Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39392e302f32342d3234203d3e20323638343633.roa
File:                     34352e3136312e39392e302f32342d3234203d3e20323638343633.roa (raw, json)
Hash identifier:          ElUjPFLXu2Rw5NbF8+4bO78suUYoqO35TR0FlqOUh9g=
Subject key identifier:   B7:73:E1:65:8C:24:37:48:C7:21:46:E1:0A:04:84:B1:71:0B:EA:48
Certificate issuer:       /CN=4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C
Certificate serial:       60BFA3ECE0E84168186F6281AE5BA093B5FFD5A8
Authority key identifier: 4A:B7:DF:BD:96:BC:DC:3F:59:F2:BB:26:0A:F8:4F:EF:8D:41:2C:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39392e302f32342d3234203d3e20323638343633.roa
Signing time:             Fri 02 May 2025 18:22:14 +0000
ROA not before:           Fri 02 May 2025 18:17:14 +0000
ROA not after:            Fri 01 May 2026 18:22:14 +0000
asID:                     268463
IP address blocks:        45.161.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 20:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bf:a3:ec:e0:e8:41:68:18:6f:62:81:ae:5b:a0:93:b5:ff:d5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C
        Validity
            Not Before: May  2 18:17:14 2025 GMT
            Not After : May  1 18:22:14 2026 GMT
        Subject: CN=B773E1658C243748C72146E10A0484B1710BEA48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:da:99:43:02:a6:ec:54:49:d2:1f:a7:a0:
                    99:e3:98:20:24:ca:2a:ae:50:36:a8:05:93:29:0f:
                    00:f0:0b:27:b5:a2:cb:5b:10:74:15:70:57:5c:7c:
                    c0:41:96:ab:8e:0e:a0:61:91:5a:26:0d:d8:ac:81:
                    5a:ae:54:a1:51:3f:c0:9c:fa:33:83:99:49:1c:91:
                    0a:e0:74:3f:c0:c0:19:0d:58:1b:a4:57:51:93:10:
                    6e:bf:50:4f:9a:95:27:ea:6e:fa:1d:cd:ed:9a:05:
                    e3:bb:3a:fa:00:f7:e2:c0:0b:9e:54:d5:22:21:3d:
                    47:e1:8d:b6:95:ee:c2:56:aa:e5:a4:cf:2c:70:35:
                    a5:18:59:95:5c:d0:1d:44:e6:77:28:08:0b:29:1b:
                    98:0d:8e:0f:9b:2e:94:4d:93:28:af:9b:b0:29:28:
                    9c:39:e1:d8:1e:c0:63:5f:07:3a:ba:c7:01:82:95:
                    69:ca:b2:9a:6e:d3:40:b9:e4:25:09:97:22:2e:ec:
                    b7:49:c8:b4:49:af:cb:b6:0f:6a:9d:15:b4:d2:a5:
                    11:05:ba:8c:56:fa:04:9d:17:12:63:0d:fe:ca:55:
                    93:a0:41:87:e1:7c:2b:26:19:04:ae:ba:ed:09:9e:
                    3b:01:0c:fa:63:e6:52:c8:6e:40:08:7a:5c:33:5b:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:73:E1:65:8C:24:37:48:C7:21:46:E1:0A:04:84:B1:71:0B:EA:48
            X509v3 Authority Key Identifier:
                keyid:4A:B7:DF:BD:96:BC:DC:3F:59:F2:BB:26:0A:F8:4F:EF:8D:41:2C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39392e302f32342d3234203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d5:52:ba:36:45:66:10:d3:24:e0:fb:2d:45:1e:4c:2b:6d:
         e1:da:82:8b:6c:a5:cc:00:31:f3:54:02:84:d0:46:c7:75:55:
         7a:79:37:3a:23:fd:0f:6a:86:e8:5f:4f:06:4a:fb:11:05:23:
         d1:17:46:fd:a6:d9:78:97:59:89:45:55:c7:e6:6f:8b:2f:fe:
         12:b9:0d:3b:d2:47:3a:57:2d:e1:07:34:74:25:81:79:83:f1:
         88:9f:23:61:2e:54:f6:9e:8e:e4:ec:84:bb:bd:bc:79:d6:1d:
         48:3b:d2:43:38:e1:b4:bb:5b:5d:a9:ee:a7:83:d0:35:ef:9c:
         7d:ce:ce:37:37:8b:5d:af:c9:a3:48:e2:43:4d:76:68:97:13:
         a0:f3:45:45:5a:9b:9d:9a:6d:10:88:41:c2:33:72:31:e7:66:
         bb:df:54:04:cc:cd:c3:31:3f:b7:80:93:c0:68:45:02:2f:85:
         d8:f9:46:13:49:00:52:eb:b1:aa:01:22:14:9c:5e:72:1f:a7:
         a5:ba:dd:ca:23:0b:c7:cd:38:23:b0:47:03:75:a4:d6:7d:10:
         0d:85:be:c9:8f:c1:57:ee:69:22:a9:6b:2e:48:c3:fc:fc:c1:
         85:d3:c6:d9:34:3e:97:88:cf:33:50:fe:59:15:b5:67:a1:f8:
         e6:a8:33:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:14:12 2025 by rpki-client