Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa
File:                     34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier:          sSdszNsj5LdAuJQono7XvT8fX+CRhBSKzEr1izmTPWo=
Subject key identifier:   8C:5D:00:0D:16:7B:BC:35:94:8D:0B:3D:FB:19:E3:B6:6B:02:50:5B
Certificate issuer:       /CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
Certificate serial:       5CF098D876E4042DAA0AD44524A642B4BED947B4
Authority key identifier: 99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa
Signing time:             Mon 05 May 2025 12:28:08 +0000
ROA not before:           Mon 05 May 2025 12:23:08 +0000
ROA not after:            Mon 04 May 2026 12:28:08 +0000
asID:                     268746
IP address blocks:        45.171.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 10:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f0:98:d8:76:e4:04:2d:aa:0a:d4:45:24:a6:42:b4:be:d9:47:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
        Validity
            Not Before: May  5 12:23:08 2025 GMT
            Not After : May  4 12:28:08 2026 GMT
        Subject: CN=8C5D000D167BBC35948D0B3DFB19E3B66B02505B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:db:0a:38:8e:51:39:47:34:02:94:f6:1f:0c:
                    05:46:e6:ce:9a:b9:4b:c2:22:ad:52:46:1b:fc:fb:
                    67:0b:4a:93:58:cd:e6:53:e4:e4:6f:d6:c0:e0:0f:
                    e7:32:e0:31:43:2a:9c:ae:41:35:45:d6:ef:86:11:
                    00:f2:43:da:2e:f7:a3:97:67:dc:01:02:4c:40:e4:
                    9a:e9:73:4f:a7:03:a2:bd:f6:1b:3b:cd:18:fd:39:
                    d8:6c:06:9f:7f:fd:67:5d:e4:34:f3:f1:0b:9d:f7:
                    fe:36:cf:a4:d4:70:06:30:9d:17:00:eb:15:f3:57:
                    60:1b:d0:36:ee:96:44:99:1c:4e:33:ea:2b:91:a3:
                    2d:45:bb:f6:d0:df:21:2e:5d:45:43:ad:9c:de:8d:
                    5b:a7:3c:26:cc:d2:33:8f:ed:96:79:07:fe:19:d3:
                    15:63:9b:0b:cd:ab:ba:86:0e:d7:97:02:06:37:4c:
                    1f:85:02:10:b6:bf:29:97:56:5c:a5:92:65:1f:df:
                    76:6e:ac:2a:65:91:40:bf:96:ad:b6:3a:59:31:7d:
                    12:66:3d:5c:ff:42:2d:59:5c:4d:74:9e:68:4f:59:
                    1c:93:23:6d:fd:f2:e0:d1:b5:ab:e1:25:06:f2:16:
                    98:0e:5d:4d:2e:f9:2c:67:25:76:9e:bc:b3:e7:46:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5D:00:0D:16:7B:BC:35:94:8D:0B:3D:FB:19:E3:B6:6B:02:50:5B
            X509v3 Authority Key Identifier:
                keyid:99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:34:e5:d2:e0:24:24:94:03:73:b0:2d:15:b1:f9:12:ba:09:
         b2:ea:e6:37:5c:c3:d9:a4:25:7a:dc:21:48:a6:59:92:f1:c9:
         a1:83:f6:69:cc:9b:5f:0d:cc:6a:07:10:1d:74:e5:eb:b1:88:
         8e:ad:1f:b1:44:13:4e:b6:19:db:d8:04:9f:7f:76:cb:59:46:
         82:0a:e3:d3:47:c9:19:50:c4:98:42:11:86:c0:fd:3b:cc:3b:
         e8:d3:90:39:ee:ac:da:6b:8b:5b:10:36:fa:5b:58:62:6c:73:
         11:c8:05:53:24:72:f4:f8:d7:3e:aa:97:db:c4:51:ac:6b:ab:
         cb:63:8e:dd:d6:6b:af:ab:4e:f8:28:8d:c1:31:f9:7e:77:ac:
         b6:a6:4b:df:3b:9e:42:d6:ce:a3:59:93:64:66:a7:2f:ca:23:
         b7:c7:6a:c6:75:00:8c:c9:38:a4:89:c2:72:c2:f1:f0:fd:90:
         37:4e:6c:e8:f7:30:b8:68:89:16:28:d9:d4:6b:6a:ea:42:29:
         6d:f6:38:b2:04:5b:5f:4d:0c:6a:d9:c5:90:ae:f4:f4:22:c5:
         83:f9:62:2b:35:72:36:f3:37:88:b7:aa:9f:e4:6b:92:bc:95:
         af:45:be:78:39:b8:01:11:3e:42:3a:bb:8a:08:05:7e:b6:7d:
         ee:24:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:52:15 2025 by rpki-client