Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa
File:                     34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier:          eoGQ0w1a3MXM7UJ/txTTdZg9JF4vSTHGXYAVvW3dVVI=
Subject key identifier:   6D:50:8D:CF:2A:C5:BD:76:B5:18:87:1D:88:9F:5B:1A:CE:C5:8A:57
Certificate issuer:       /CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
Certificate serial:       5001BE8D613E2D17124866A2502749F3E9D7302A
Authority key identifier: 99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa
Signing time:             Mon 05 May 2025 12:28:09 +0000
ROA not before:           Mon 05 May 2025 12:23:09 +0000
ROA not after:            Mon 04 May 2026 12:28:09 +0000
asID:                     268746
IP address blocks:        45.171.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 10:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:01:be:8d:61:3e:2d:17:12:48:66:a2:50:27:49:f3:e9:d7:30:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
        Validity
            Not Before: May  5 12:23:09 2025 GMT
            Not After : May  4 12:28:09 2026 GMT
        Subject: CN=6D508DCF2AC5BD76B518871D889F5B1ACEC58A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:26:92:ef:7a:af:57:e9:49:51:12:24:f9:73:
                    ff:e6:10:53:39:60:41:f9:e5:d3:24:8e:69:d8:fc:
                    a1:28:4f:04:a4:44:2b:aa:01:9d:c0:4e:9a:e7:74:
                    32:62:98:74:d3:11:ac:db:67:12:4a:f9:d9:88:87:
                    2e:a8:6b:23:5b:54:25:98:a4:1c:4a:bf:63:80:f5:
                    2a:4a:f4:7b:86:9d:cd:b3:8e:12:4a:96:22:63:5d:
                    15:f7:a3:4e:87:54:02:6e:53:47:b9:aa:92:f1:31:
                    0f:d2:05:85:ab:62:b1:70:7e:3b:2b:a2:28:d4:4d:
                    87:57:21:ac:b4:7e:48:a1:05:90:c8:03:da:67:78:
                    74:fd:d2:89:40:d2:8e:a3:ea:c7:20:cd:1a:94:42:
                    25:c6:99:30:85:37:a0:ed:3e:c9:30:b8:de:39:dd:
                    43:84:17:39:e7:b5:eb:ed:7c:56:a0:6c:5e:0e:1e:
                    2b:e1:f9:35:62:c5:59:2a:04:a4:fb:c9:bc:4a:5f:
                    2b:c4:3c:88:fc:81:c6:34:6e:d9:09:5b:23:7c:05:
                    bb:00:ef:e5:17:a6:fc:46:9d:fa:c9:a3:1d:9c:ba:
                    94:7f:0e:68:ef:44:ae:20:e9:e6:46:7e:90:fa:d8:
                    b6:23:50:33:81:eb:e5:11:ec:b1:7f:08:aa:57:90:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:50:8D:CF:2A:C5:BD:76:B5:18:87:1D:88:9F:5B:1A:CE:C5:8A:57
            X509v3 Authority Key Identifier:
                keyid:99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:58:8e:69:31:ff:c9:55:db:45:9e:fd:a2:a6:3c:ea:61:e6:
         5b:2a:45:21:df:de:05:aa:ed:1b:90:69:46:e0:02:d4:5c:fd:
         90:a2:c9:67:cf:15:d2:e9:2a:42:0a:2e:37:42:c1:d9:30:3e:
         3e:18:2c:09:42:38:cd:4d:d5:1a:a3:8d:f3:54:76:8b:5c:5e:
         26:11:eb:62:b2:ed:83:94:fe:0e:33:36:42:d8:c5:b0:b0:84:
         99:72:2f:fa:08:e6:88:8f:9d:0c:08:12:8e:fd:4d:3d:d0:ca:
         0f:7d:c8:f8:2a:d4:be:d1:ee:7e:f2:7a:9f:66:f7:9b:95:4e:
         e4:2f:13:52:f4:bc:d0:68:3b:4e:fd:83:2a:0b:ae:b4:1e:80:
         8b:63:64:8e:d4:54:a4:39:e7:d6:93:39:7c:61:9e:70:82:13:
         bc:2b:51:07:bf:7a:52:32:f2:1e:17:44:b4:1f:44:fa:aa:76:
         0d:46:c9:8e:83:13:06:38:e0:7e:f1:de:ee:32:76:ad:f5:3e:
         c0:4c:e9:3c:66:a6:de:83:ab:60:04:b0:f8:1c:48:4d:72:aa:
         e0:86:4c:56:2b:65:8b:50:d2:5f:cd:9c:34:86:96:d4:0a:a5:
         c6:82:d3:b8:99:0a:66:f2:c7:87:47:ea:41:12:f8:85:b8:e0:
         42:5d:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:22:52 2025 by rpki-client