Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
File:                     34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa (raw, json)
Hash identifier:          GGLqXz/euaNygIsaWanKES3oogptKbTI5xpI5DRh5R4=
Subject key identifier:   56:11:9E:3E:9E:71:CE:7A:9D:9C:4A:3B:2C:24:FD:EA:54:B0:62:E9
Certificate issuer:       /CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
Certificate serial:       72200FCC0B8DBF5E28D5FE5D2BD7ADC3EC6D8BC9
Authority key identifier: 99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
Signing time:             Mon 05 May 2025 12:28:09 +0000
ROA not before:           Mon 05 May 2025 12:23:09 +0000
ROA not after:            Mon 04 May 2026 12:28:09 +0000
asID:                     268746
IP address blocks:        45.171.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:20:0f:cc:0b:8d:bf:5e:28:d5:fe:5d:2b:d7:ad:c3:ec:6d:8b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
        Validity
            Not Before: May  5 12:23:09 2025 GMT
            Not After : May  4 12:28:09 2026 GMT
        Subject: CN=56119E3E9E71CE7A9D9C4A3B2C24FDEA54B062E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:26:59:5e:d3:15:7f:41:41:d0:16:c8:a2:
                    c5:7d:b0:44:f3:b6:53:d2:ee:4c:f5:65:f3:27:82:
                    eb:4c:2e:d4:fe:2d:6b:5d:e1:9a:ab:da:5f:d4:17:
                    91:96:19:51:dc:fa:19:86:c8:e9:87:7a:1e:ad:6e:
                    a8:68:d7:a3:56:b4:35:d7:93:53:d9:10:cf:f8:9e:
                    66:03:79:f3:44:eb:4e:58:00:1b:46:1d:bc:f0:36:
                    fc:ce:4c:0c:76:50:6c:90:9c:1c:e5:f8:8b:32:98:
                    43:94:05:cd:5f:d2:d9:29:8d:63:9d:1d:67:52:93:
                    c8:1e:91:f2:9c:41:aa:27:20:39:ce:27:98:89:05:
                    9c:7d:d9:e7:9a:5d:ad:fa:2a:fb:f3:dc:fb:92:ce:
                    3c:2a:82:12:50:b8:f7:c3:ff:40:42:39:38:07:16:
                    5a:8e:50:cb:a7:eb:b8:a4:68:47:ba:4a:a1:d2:a5:
                    0c:83:3c:24:cc:2a:66:18:60:c2:d1:c7:57:2e:bb:
                    fe:93:75:aa:1a:d5:c6:af:65:14:70:4c:cc:5a:6e:
                    81:d0:0d:43:ca:80:f9:dd:db:0a:1e:00:9f:f6:88:
                    0c:25:fc:33:5d:27:a3:81:a1:3c:ca:4b:e3:2c:8f:
                    11:6c:ce:8d:4c:a2:96:76:3b:58:1d:59:46:85:1d:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:11:9E:3E:9E:71:CE:7A:9D:9C:4A:3B:2C:24:FD:EA:54:B0:62:E9
            X509v3 Authority Key Identifier:
                keyid:99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:ec:3e:ec:3d:81:1b:14:f5:20:fe:db:a8:73:cb:e8:8b:af:
         aa:49:f0:63:8a:d6:7d:58:ef:32:e9:cd:d2:ed:7f:4d:4b:c5:
         8f:51:e3:8e:c4:bf:aa:6e:82:9b:f0:cb:65:c8:0b:b3:52:83:
         a2:36:ba:98:89:8b:0e:9f:47:a1:80:37:a2:36:45:d3:8f:88:
         34:35:89:94:af:a0:21:2d:a4:5c:78:43:0f:d3:35:38:61:aa:
         45:a7:78:ca:e7:9c:5d:46:fa:73:e7:fe:75:fa:a9:38:ba:83:
         7d:bd:69:93:27:06:fc:9b:ce:9b:e1:52:ba:37:b2:e4:35:d2:
         44:c0:43:7a:96:d9:01:2e:07:54:4e:ee:35:ae:b0:82:c7:15:
         37:b2:42:42:ae:0a:00:53:47:1b:12:0f:06:bc:32:d9:78:bb:
         4c:c3:b5:21:9b:ec:d0:cb:76:9a:3b:8f:12:d8:37:3d:b3:03:
         db:76:ef:15:67:54:c7:19:fb:2e:5f:11:61:e5:9f:ac:a9:b0:
         67:d9:ac:07:1a:b9:7e:73:fe:d0:55:25:74:db:95:be:7b:35:
         47:12:04:4d:34:3e:89:72:e6:c3:ff:8e:b1:7e:29:ed:2c:a3:
         c5:8a:41:12:18:ec:fa:ae:ee:be:06:01:23:46:a9:c6:c0:0a:
         eb:b9:97:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:30:04 2025 by rpki-client