Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234362e302f32342d3234203d3e20323638343532.roa
File:                     34352e3136302e3234362e302f32342d3234203d3e20323638343532.roa (raw, json)
Hash identifier:          GlLGPZ6hufSBquPkt/mRs0jxgDabJwabomTu0QzL8pY=
Subject key identifier:   01:2B:AE:2C:E9:ED:A8:4D:DD:91:85:5B:C1:C5:57:29:8F:5F:25:88
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       41573E991BAFFB112A66B3FFEF9F1B4CCB5FCCE5
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234362e302f32342d3234203d3e20323638343532.roa
Signing time:             Mon 02 Jun 2025 18:00:11 +0000
ROA not before:           Mon 02 Jun 2025 17:55:11 +0000
ROA not after:            Mon 01 Jun 2026 18:00:11 +0000
asID:                     268452
IP address blocks:        45.160.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 04:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:57:3e:99:1b:af:fb:11:2a:66:b3:ff:ef:9f:1b:4c:cb:5f:cc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Jun  2 17:55:11 2025 GMT
            Not After : Jun  1 18:00:11 2026 GMT
        Subject: CN=012BAE2CE9EDA84DDD91855BC1C557298F5F2588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:b4:80:f8:07:47:0d:ad:5d:58:23:ea:0d:
                    5a:83:96:32:ac:fd:91:10:ee:7b:44:bc:fb:92:f1:
                    e1:73:b6:3d:fb:cc:5b:4f:29:a3:ca:89:ca:4c:86:
                    12:ec:14:b7:4b:f5:c2:5e:b2:6e:a3:d4:83:1b:7c:
                    d3:4b:6b:01:96:b7:50:07:66:cf:cd:16:f6:69:bf:
                    95:ed:3a:76:0d:85:80:5f:9d:95:96:99:f4:19:9d:
                    f4:6f:bd:26:e2:ff:e5:89:83:f0:9d:ff:67:ca:c7:
                    d8:dc:e1:8b:35:43:ec:50:12:a9:c8:76:0b:64:71:
                    09:90:00:48:e4:34:83:85:bc:d1:83:df:b3:c9:c0:
                    2e:0c:1d:73:2d:71:f5:c3:6c:f6:62:6f:2f:61:45:
                    4b:32:85:23:39:5e:10:91:16:94:c6:7d:2a:f5:d5:
                    36:da:7f:4b:d1:6c:aa:15:43:d3:40:c2:99:f5:eb:
                    cf:b8:f6:db:c3:a2:81:20:86:b6:ff:10:bf:b6:54:
                    83:e4:9f:34:75:8b:4b:2a:71:90:59:e6:bf:07:bf:
                    b3:1c:72:a4:34:28:35:39:ee:24:7d:fe:ae:17:c7:
                    62:8a:1c:38:1a:e0:b1:fe:6d:0c:5d:2d:f7:22:9b:
                    e0:4f:c2:b0:b4:05:7a:14:ab:95:92:7f:5e:b5:38:
                    8e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2B:AE:2C:E9:ED:A8:4D:DD:91:85:5B:C1:C5:57:29:8F:5F:25:88
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234362e302f32342d3234203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:a8:94:f0:45:d4:d7:44:67:8d:39:03:37:6e:94:61:7e:1b:
         87:a2:67:1a:8c:60:f0:2f:9a:91:f1:b8:0c:13:60:05:59:17:
         90:0e:61:b8:ab:94:0e:78:e5:63:05:01:bd:20:47:bc:91:71:
         70:a7:c5:a1:76:31:06:50:0e:c6:6a:24:a8:49:57:b4:bd:19:
         cf:7b:fb:f7:27:12:f6:77:2c:6a:eb:d3:21:1a:6a:5a:04:8b:
         bc:6b:7f:c4:d8:f5:e1:d0:56:ed:b6:ea:6c:54:f8:1b:66:a0:
         38:48:90:5e:5f:20:82:a2:7b:3e:1e:f5:c4:ec:e7:ee:c9:41:
         a9:59:f6:d4:2b:d7:3e:a9:ec:2e:3f:76:8b:a8:22:83:79:5b:
         72:a0:09:2a:a9:52:f9:fd:8e:6e:71:e3:81:67:8e:e6:79:ac:
         73:b3:84:c4:63:44:d6:70:93:f5:bc:3e:0e:ef:61:fe:e6:c6:
         bf:25:43:75:57:e1:37:34:aa:a0:05:18:dd:84:ff:60:e7:b2:
         bf:c4:98:20:57:56:37:81:99:09:4c:f4:a1:90:ba:c0:f3:0c:
         6f:b3:ad:ee:7e:b3:de:6f:89:6a:05:95:e9:4d:2d:c3:8b:c5:
         ac:45:66:97:c6:29:79:60:a3:18:e6:d2:00:78:fc:44:78:a4:
         a4:6b:fa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 10:58:45 2025 by rpki-client