Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137382e302f32342d3332203d3e20323638353738.roa
File:                     34352e3136332e3137382e302f32342d3332203d3e20323638353738.roa (raw, json)
Hash identifier:          lOmd+pdQwxyDQJJbTjt1idwlozvewwn7sCNIkqVhkXM=
Subject key identifier:   E4:F7:D1:F8:78:66:81:90:1B:9E:25:1E:CE:F2:5D:03:BB:67:98:B4
Certificate issuer:       /CN=8515DAD8B5B782A7E8448EFEB96B22E9B9617746
Certificate serial:       76E62FF5EB55BDE6162817F578BA061605C916D0
Authority key identifier: 85:15:DA:D8:B5:B7:82:A7:E8:44:8E:FE:B9:6B:22:E9:B9:61:77:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137382e302f32342d3332203d3e20323638353738.roa
Signing time:             Wed 07 May 2025 00:42:21 +0000
ROA not before:           Wed 07 May 2025 00:37:21 +0000
ROA not after:            Wed 06 May 2026 00:42:21 +0000
asID:                     268578
IP address blocks:        45.163.178.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e6:2f:f5:eb:55:bd:e6:16:28:17:f5:78:ba:06:16:05:c9:16:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8515DAD8B5B782A7E8448EFEB96B22E9B9617746
        Validity
            Not Before: May  7 00:37:21 2025 GMT
            Not After : May  6 00:42:21 2026 GMT
        Subject: CN=E4F7D1F8786681901B9E251ECEF25D03BB6798B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:ca:fe:50:09:e1:5e:52:8e:fc:dd:6c:dc:
                    47:68:14:5a:52:b0:58:df:d1:c9:70:bf:c1:3e:07:
                    e3:bf:e0:f3:5f:3b:97:64:5e:71:e6:2b:72:de:f8:
                    26:fc:7b:d5:06:9a:c7:15:31:6d:2a:7d:55:fd:17:
                    96:86:53:f7:75:8a:8d:6f:c1:3f:14:f3:8d:19:b6:
                    81:72:7f:4e:aa:ef:fc:39:83:05:fd:f6:42:4a:22:
                    25:33:e1:84:0c:68:ed:ea:c8:1b:fd:b1:de:c6:ed:
                    f6:8d:d7:aa:06:00:24:76:48:55:c9:ab:17:fd:12:
                    fc:c3:9a:a3:5a:a3:12:81:65:63:1f:5d:c1:57:50:
                    7d:83:e9:a7:a0:ac:cb:1a:51:61:39:d1:bf:1e:5c:
                    57:42:ca:ef:18:ba:94:57:ce:2f:01:5b:e1:03:8c:
                    47:1a:39:cf:f3:f4:01:ec:92:1e:a3:91:cd:ab:4d:
                    9e:cb:5c:b3:b4:e3:26:d4:8d:89:58:3d:59:a3:73:
                    73:57:38:d4:00:48:1d:77:05:8e:90:b6:77:0f:35:
                    d8:c4:c3:48:68:82:fa:44:5f:19:27:75:21:54:5a:
                    55:bf:49:1a:9f:1d:3a:e3:93:fc:5a:6b:2f:d9:be:
                    95:c0:33:f8:72:b9:76:3c:1e:6e:f6:06:4c:d1:02:
                    73:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F7:D1:F8:78:66:81:90:1B:9E:25:1E:CE:F2:5D:03:BB:67:98:B4
            X509v3 Authority Key Identifier:
                keyid:85:15:DA:D8:B5:B7:82:A7:E8:44:8E:FE:B9:6B:22:E9:B9:61:77:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8515DAD8B5B782A7E8448EFEB96B22E9B9617746.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137382e302f32342d3332203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e9:d0:12:b7:76:22:71:9f:ed:c2:8e:17:45:d9:da:28:14:
         55:27:a4:b7:7e:26:e9:e4:cc:e7:55:1b:59:a8:46:75:a5:d9:
         4f:a3:b9:43:43:c6:64:fa:df:dc:b8:e0:be:96:c4:20:53:77:
         42:6c:ce:be:2a:fb:d4:69:e7:b2:d2:3f:46:de:09:cc:de:40:
         00:d7:e4:68:39:e5:a3:10:73:74:be:25:fe:fe:4d:a2:a1:c7:
         f7:ea:fe:4b:65:3c:6e:70:fe:fa:c7:7e:d6:0a:1d:ca:5e:1e:
         01:8c:ac:1d:93:df:06:8f:f5:79:d4:27:2c:22:62:1b:39:00:
         c9:5b:24:ce:b1:a6:08:f0:ba:72:7e:01:ca:1c:be:14:e4:7c:
         23:b4:dc:cb:65:05:7b:cf:61:dc:22:ce:61:97:71:a0:5b:3e:
         e5:d3:6c:c5:1c:b5:c8:ac:49:14:93:2d:7d:63:6c:a2:05:c6:
         59:7a:58:62:ef:31:62:ae:4a:2a:ed:aa:ff:87:09:e9:14:31:
         b6:7f:98:af:1e:fa:ce:7d:1e:a3:59:93:cb:7e:40:89:af:89:
         f7:97:c4:7b:aa:92:63:31:55:cf:44:e5:bc:20:4f:87:ef:0d:
         ad:79:dd:4f:93:9f:37:3d:f6:f6:62:4a:56:d0:26:8a:16:c3:
         ed:db:fb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:43:22 2025 by rpki-client