Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa
File:                     34352e3137382e32322e302f32332d3233203d3e20323639303135.roa (raw, json)
Hash identifier:          U84hye//TVmWhcw8rp4tLUflTahYMHuZwnLhXtdT6Hs=
Subject key identifier:   F8:F0:9B:0C:4A:72:88:0D:61:64:B2:E4:27:97:35:5B:38:17:3F:44
Certificate issuer:       /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
Certificate serial:       0B8C67FE2008B4CD9E93EB85BE53283C1E753952
Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa
Signing time:             Mon 09 Jun 2025 18:25:44 +0000
ROA not before:           Mon 09 Jun 2025 18:20:44 +0000
ROA not after:            Mon 08 Jun 2026 18:25:44 +0000
asID:                     269015
IP address blocks:        45.178.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 16:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8c:67:fe:20:08:b4:cd:9e:93:eb:85:be:53:28:3c:1e:75:39:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
        Validity
            Not Before: Jun  9 18:20:44 2025 GMT
            Not After : Jun  8 18:25:44 2026 GMT
        Subject: CN=F8F09B0C4A72880D6164B2E42797355B38173F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:04:4a:df:e1:d1:ff:97:be:19:8f:0a:78:
                    4e:ae:c6:32:0a:77:a8:cd:04:b2:71:b2:46:64:0a:
                    24:cb:ba:2a:46:d8:8e:4a:80:19:aa:64:72:8b:07:
                    40:32:5f:e0:9c:ba:60:57:ba:4d:e2:0c:de:52:df:
                    0a:5c:f9:4d:29:d9:96:d6:f4:72:b5:0b:95:4c:b4:
                    44:d5:50:f0:b4:28:90:6f:70:f6:e4:55:2f:1a:7b:
                    af:11:65:56:6d:29:03:4b:32:d6:4c:b8:a9:bb:e3:
                    88:f2:79:5e:f7:3c:e8:ef:80:0a:f3:25:9d:88:b7:
                    33:ad:be:08:e0:05:9b:ed:fb:8b:f6:73:5b:d8:03:
                    41:c4:55:f2:fd:ac:8a:4f:18:cb:91:81:81:18:a4:
                    e3:3e:b7:fb:c7:2a:e5:b6:f0:e3:cd:a3:34:79:22:
                    01:5f:2e:ed:ea:80:ca:47:28:bd:d9:96:16:48:59:
                    2a:ec:67:87:87:fe:29:b8:10:7b:59:f5:42:16:07:
                    0e:ca:a3:65:f9:7f:b1:4c:99:44:74:7a:c5:7b:ce:
                    16:f3:d2:9f:17:b5:b9:5c:a8:4d:10:5b:36:f6:f9:
                    53:9d:41:1a:8c:55:71:06:67:3f:08:6c:43:df:fa:
                    32:36:f1:05:9b:c5:29:37:51:e8:a2:57:49:b2:a0:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F0:9B:0C:4A:72:88:0D:61:64:B2:E4:27:97:35:5B:38:17:3F:44
            X509v3 Authority Key Identifier:
                keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:0d:e4:69:fc:71:4c:dc:9c:de:3a:9b:c3:3b:83:9b:52:e7:
         f3:47:79:a5:bf:ca:a7:1e:97:7b:81:79:a9:7d:68:ab:93:3d:
         c2:31:47:f5:2c:aa:2e:1d:56:3d:b0:a0:b3:d1:f3:22:2b:0e:
         96:ba:80:53:b2:f0:da:d8:a6:e4:b2:0b:a4:57:85:f1:29:8e:
         e3:23:a4:b9:39:ca:35:08:01:6b:58:e1:2a:b0:03:0c:cb:60:
         1e:b4:1f:5c:69:91:4e:02:ba:8e:80:03:3d:a5:b0:5d:71:a7:
         56:25:89:51:a1:f9:96:f7:00:65:8b:52:31:f3:23:62:c0:01:
         ae:37:d9:49:71:5e:40:ac:42:f0:71:ae:b9:97:a2:3a:f4:83:
         b7:fa:8b:fc:74:05:67:12:7f:7c:26:5f:54:9a:2e:89:15:12:
         14:e9:af:d0:d3:9e:bc:cd:22:b5:90:93:08:f0:07:7c:54:cd:
         63:e5:54:9f:d7:c5:b8:19:99:93:34:7c:c2:38:4a:cb:1b:ab:
         e5:fa:3b:14:bc:dc:b3:a9:1e:48:e0:68:10:50:1c:20:32:4a:
         c9:52:a0:9f:04:29:08:0a:d0:40:3a:da:44:2d:0d:5d:26:5c:
         0b:33:8d:aa:eb:bc:f2:c9:06:5e:76:ce:bc:9e:52:92:a8:02:
         5d:30:f3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:23:58 2025 by rpki-client