Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa
File:                     34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa (raw, json)
Hash identifier:          7zUiEVtaD8KQJ/F6pDQVWpW/FDKnkwVeoJp+AkQ6e6k=
Subject key identifier:   BF:B2:B0:E7:A8:DF:5C:37:79:25:43:EA:42:C5:58:B9:C7:52:CA:B7
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       09CEBBDFE9D95E6E725A4372203A909DB0B4A527
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa
Signing time:             Wed 11 Jun 2025 17:06:31 +0000
ROA not before:           Wed 11 Jun 2025 17:01:31 +0000
ROA not after:            Wed 10 Jun 2026 17:06:31 +0000
asID:                     268452
IP address blocks:        45.160.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 14:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ce:bb:df:e9:d9:5e:6e:72:5a:43:72:20:3a:90:9d:b0:b4:a5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Jun 11 17:01:31 2025 GMT
            Not After : Jun 10 17:06:31 2026 GMT
        Subject: CN=BFB2B0E7A8DF5C37792543EA42C558B9C752CAB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c5:1a:2f:98:9d:5a:7e:30:46:db:bf:d9:98:
                    93:02:a1:fa:bb:48:76:e9:65:4c:28:66:da:e6:8a:
                    83:18:0e:3f:f5:f4:a7:b1:37:4e:0e:8f:cc:64:8e:
                    f1:5c:b2:f2:84:c4:d4:7b:3f:4d:dd:01:07:8a:18:
                    d2:05:e7:a0:07:c7:55:d2:81:cb:30:41:ba:86:b2:
                    d4:29:7d:e3:64:6f:72:4e:c3:6f:65:50:d5:5c:43:
                    5e:d4:1d:22:15:1e:0e:f4:6a:eb:f3:7a:93:96:15:
                    af:7b:04:9a:a5:8e:e4:b4:23:92:39:15:d1:f4:8d:
                    a7:f2:1c:8e:f7:94:c8:9d:93:b5:f9:fc:19:03:18:
                    91:a4:7d:2d:5d:23:42:df:18:cb:04:11:7d:dc:5e:
                    b8:fc:3c:db:76:8f:1d:4d:35:12:55:88:48:7f:0c:
                    0d:ea:a7:30:ea:ac:09:e8:8c:25:56:00:da:2a:42:
                    0b:2c:31:e4:5a:be:69:c2:d9:a2:66:6c:ea:0e:8c:
                    23:c4:0d:79:78:24:74:99:89:c3:e7:0e:03:14:8d:
                    0f:55:1e:bc:58:86:ba:21:94:82:0a:84:e9:76:9b:
                    bd:55:56:ad:88:9d:f6:4e:f2:09:3a:53:f7:d3:f8:
                    af:80:79:1d:2a:28:28:12:86:e6:8b:31:a7:13:79:
                    36:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B2:B0:E7:A8:DF:5C:37:79:25:43:EA:42:C5:58:B9:C7:52:CA:B7
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:9e:e9:f9:24:12:ba:66:32:f6:c5:be:71:57:1c:65:21:f3:
         8d:46:77:37:5f:d9:a7:71:f0:16:4a:e5:d2:7c:42:4c:db:aa:
         26:8b:aa:b2:ec:a1:72:2d:be:23:f3:e3:da:a4:a7:7d:c4:88:
         ae:ba:49:09:7f:76:da:44:e5:5e:e8:56:8a:de:80:e9:2d:fe:
         e6:68:52:6c:ec:2e:de:82:9a:f0:2d:90:9b:2f:29:27:43:2f:
         be:ca:03:95:9c:90:c3:d6:c9:33:4e:a9:21:12:a0:55:93:6b:
         86:6f:4b:0b:ad:7b:e3:86:7e:0c:5b:fd:60:84:57:ff:3f:33:
         10:c5:97:40:2d:f0:73:a2:80:36:f3:62:a9:80:90:df:2b:cf:
         67:e1:f7:6e:26:54:5a:55:97:36:70:31:56:aa:30:a7:22:b5:
         33:74:c4:16:6f:28:38:cb:04:3e:80:05:34:c6:87:0b:53:44:
         00:99:95:b9:30:02:42:1c:a3:90:b7:6d:9b:65:74:d1:66:c4:
         2d:98:8d:25:57:2f:f1:02:3c:1d:d8:28:24:7a:4d:6d:ef:e0:
         f2:65:d5:91:9f:5e:35:24:f3:cc:c0:ce:89:aa:50:90:6d:ba:
         75:d8:2d:a1:5a:d0:56:ee:6e:46:cf:3a:bf:39:e5:2c:de:a9:
         95:dc:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:07:33 2025 by rpki-client