Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38342e302f32342d3234203d3e20323633323932.roa
File:                     34352e3136362e38342e302f32342d3234203d3e20323633323932.roa (raw, json)
Hash identifier:          5xVzLL1er3wuE582HJVOesURJn66C8cZCOWyw4GF3iM=
Subject key identifier:   35:DE:7A:F1:56:5D:1F:14:8A:D4:A9:2B:08:71:74:C6:75:1B:63:76
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       12549262F72293F33DB64E2F57D1B3A10359771C
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38342e302f32342d3234203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:13 +0000
ROA not before:           Mon 16 Jun 2025 19:54:13 +0000
ROA not after:            Mon 15 Jun 2026 19:59:13 +0000
asID:                     263292
IP address blocks:        45.166.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 01:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:54:92:62:f7:22:93:f3:3d:b6:4e:2f:57:d1:b3:a1:03:59:77:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:13 2025 GMT
            Not After : Jun 15 19:59:13 2026 GMT
        Subject: CN=35DE7AF1565D1F148AD4A92B087174C6751B6376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:d9:c9:da:5f:18:81:4d:15:61:27:5b:00:
                    17:01:05:0a:aa:7a:59:33:f5:06:1a:79:fd:cd:d4:
                    e7:e3:d6:7a:99:63:ee:22:fc:14:2f:5a:07:cb:1a:
                    ad:24:b7:80:8d:be:38:fa:5d:f1:d8:8a:ea:31:47:
                    9b:43:f4:6d:cf:6c:5a:c2:3a:2e:79:25:c5:9c:db:
                    09:38:e4:9f:3b:39:1a:ba:16:2f:15:84:45:be:56:
                    0d:20:55:69:09:08:61:70:e4:6d:fc:81:76:6b:77:
                    d0:7c:a3:a0:b8:79:ce:b2:df:9d:04:8a:c9:df:76:
                    52:1b:13:eb:7a:3a:58:a5:1d:3c:51:ea:53:8f:d5:
                    28:74:e9:eb:2a:58:dd:dd:d6:bb:2d:f8:92:7b:a4:
                    a8:75:87:01:a8:0c:55:f9:cc:1a:8b:ea:c2:f9:40:
                    ff:34:fc:e4:5c:f8:b5:da:3b:2e:9f:77:0b:8c:ab:
                    cc:95:ca:6c:98:e8:92:54:fe:46:77:7f:bf:78:45:
                    29:aa:15:63:92:4c:e1:9c:6b:2b:49:c0:ec:21:33:
                    22:83:81:82:92:14:47:98:5a:49:d0:f9:fc:ed:09:
                    f5:7c:30:60:94:c6:20:a2:c1:51:64:9d:33:0b:06:
                    0f:ab:e5:e7:9f:ea:df:3a:96:39:dc:6c:be:5f:df:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DE:7A:F1:56:5D:1F:14:8A:D4:A9:2B:08:71:74:C6:75:1B:63:76
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38342e302f32342d3234203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:19:6b:1f:b5:38:9a:59:19:24:63:0a:15:e3:97:75:fb:17:
         05:c1:c4:c2:a1:95:0d:be:36:2c:ec:e6:34:52:92:d1:31:27:
         0a:01:7f:b3:82:24:77:26:c5:81:31:39:e2:82:73:c5:b6:66:
         16:8c:56:35:f6:0a:2f:cb:0d:a4:6c:4d:94:7a:19:3b:a8:30:
         2e:d5:b1:c7:43:69:a6:07:0c:98:cc:f3:a3:01:f9:c9:7e:bb:
         fd:d4:a3:44:b4:dc:3a:97:96:00:42:6e:58:8b:8c:64:1d:9a:
         73:6a:18:0c:90:f3:44:cb:7c:31:1a:d5:17:be:9e:39:36:26:
         95:29:ee:58:82:3d:61:12:58:88:79:e0:fb:24:75:4b:df:43:
         5b:cc:84:50:8a:0d:96:72:11:9a:db:1d:ee:c7:4b:ff:15:cf:
         6c:f1:52:0c:e3:62:2a:ff:61:2c:30:24:ed:e4:ec:b2:0d:2a:
         42:33:5a:8c:b1:4a:8d:62:e3:78:e6:12:00:2a:c7:11:75:6b:
         3c:9b:fe:83:03:c4:37:29:b7:0a:de:73:4e:b3:d7:af:26:69:
         2e:c2:40:57:ec:e4:c1:c7:30:fd:7b:a0:7f:ef:5e:45:93:ea:
         ba:29:bf:c6:1f:b2:5c:4d:5d:b2:85:e6:46:6e:c0:2f:d6:00:
         f6:64:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:13:52 2025 by rpki-client