Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/34352e342e3133322e302f32322d3234203d3e20323636303632.roa
File:                     34352e342e3133322e302f32322d3234203d3e20323636303632.roa (raw, json)
Hash identifier:          hg4Pm0EbDY/iWODtioTWTWp/IGSoxMd1Rjvcv3JDf7k=
Subject key identifier:   16:61:57:77:85:57:69:63:15:BA:50:A2:FB:98:17:AA:FC:96:D1:2E
Certificate issuer:       /CN=70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D
Certificate serial:       63C92A2DCFC5BD3507D320F88A64434604B336A5
Authority key identifier: 70:22:3A:16:AD:3B:0A:41:AB:8D:AE:3E:BC:7A:95:3A:9C:8F:33:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/34352e342e3133322e302f32322d3234203d3e20323636303632.roa
Signing time:             Tue 27 May 2025 12:50:49 +0000
ROA not before:           Tue 27 May 2025 12:45:49 +0000
ROA not after:            Tue 26 May 2026 12:50:49 +0000
asID:                     266062
IP address blocks:        45.4.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.crl
                          rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 13:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c9:2a:2d:cf:c5:bd:35:07:d3:20:f8:8a:64:43:46:04:b3:36:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D
        Validity
            Not Before: May 27 12:45:49 2025 GMT
            Not After : May 26 12:50:49 2026 GMT
        Subject: CN=166157778557696315BA50A2FB9817AAFC96D12E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:07:e6:38:4c:43:4e:ec:81:a5:da:72:ac:
                    81:2a:8d:1d:c0:ff:01:b9:75:f2:c7:3d:2f:bf:43:
                    cd:93:ae:e8:1a:ee:a9:9c:78:a0:b0:c3:bc:07:67:
                    e9:75:fd:84:6b:9f:ab:b8:19:b9:37:18:dc:2b:ca:
                    49:02:81:ec:f3:4a:78:48:22:11:da:dc:be:8a:ab:
                    62:9c:e7:03:0d:d4:16:f2:95:96:8a:39:61:e8:0c:
                    3b:cd:d4:9b:99:d3:0a:e2:34:56:8e:64:c6:38:e9:
                    22:8f:f4:53:f7:f0:03:77:67:e1:86:67:5d:67:88:
                    c8:62:2d:25:1f:0c:25:cf:ea:05:1e:36:0d:9b:e0:
                    26:6a:7a:ee:b3:8f:ad:14:2a:44:f7:c2:cb:11:86:
                    ff:66:8f:06:0d:ac:70:62:ab:18:20:63:f0:1d:02:
                    6e:a3:2c:dc:2e:d9:cb:21:45:db:40:27:05:b9:12:
                    26:f5:42:14:f8:b0:a0:ec:0a:2c:03:4c:6b:fa:9a:
                    43:50:a6:ba:99:66:56:14:d6:52:fa:ec:92:9a:22:
                    25:4e:7b:60:03:62:d6:81:ba:59:31:a0:c8:73:84:
                    0e:be:89:fb:83:6a:54:43:a5:0d:0d:ea:b9:ae:20:
                    14:75:82:53:c7:40:38:b7:89:e0:eb:31:ee:c2:ff:
                    f7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:61:57:77:85:57:69:63:15:BA:50:A2:FB:98:17:AA:FC:96:D1:2E
            X509v3 Authority Key Identifier:
                keyid:70:22:3A:16:AD:3B:0A:41:AB:8D:AE:3E:BC:7A:95:3A:9C:8F:33:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/34352e342e3133322e302f32322d3234203d3e20323636303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:52:1b:19:05:f1:01:33:18:ad:33:06:a8:ba:91:79:33:3b:
         b1:c1:13:9d:fc:c7:86:d4:73:e0:10:7d:46:62:cd:37:db:7f:
         bd:5f:ae:1b:c4:8a:57:65:29:17:b3:85:e4:9a:ec:8f:3f:27:
         cb:7e:56:36:d4:c9:60:4f:a0:98:16:9f:a3:7d:66:3b:69:3c:
         7c:5c:c2:d4:8b:41:94:47:78:24:bb:e3:d8:c8:e9:f7:e9:b5:
         54:8b:9b:e5:a3:8c:4b:a1:f7:92:b3:2b:b6:56:83:80:07:2d:
         d5:bf:09:1b:24:96:8b:0c:61:30:cc:06:76:01:18:12:9d:e7:
         bf:e4:dc:be:97:f9:ea:c2:34:38:db:d2:15:3c:4c:bf:e8:af:
         72:64:b0:8f:8f:2a:61:14:06:1e:a7:d3:c3:a5:85:1b:86:b1:
         c3:1e:7e:a5:08:82:b0:74:7b:8c:d4:95:53:d7:1d:2a:44:d3:
         83:37:4e:18:63:69:97:1b:4c:3c:01:c7:58:e1:21:11:fd:b0:
         fd:6f:7b:dc:fb:0a:ae:24:07:01:89:92:b3:18:e9:29:22:83:
         2f:b4:0f:95:37:93:8d:66:f6:fd:1b:75:59:1a:da:52:0e:39:
         7c:9d:dc:e1:7c:d7:0c:84:a6:f7:a6:9a:f5:13:48:89:4c:5b:
         dd:67:08:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:04:25 2025 by rpki-client