa
Signing time:             Wed 07 May 2025 00:42:15 +0000
ROA not before:           Wed 07 May 2025 00:37:15 +0000
ROA not after:            Wed 06 May 2026 00:42:15 +0000
asID:                     268578
IP address blocks:        45.163.177.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:75:5e:5a:9d:e5:c2:12:a7:c2:db:2c:73:f1:cb:25:f0:7a:8c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8515DAD8B5B782A7E8448EFEB96B22E9B9617746
        Validity
            Not Before: May  7 00:37:15 2025 GMT
            Not After : May  6 00:42:15 2026 GMT
        Subject: CN=FE79A77200F1710669FD2EB23BFBFAA471DE2B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:4e:64:37:57:4e:e6:7b:94:a0:d4:7c:b3:
                    96:7e:4f:8d:6b:8d:d4:e6:59:e3:b0:1e:6c:9d:f3:
                    85:a4:a1:47:90:2e:2b:28:4c:ee:58:5a:3e:3b:8a:
                    65:dd:8b:b3:90:b3:9d:11:68:ce:bd:48:e1:d0:91:
                    3e:16:2a:30:61:b2:3e:a6:7a:5a:a5:bf:53:2f:c7:
                    82:01:7e:47:0f:14:ad:92:59:6b:1f:aa:48:3a:51:
                    b3:51:43:37:7d:d0:47:ca:19:8a:57:15:75:64:9f:
                    aa:61:73:3d:eb:31:da:0d:e2:83:3f:fa:3c:c8:9f:
                    7a:15:28:be:65:db:9e:55:d6:55:72:b0:d0:f0:3c:
                    8e:6d:05:59:b8:8c:97:67:ea:33:0a:a8:96:c0:0f:
                    0e:14:da:32:38:4a:ad:b2:cf:9a:35:b8:ca:3c:31:
                    44:1c:dd:e3:b7:95:cd:c8:f9:00:b7:3c:b5:a4:c0:
                    b5:df:f0:0a:c7:26:11:50:d1:c2:4c:de:88:77:96:
                    28:19:48:6c:84:d7:5e:8a:05:3a:ef:97:25:28:6a:
                    c3:9c:ec:40:69:da:26:52:b5:98:c2:93:b0:9e:0b:
                    8e:63:ee:49:1b:0f:1e:57:a6:47:4c:56:db:1c:89:
                    d1:25:00:06:17:cc:da:ff:eb:7d:7f:ba:22:ae:cd:
                    71:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:79:A7:72:00:F1:71:06:69:FD:2E:B2:3B:FB:FA:A4:71:DE:2B:4B
            X509v3 Authority Key Identifier:
                keyid:85:15:DA:D8:B5:B7:82:A7:E8:44:8E:FE:B9:6B:22:E9:B9:61:77:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137372e302f32342d3332203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:df:39:60:13:d1:15:5c:0a:2a:13:a3:ad:b9:84:ab:7c:e8:
         f4:73:ea:17:f5:a2:31:4a:31:65:2a:80:36:b4:5d:3d:03:0d:
         0f:d4:8c:bf:83:16:51:51:ce:55:22:84:f1:0b:ac:46:70:0c:
         33:ee:78:25:da:42:3d:f1:52:fe:73:63:43:65:6a:ea:28:9a:
         5f:ca:b1:f3:38:cb:ad:88:52:7f:a1:9e:f5:d8:38:06:ae:99:
         de:5f:c6:3e:e7:b0:19:08:aa:94:3d:fa:ed:db:d3:09:1a:cf:
         8d:dd:6d:f4:e9:36:dc:4c:4e:00:85:79:0c:d8:59:e1:69:51:
         12:1c:5c:a6:23:55:cc:8f:8a:1e:de:b1:49:06:25:8d:b4:ec:
         8e:b0:0e:8d:a8:96:d3:93:b6:48:88:2e:49:45:ae:ff:9e:51:
         21:44:ba:e9:d5:5b:55:c8:b7:53:7c:7d:7a:b1:75:dd:f9:d3:
         71:69:e7:43:e4:68:bb:34:53:d7:cd:1e:b5:b4:26:da:7d:56:
         bf:b9:00:6a:28:fa:e8:81:74:f8:53:3c:00:54:18:21:b7:9d:
         ca:a4:6e:f1:29:6d:ae:6f:b2:a3:95:c5:e9:2a:04:a9:c3:73:
         fb:db:ed:1f:91:5f:9a:ad:d0:44:7c:f2:3e:84:94:e5:a2:22:
         a9:3a:8e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:28:43 2025 by rpki-client