Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/34352e37302e3136342e302f32322d3234203d3e20323637353738.roa
File:                     34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (raw, json)
Hash identifier:          dgbIqMCh3em1A5Qi6J2mS5947e+aB8lrY1zEkfeB5hs=
Subject key identifier:   96:E6:57:2F:81:BA:96:3D:9D:12:0C:33:34:04:6B:F9:DE:5D:94:3A
Certificate issuer:       /CN=C35B03ED2F3CFDB8150D105C0E7E319D0348B560
Certificate serial:       747CD449C8998E221974270C650CBB4E6D0E70B4
Authority key identifier: C3:5B:03:ED:2F:3C:FD:B8:15:0D:10:5C:0E:7E:31:9D:03:48:B5:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B03ED2F3CFDB8150D105C0E7E319D0348B560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/34352e37302e3136342e302f32322d3234203d3e20323637353738.roa
Signing time:             Mon 05 May 2025 19:21:12 +0000
ROA not before:           Mon 05 May 2025 19:16:12 +0000
ROA not after:            Mon 04 May 2026 19:21:12 +0000
asID:                     267578
IP address blocks:        45.70.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C35B03ED2F3CFDB8150D105C0E7E319D0348B560.crl
                          rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C35B03ED2F3CFDB8150D105C0E7E319D0348B560.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B03ED2F3CFDB8150D105C0E7E319D0348B560.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 15:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7c:d4:49:c8:99:8e:22:19:74:27:0c:65:0c:bb:4e:6d:0e:70:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35B03ED2F3CFDB8150D105C0E7E319D0348B560
        Validity
            Not Before: May  5 19:16:12 2025 GMT
            Not After : May  4 19:21:12 2026 GMT
        Subject: CN=96E6572F81BA963D9D120C3334046BF9DE5D943A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fa:d7:15:c8:e9:f7:e4:2b:c9:e1:81:1f:49:
                    12:4e:83:cb:c6:a2:aa:ee:bc:95:71:34:04:23:2e:
                    c8:08:c8:5c:fa:d0:df:20:a2:d7:5e:fb:18:48:60:
                    cc:5a:f6:3e:8f:a4:b0:92:35:ff:58:c4:8e:6b:aa:
                    e9:d2:41:64:d2:bd:73:32:c7:a1:d0:b4:ee:89:ab:
                    87:32:13:79:5a:9a:42:24:15:76:c2:d3:6b:13:19:
                    f8:f7:e0:ec:ba:99:79:af:3c:ac:0c:fc:90:fd:71:
                    66:62:47:db:5b:a6:d1:55:31:7e:40:48:f8:02:7c:
                    aa:18:9c:7e:bc:66:ef:af:0c:d7:31:db:81:7c:b7:
                    c8:17:2f:8a:08:29:48:46:cb:e0:38:a7:4c:05:0f:
                    3c:ba:25:f2:95:21:8c:05:b9:5b:c7:40:ab:55:0b:
                    e1:5b:41:75:9c:3c:3a:cc:03:05:5c:c3:2c:34:40:
                    d6:d8:39:83:e8:a5:0a:24:96:34:fe:c3:35:a5:23:
                    e7:08:bf:ac:81:d0:7f:0f:50:c6:01:bc:05:5d:0e:
                    dc:14:47:e2:1e:12:97:9e:82:81:5e:56:f2:7a:a0:
                    19:dd:2a:63:36:f6:1a:21:6b:a7:26:56:3e:47:19:
                    7a:3c:28:8d:36:5f:0b:70:f5:f0:0f:55:7d:04:a9:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E6:57:2F:81:BA:96:3D:9D:12:0C:33:34:04:6B:F9:DE:5D:94:3A
            X509v3 Authority Key Identifier:
                keyid:C3:5B:03:ED:2F:3C:FD:B8:15:0D:10:5C:0E:7E:31:9D:03:48:B5:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C35B03ED2F3CFDB8150D105C0E7E319D0348B560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B03ED2F3CFDB8150D105C0E7E319D0348B560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/34352e37302e3136342e302f32322d3234203d3e20323637353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:93:74:9e:57:db:44:da:21:e7:ee:88:44:58:84:5a:d4:ce:
         c8:05:ae:85:b7:f8:47:c0:67:01:14:7e:18:3b:46:ab:49:e7:
         b6:ce:33:96:10:88:d9:8d:1c:e3:52:4c:a9:19:4b:48:4e:b8:
         00:2e:0a:94:81:38:28:54:dc:7f:7f:f7:4e:08:7c:36:a0:95:
         3f:53:a0:97:c2:f3:73:b5:03:36:65:44:50:cf:86:0b:2c:c4:
         c8:73:25:4c:a6:2e:38:e5:ba:5e:76:6e:05:7a:63:2b:a4:7b:
         91:39:30:10:28:51:44:27:aa:01:bf:88:68:b3:6c:94:54:cf:
         36:20:88:b4:23:75:11:b6:1d:89:ae:c7:b9:7f:dc:e4:2d:22:
         42:7f:4c:9e:a4:f5:8e:8a:00:34:02:fc:11:74:c2:a6:ba:dc:
         5e:ec:2a:d3:0e:73:7a:2d:89:67:c0:72:5b:ac:99:1a:3a:c7:
         50:35:3b:f6:4a:4f:fe:ed:64:35:78:84:3d:5f:da:b4:bb:83:
         a2:13:82:c0:93:0d:2a:7e:ae:08:7f:1b:da:9d:44:e3:a2:89:
         f8:67:c4:b5:83:e5:e0:9d:f9:e1:b1:64:3e:84:fd:3b:1f:d1:
         a6:ee:7e:8f:6b:dc:36:c3:2e:59:3b:bf:72:ea:dc:eb:29:f2:
         d6:61:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:05:46 2025 by rpki-client