Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/34352e362e3132382e302f32322d3234203d3e20323636303632.roa
File:                     34352e362e3132382e302f32322d3234203d3e20323636303632.roa (raw, json)
Hash identifier:          UwrB4PYZnVsTXnVGkOXnLOjv89DKTZ26pmpB8/AFHuA=
Subject key identifier:   A2:89:E2:98:60:3D:B4:23:16:3E:1B:7C:CD:63:F9:4E:BE:F4:AB:83
Certificate issuer:       /CN=70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D
Certificate serial:       79E087FBC0DAE059FD43D126567B6241783E047A
Authority key identifier: 70:22:3A:16:AD:3B:0A:41:AB:8D:AE:3E:BC:7A:95:3A:9C:8F:33:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/34352e362e3132382e302f32322d3234203d3e20323636303632.roa
Signing time:             Tue 01 Jul 2025 20:31:08 +0000
ROA not before:           Tue 01 Jul 2025 20:26:08 +0000
ROA not after:            Tue 30 Jun 2026 20:31:08 +0000
asID:                     266062
IP address blocks:        45.6.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.crl
                          rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 09:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e0:87:fb:c0:da:e0:59:fd:43:d1:26:56:7b:62:41:78:3e:04:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D
        Validity
            Not Before: Jul  1 20:26:08 2025 GMT
            Not After : Jun 30 20:31:08 2026 GMT
        Subject: CN=A289E298603DB423163E1B7CCD63F94EBEF4AB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:96:d8:95:0c:47:b4:f4:2d:6f:0c:0d:cb:
                    c2:ce:d5:f0:b6:c8:67:4c:ab:af:91:82:c9:b5:c3:
                    13:30:6f:1c:1f:f3:bb:54:e6:00:a3:a3:ff:16:2d:
                    f0:dd:af:9e:cb:ac:6b:4a:90:9b:fe:85:a5:65:4b:
                    27:5f:5f:21:65:cc:ae:f0:98:2d:ae:89:7f:07:f1:
                    d5:bc:e7:7b:5a:78:07:0d:85:40:16:93:d0:76:d7:
                    2d:8f:61:cd:93:a4:34:7d:de:de:f0:53:08:27:09:
                    1a:ab:7f:a6:72:ba:47:77:9c:f7:50:3b:17:03:7d:
                    dd:15:53:73:97:38:74:c0:e7:ef:3d:3c:7a:f3:35:
                    09:a3:da:67:c3:99:b6:55:f8:2f:f6:46:4d:2b:3d:
                    9c:6c:bf:ac:50:e6:2b:97:fc:ef:6e:52:18:5d:12:
                    d2:34:b5:7f:73:19:01:c2:db:f9:d7:24:97:8d:6b:
                    ec:0b:67:92:bc:c6:a1:c3:07:b5:6d:f3:3c:41:8b:
                    ca:4d:21:d9:e0:96:af:65:0d:9f:7e:75:17:29:f2:
                    e6:50:28:a8:2f:d5:a3:50:1f:0b:9e:04:b8:e7:b2:
                    dd:bc:00:79:f3:97:70:dd:5e:ef:12:26:5f:d9:f2:
                    4c:67:61:bd:90:15:ff:c8:29:80:db:f7:74:55:aa:
                    b7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:89:E2:98:60:3D:B4:23:16:3E:1B:7C:CD:63:F9:4E:BE:F4:AB:83
            X509v3 Authority Key Identifier:
                keyid:70:22:3A:16:AD:3B:0A:41:AB:8D:AE:3E:BC:7A:95:3A:9C:8F:33:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/34352e362e3132382e302f32322d3234203d3e20323636303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:18:c0:d4:a5:87:a2:25:65:a5:d3:90:0e:16:4e:d7:fc:99:
         30:4f:aa:e7:d3:e4:4c:17:16:a9:b3:30:90:3d:23:85:c1:48:
         d2:8b:74:54:d8:9e:d9:8f:76:53:84:59:3c:7b:9a:e8:f5:0f:
         33:24:8a:a2:d4:85:59:42:d2:24:75:7d:b6:11:4b:c8:81:8f:
         85:ac:11:95:7e:10:51:b6:ca:1c:49:ce:7c:ef:2a:cb:aa:fd:
         99:f6:4f:21:13:33:2d:0f:3f:55:47:8e:e5:ac:0d:8f:ef:49:
         68:37:89:47:c2:b5:e3:23:12:e4:2b:34:c9:c7:e9:85:e9:76:
         be:39:ac:ff:6d:71:a4:ba:de:a0:8d:f3:80:c3:6e:d6:2d:8b:
         aa:36:00:d6:7a:9c:7e:d0:83:75:74:dc:30:d6:6d:56:d3:b6:
         cb:66:32:7b:8f:3d:ea:e4:7f:5f:1f:f4:8c:2a:17:cd:0f:a2:
         52:45:d2:ab:fb:39:ff:bf:c6:70:bc:c4:dd:15:f8:2a:1c:2f:
         78:08:de:d3:60:1a:6a:5c:2f:e0:54:19:e9:85:18:71:a4:df:
         58:97:ab:3f:dd:ea:0f:1c:af:51:64:da:e2:6f:4f:c3:cd:35:
         43:02:bb:fb:97:b8:d4:9f:b9:e0:b4:10:46:43:08:fe:db:97:
         22:78:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:00:09 2025 by rpki-client