Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/34352e3136322e3130342e302f32342d3234203d3e20323638353136.roa
File:                     34352e3136322e3130342e302f32342d3234203d3e20323638353136.roa (raw, json)
Hash identifier:          OIrNO6s3U3b1RCnKRGr6axvBWcFikKUw7nr2n5zuUaY=
Subject key identifier:   18:D7:7B:8F:30:EB:F9:97:B8:A1:44:10:D9:6E:CE:56:68:02:64:B5
Certificate issuer:       /CN=BC779DF721B6D7336A615134C72893A4896EDE08
Certificate serial:       500106DD8DC1D06CB410BD9098108F976E29D97F
Authority key identifier: BC:77:9D:F7:21:B6:D7:33:6A:61:51:34:C7:28:93:A4:89:6E:DE:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/34352e3136322e3130342e302f32342d3234203d3e20323638353136.roa
Signing time:             Fri 06 Jun 2025 16:58:50 +0000
ROA not before:           Fri 06 Jun 2025 16:53:50 +0000
ROA not after:            Fri 05 Jun 2026 16:58:50 +0000
asID:                     268516
IP address blocks:        45.162.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.crl
                          rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 06:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:01:06:dd:8d:c1:d0:6c:b4:10:bd:90:98:10:8f:97:6e:29:d9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC779DF721B6D7336A615134C72893A4896EDE08
        Validity
            Not Before: Jun  6 16:53:50 2025 GMT
            Not After : Jun  5 16:58:50 2026 GMT
        Subject: CN=18D77B8F30EBF997B8A14410D96ECE56680264B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:8a:53:4b:5c:db:44:4c:bb:c9:28:c5:1e:
                    23:76:85:1e:e3:1b:6c:9b:b6:17:e9:d5:f8:ac:ac:
                    f5:f9:39:7a:71:9e:34:64:5f:36:63:cf:39:43:d9:
                    f5:c7:a2:69:1b:ba:ac:65:d2:e1:cb:3b:09:71:e4:
                    68:79:de:d8:89:a2:d4:53:49:af:94:ac:85:3c:16:
                    fb:ba:92:97:58:9e:ed:a0:09:ea:24:1a:7f:66:7b:
                    ff:67:1a:a6:bb:ca:59:ec:46:87:ab:c8:84:49:fb:
                    b0:c5:9a:a2:7e:ae:96:e1:e5:29:6c:70:b9:6b:bd:
                    82:13:53:f2:30:ab:34:a8:55:8d:b4:21:13:61:62:
                    2a:22:32:a3:cb:f9:c8:4f:ec:6a:74:19:af:eb:ae:
                    26:9c:c1:b6:4b:f2:e6:b6:af:b4:70:eb:ee:14:36:
                    f9:fc:12:71:7b:38:5a:0f:7c:3f:63:bf:d2:37:d4:
                    cc:72:fa:42:ce:cc:89:3e:26:2c:cb:fb:a2:4c:ff:
                    6f:c8:cf:40:fd:72:90:94:ad:f9:26:6f:37:fe:8d:
                    d2:fa:e6:c2:e1:8c:64:1d:fb:fe:c2:53:81:c5:70:
                    a2:ea:dc:c3:7e:7a:56:1f:1e:2a:d6:05:77:13:32:
                    b6:0a:b4:cc:dc:26:2f:dd:d5:3c:61:dc:59:98:40:
                    2b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D7:7B:8F:30:EB:F9:97:B8:A1:44:10:D9:6E:CE:56:68:02:64:B5
            X509v3 Authority Key Identifier:
                keyid:BC:77:9D:F7:21:B6:D7:33:6A:61:51:34:C7:28:93:A4:89:6E:DE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/34352e3136322e3130342e302f32342d3234203d3e20323638353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:b2:5c:3e:2d:15:83:9f:b1:7b:f7:d4:8f:00:5f:c8:12:1c:
         b2:64:8a:8e:aa:6c:82:5b:4c:9f:c5:2a:61:2f:74:0f:ea:72:
         02:70:8a:ce:6d:fd:47:e9:52:b2:8b:d9:51:06:fa:24:00:83:
         cf:1f:ca:24:c7:43:63:0c:f3:f3:24:76:a1:3b:97:c9:52:2e:
         e1:bb:18:a3:31:c7:2c:db:16:05:71:bc:96:8c:68:76:ba:df:
         4e:eb:7a:d3:c0:c8:4c:0f:8e:09:fa:90:94:21:ca:40:0f:e1:
         79:18:39:6e:80:29:a4:93:8c:b0:42:a2:f8:11:a5:81:6b:32:
         d2:0b:9f:c1:e9:2c:a6:fb:a3:cd:d6:83:77:9c:56:d6:a9:9c:
         f7:a4:27:50:65:a9:ba:e6:89:b2:8c:88:58:f9:b3:be:55:3a:
         9d:81:f9:1d:ff:ed:16:66:75:23:72:bf:a2:89:67:81:f9:0b:
         f8:a6:32:71:f4:2b:17:39:9d:14:93:d5:91:3c:40:df:2f:a3:
         5c:69:c6:a7:75:09:76:75:0a:dd:b7:09:37:72:41:be:7b:16:
         44:43:aa:9e:f8:3f:b6:f8:e6:9b:08:27:10:b2:52:2b:5c:a4:
         dd:49:74:ea:a6:62:e2:50:08:12:56:d6:81:ef:75:a0:19:97:
         64:53:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:05:18 2025 by rpki-client