Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/34352e372e39322e302f32322d3234203d3e20323638303835.roa
File:                     34352e372e39322e302f32322d3234203d3e20323638303835.roa (raw, json)
Hash identifier:          1+MmiQS3cwVCQuCpaBcmC4j8Gv9LVXYL4FHe3ba8mgA=
Subject key identifier:   CC:6D:86:D4:D8:DA:24:5D:6A:96:3C:66:D0:E2:F0:62:C9:A3:59:FE
Certificate issuer:       /CN=47C9D34AC5FB11828EAE43268ECB502451B9BA72
Certificate serial:       7858BCED127C2E5E6A38DFF8FA699DD3C9213623
Authority key identifier: 47:C9:D3:4A:C5:FB:11:82:8E:AE:43:26:8E:CB:50:24:51:B9:BA:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9D34AC5FB11828EAE43268ECB502451B9BA72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/34352e372e39322e302f32322d3234203d3e20323638303835.roa
Signing time:             Mon 12 May 2025 18:44:36 +0000
ROA not before:           Mon 12 May 2025 18:39:36 +0000
ROA not after:            Mon 11 May 2026 18:44:36 +0000
asID:                     268085
IP address blocks:        45.7.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/47C9D34AC5FB11828EAE43268ECB502451B9BA72.crl
                          rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/47C9D34AC5FB11828EAE43268ECB502451B9BA72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9D34AC5FB11828EAE43268ECB502451B9BA72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 19:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:58:bc:ed:12:7c:2e:5e:6a:38:df:f8:fa:69:9d:d3:c9:21:36:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47C9D34AC5FB11828EAE43268ECB502451B9BA72
        Validity
            Not Before: May 12 18:39:36 2025 GMT
            Not After : May 11 18:44:36 2026 GMT
        Subject: CN=CC6D86D4D8DA245D6A963C66D0E2F062C9A359FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:db:8f:0e:76:79:c6:0a:cb:f4:79:36:fc:
                    58:5a:97:4b:2b:93:69:7a:24:98:e1:09:5a:06:a3:
                    66:e1:3d:20:64:fd:81:1f:83:1f:88:08:94:de:14:
                    e7:1a:ab:eb:34:33:c0:11:ca:d6:cf:15:09:41:d0:
                    fa:eb:fb:c0:b8:a1:33:58:1d:e3:53:d6:30:f0:29:
                    bc:71:1d:0b:03:4a:4e:a3:5c:d7:79:88:ed:22:54:
                    25:12:8b:08:18:9e:98:56:51:17:10:c5:a7:3e:89:
                    9e:03:9f:b6:fe:8d:07:e0:3f:3f:95:20:a7:ed:e0:
                    5e:bf:1b:6d:f4:7d:16:90:c1:a3:12:5e:f4:cd:9a:
                    70:4d:12:bd:09:b2:83:dd:54:33:50:21:e8:66:de:
                    a6:d5:67:5a:e3:3a:7c:de:8d:a1:c9:56:7e:d6:01:
                    2f:a4:16:ae:1c:e7:70:65:42:f6:de:b7:16:d2:6a:
                    b9:d8:26:35:a3:5d:f8:04:9a:7f:55:7f:95:57:5f:
                    9c:a6:ef:23:a8:2e:24:08:65:96:07:09:31:89:86:
                    a6:ef:0c:f0:14:46:c2:7f:ec:21:2b:bf:cf:54:37:
                    df:99:1d:f9:d3:3b:f6:e2:d8:d6:f6:e3:06:1b:3c:
                    bd:d9:8b:99:ac:57:6b:3e:26:56:5f:bd:1d:ba:ae:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6D:86:D4:D8:DA:24:5D:6A:96:3C:66:D0:E2:F0:62:C9:A3:59:FE
            X509v3 Authority Key Identifier:
                keyid:47:C9:D3:4A:C5:FB:11:82:8E:AE:43:26:8E:CB:50:24:51:B9:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/47C9D34AC5FB11828EAE43268ECB502451B9BA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9D34AC5FB11828EAE43268ECB502451B9BA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/34352e372e39322e302f32322d3234203d3e20323638303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:d4:74:c4:7c:2a:9a:7a:3e:77:52:e2:d2:93:e8:51:6a:88:
         cd:6d:b8:96:10:01:35:87:ef:5d:61:c9:13:76:eb:e1:7d:e9:
         c7:4d:4c:45:52:05:18:5a:d2:c5:0a:ee:6a:e3:53:57:83:0d:
         fd:f1:21:e9:93:b5:cb:13:e6:4f:d2:96:e7:1e:4d:d0:25:6f:
         32:f8:13:6e:bd:c3:5b:93:c0:9d:2a:3b:65:5e:57:f1:2b:fc:
         5c:52:25:1c:39:53:cf:a8:b3:ca:28:4c:39:45:6c:8d:e5:af:
         ca:57:55:b0:68:44:b4:ea:57:11:20:b8:41:ef:d7:ed:89:d7:
         76:e7:0c:2e:39:db:19:8c:aa:37:bf:06:ec:5b:bf:c2:6f:d3:
         28:b6:1b:a0:3d:7e:c1:69:99:eb:31:85:14:78:87:b8:8a:34:
         0f:00:fb:20:84:f8:69:a3:93:b7:4b:b7:a8:a4:2b:df:60:ff:
         e8:a9:79:f2:f2:26:63:d6:3b:14:58:8a:38:83:1a:29:3a:2f:
         92:13:0f:d7:16:32:13:4d:b6:d2:76:fc:d9:72:ac:51:19:17:
         18:58:5b:0d:64:93:13:10:d0:ec:e5:e3:c1:7b:23:9f:48:88:
         43:56:c2:2c:54:f2:7a:91:89:42:35:1b:1c:61:1a:e6:56:2e:
         bd:fb:62:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:22:51 2025 by rpki-client