Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/34352e3138312e39362e302f32322d3332203d3e20323639313739.roa
File:                     34352e3138312e39362e302f32322d3332203d3e20323639313739.roa (raw, json)
Hash identifier:          53seHwqx0jKQ6I2VPnwHfO9kWqE6BN4a2J5i5XldWPQ=
Subject key identifier:   B2:25:AB:F9:C1:64:3E:62:3F:FA:1A:CF:4C:D7:BF:DB:43:5F:59:9D
Certificate issuer:       /CN=D54B1B805FFCBAA57E7661A202CC13E0B9D57357
Certificate serial:       0626B0F3C79ED8CB5EFC697D7B564A2609133000
Authority key identifier: D5:4B:1B:80:5F:FC:BA:A5:7E:76:61:A2:02:CC:13:E0:B9:D5:73:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54B1B805FFCBAA57E7661A202CC13E0B9D57357.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/34352e3138312e39362e302f32322d3332203d3e20323639313739.roa
Signing time:             Wed 14 May 2025 14:26:20 +0000
ROA not before:           Wed 14 May 2025 14:21:20 +0000
ROA not after:            Wed 13 May 2026 14:26:20 +0000
asID:                     269179
IP address blocks:        45.181.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/D54B1B805FFCBAA57E7661A202CC13E0B9D57357.crl
                          rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/D54B1B805FFCBAA57E7661A202CC13E0B9D57357.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54B1B805FFCBAA57E7661A202CC13E0B9D57357.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 17:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:26:b0:f3:c7:9e:d8:cb:5e:fc:69:7d:7b:56:4a:26:09:13:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54B1B805FFCBAA57E7661A202CC13E0B9D57357
        Validity
            Not Before: May 14 14:21:20 2025 GMT
            Not After : May 13 14:26:20 2026 GMT
        Subject: CN=B225ABF9C1643E623FFA1ACF4CD7BFDB435F599D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:45:fe:3b:f4:ce:2b:02:5e:6f:55:f2:38:
                    a9:4e:b4:e0:fd:79:7a:1b:2f:8e:ca:45:f7:0e:a6:
                    a5:af:b3:0e:a4:cb:1c:a5:39:16:e2:ad:cd:81:65:
                    71:78:29:14:0e:a9:21:a5:06:73:d6:0d:e3:6a:7b:
                    9a:a5:77:8d:08:ab:05:9c:7c:e5:97:9a:8b:64:9b:
                    23:65:b2:82:75:bb:c4:a8:2f:bb:d5:7f:59:9e:fc:
                    5f:23:60:33:ca:29:50:60:b5:53:ab:5d:ac:6d:4a:
                    a8:27:ca:55:30:95:95:05:e3:80:71:ba:31:21:71:
                    9b:b9:0a:d6:ee:b2:68:61:ef:38:64:b9:be:29:06:
                    96:b9:ee:ea:d9:69:11:63:f9:3e:6b:33:27:fe:d7:
                    6f:42:f1:8f:eb:c0:8f:43:ad:f7:83:1f:92:26:db:
                    03:4c:b5:93:5f:d8:d4:80:d4:24:14:f5:fd:da:5e:
                    b3:ff:79:ba:88:40:ee:32:07:b1:56:c2:02:4e:ed:
                    73:6f:bc:5d:05:c5:39:73:5b:24:f9:3b:5e:6f:73:
                    19:ce:5a:e6:87:cd:91:cd:6f:2b:36:1e:7b:12:55:
                    84:51:2e:91:5f:68:45:bc:8a:ef:46:af:57:44:69:
                    79:c8:0c:ad:12:91:ca:09:fe:b6:11:69:9c:62:e3:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:25:AB:F9:C1:64:3E:62:3F:FA:1A:CF:4C:D7:BF:DB:43:5F:59:9D
            X509v3 Authority Key Identifier:
                keyid:D5:4B:1B:80:5F:FC:BA:A5:7E:76:61:A2:02:CC:13:E0:B9:D5:73:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/D54B1B805FFCBAA57E7661A202CC13E0B9D57357.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54B1B805FFCBAA57E7661A202CC13E0B9D57357.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/34352e3138312e39362e302f32322d3332203d3e20323639313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:57:b0:e3:93:75:6c:fb:81:5a:7b:97:d6:1c:ba:57:4c:51:
         bd:b3:b4:e1:66:3f:bd:8c:70:53:c9:fb:74:cb:ca:94:6e:68:
         71:9f:a1:94:42:c5:78:a5:ed:51:6a:74:ac:04:32:37:28:b3:
         64:ad:9f:fd:30:d3:c7:f7:65:7c:2f:d7:2f:c9:b6:d2:0a:37:
         96:8a:10:b8:01:70:b9:69:5d:c9:62:08:91:9a:af:ac:78:80:
         1f:5e:0d:ff:4a:0e:26:1a:b5:4d:8d:f0:fd:ba:88:49:d4:8d:
         8f:dc:8f:a9:03:4c:0d:d6:0e:2a:7c:44:7e:9b:60:4c:55:dd:
         b4:c1:cd:31:95:c1:55:e2:de:f8:89:f7:d6:c3:a3:87:e3:ab:
         2f:85:4d:5a:89:30:da:4c:da:08:a2:75:af:9b:27:06:30:58:
         b3:e6:38:75:d9:a7:d3:49:37:55:58:30:2d:39:47:6c:c1:10:
         ba:72:d2:11:2c:db:2d:ce:25:c0:33:2f:08:a3:56:87:b2:9c:
         e1:4c:17:95:7e:80:0a:90:10:64:ba:86:29:f8:06:b0:d3:07:
         2e:dd:39:d1:ba:28:b9:ed:94:b3:5a:23:95:2c:f5:19:aa:cf:
         68:5b:7a:56:6d:82:71:74:9d:75:46:a4:56:cc:84:a9:c3:5a:
         55:c0:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:31:46 2025 by rpki-client