Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/34352e362e3137322e302f32322d3234203d3e20323636313339.roa
File:                     34352e362e3137322e302f32322d3234203d3e20323636313339.roa (raw, json)
Hash identifier:          qy4MmQJBUyaj5JtvjUzpFkMIJYDRYwFbfe7mjwi2zw4=
Subject key identifier:   53:78:CB:04:E3:87:BE:57:05:6C:7B:3C:FE:92:47:22:97:9C:BA:59
Certificate issuer:       /CN=099E710B733B757902741DC8991B7E28038B167A
Certificate serial:       4106DCEC88F1DE8798CB0061AC7FC7E05B2E910D
Authority key identifier: 09:9E:71:0B:73:3B:75:79:02:74:1D:C8:99:1B:7E:28:03:8B:16:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099E710B733B757902741DC8991B7E28038B167A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/34352e362e3137322e302f32322d3234203d3e20323636313339.roa
Signing time:             Tue 03 Jun 2025 00:03:52 +0000
ROA not before:           Mon 02 Jun 2025 23:58:52 +0000
ROA not after:            Tue 02 Jun 2026 00:03:52 +0000
asID:                     266139
IP address blocks:        45.6.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/099E710B733B757902741DC8991B7E28038B167A.crl
                          rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/099E710B733B757902741DC8991B7E28038B167A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099E710B733B757902741DC8991B7E28038B167A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 22:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:06:dc:ec:88:f1:de:87:98:cb:00:61:ac:7f:c7:e0:5b:2e:91:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099E710B733B757902741DC8991B7E28038B167A
        Validity
            Not Before: Jun  2 23:58:52 2025 GMT
            Not After : Jun  2 00:03:52 2026 GMT
        Subject: CN=5378CB04E387BE57056C7B3CFE924722979CBA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:a4:03:e9:d3:4f:fa:7a:7e:a9:0a:4e:de:
                    4d:a3:e1:81:de:c0:b7:7f:75:5d:f1:50:a4:d1:88:
                    c2:a8:1d:cb:5c:27:be:2b:f1:86:03:d4:0c:3d:13:
                    61:b7:15:16:7e:17:df:7f:c9:16:cd:20:6d:6f:fb:
                    70:10:e9:2c:fc:30:fb:95:3e:e0:80:d9:62:7b:ad:
                    a0:58:63:6f:1b:2c:73:20:4f:e1:b8:bf:15:ca:a8:
                    65:a6:10:54:39:df:9f:89:2a:d6:36:b9:48:fd:18:
                    16:d3:64:7d:6f:ae:b2:11:6d:50:13:8e:54:7a:32:
                    0e:46:5a:73:4d:7c:b9:f7:21:02:6a:04:09:db:d1:
                    b4:b9:d2:6c:60:ad:3b:cf:ad:ee:e7:fa:4e:fa:ff:
                    5d:81:0c:25:14:a6:e6:a1:07:d3:dc:48:5b:32:67:
                    5c:22:cd:ac:1d:a0:31:75:4f:ad:4c:73:25:2f:10:
                    0f:31:16:cf:9d:49:ba:72:dd:92:a9:5b:d9:f9:85:
                    d9:2e:94:2d:90:50:44:68:48:ea:ee:e8:9f:80:be:
                    b8:de:0d:fc:b0:32:f8:8e:ec:b4:3e:63:a6:b8:ed:
                    e4:9e:2d:eb:49:94:30:a4:5f:83:e2:da:11:af:5f:
                    a9:39:49:ef:c2:8a:11:0c:a0:1f:5d:b3:ed:b6:bd:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:78:CB:04:E3:87:BE:57:05:6C:7B:3C:FE:92:47:22:97:9C:BA:59
            X509v3 Authority Key Identifier:
                keyid:09:9E:71:0B:73:3B:75:79:02:74:1D:C8:99:1B:7E:28:03:8B:16:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/099E710B733B757902741DC8991B7E28038B167A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099E710B733B757902741DC8991B7E28038B167A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/34352e362e3137322e302f32322d3234203d3e20323636313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:2d:3e:db:4a:59:1b:3b:bf:07:47:b6:c9:de:4f:6c:5b:
         36:41:25:44:e5:ee:8e:92:3b:fd:68:90:7a:ef:62:0b:a7:ff:
         4c:31:ee:85:fb:59:e8:2b:75:00:94:28:bb:db:25:f0:de:71:
         16:20:61:38:0d:33:8e:04:f2:87:10:4d:d9:e6:b7:03:30:9f:
         2a:69:be:0e:ac:6e:24:ad:9a:91:e8:e6:50:3c:91:65:b4:d5:
         ec:9d:91:30:6b:66:7e:e0:ad:17:44:07:ce:b7:43:00:5b:c1:
         86:6c:e5:46:82:12:cd:e4:a6:95:d2:ec:be:bb:00:60:ec:82:
         b2:b4:9c:0f:d8:07:a7:db:c2:a7:e7:d2:7d:3c:cf:29:28:59:
         ad:45:ad:73:c3:81:bc:60:86:62:64:57:33:7a:85:4e:51:fb:
         31:48:23:91:fc:41:54:89:ab:8c:d7:0c:bc:2b:d5:57:a3:ed:
         bf:96:15:2c:d6:0d:2c:b0:a9:21:75:bc:25:f9:98:36:bd:37:
         63:3e:b5:e9:3f:6b:51:96:57:c7:c3:47:39:28:1a:c6:86:6a:
         be:0e:c9:65:95:55:bb:45:36:c2:ba:c6:fd:34:b1:52:d6:b2:
         f1:52:1f:a7:bc:66:dd:ad:7f:7b:8b:24:0e:16:f4:68:87:1e:
         96:a4:a3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:55:32 2025 by rpki-client