Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3138392e3136312e302f32342d3234203d3e20323639373034.roa
File:                     34352e3138392e3136312e302f32342d3234203d3e20323639373034.roa (raw, json)
Hash identifier:          uU2Eq/1IPIMiiO5VeJjs2V3u13911usiltVpLiGLz/o=
Subject key identifier:   9E:BB:F0:2D:9E:00:2A:A0:1D:07:FE:1F:CF:39:3B:20:53:06:F8:46
Certificate issuer:       /CN=C2C86C47FC39E808F8CF5C00C62D57D80858C738
Certificate serial:       49F3C98ECC773DE1F73E29D7AAC19905D0EDCB1D
Authority key identifier: C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3138392e3136312e302f32342d3234203d3e20323639373034.roa
Signing time:             Wed 30 Jul 2025 15:40:59 +0000
ROA not before:           Wed 30 Jul 2025 15:35:59 +0000
ROA not after:            Wed 29 Jul 2026 15:40:59 +0000
asID:                     269704
IP address blocks:        45.189.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.crl
                          rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f3:c9:8e:cc:77:3d:e1:f7:3e:29:d7:aa:c1:99:05:d0:ed:cb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C86C47FC39E808F8CF5C00C62D57D80858C738
        Validity
            Not Before: Jul 30 15:35:59 2025 GMT
            Not After : Jul 29 15:40:59 2026 GMT
        Subject: CN=9EBBF02D9E002AA01D07FE1FCF393B205306F846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7a:f3:6b:a1:ea:43:69:d4:c9:09:5b:4b:c0:
                    d9:d2:8f:74:a5:dc:4b:dd:0e:57:91:cf:58:84:86:
                    85:79:08:36:b4:27:c5:af:f8:ec:e4:72:de:bf:b2:
                    8b:8c:5d:06:a2:02:5f:0d:bf:df:76:b3:07:4c:ed:
                    88:35:ed:1e:c2:42:7b:27:bf:0f:13:92:f3:f7:d3:
                    3c:e7:89:8f:0c:b7:22:45:f1:60:d3:ea:f8:45:4d:
                    11:10:03:90:f1:7f:bb:ec:d3:70:51:7a:69:58:32:
                    a9:35:57:05:fa:f4:ad:68:7b:c3:cc:52:b1:52:9c:
                    68:8d:1b:84:d5:17:ec:2a:17:15:0e:96:27:77:70:
                    d6:e4:75:00:9f:5c:d0:05:08:98:c2:78:de:5c:5d:
                    06:06:7b:0a:50:eb:6f:3e:07:55:fc:ed:f9:07:c2:
                    2f:05:e6:b1:76:f8:37:1c:ae:fa:d0:8c:a6:35:ba:
                    95:b8:19:0e:73:5b:ca:f3:2e:83:57:d6:0d:79:a7:
                    28:ca:d3:47:91:19:d1:28:dc:b6:49:6e:75:94:5d:
                    d8:1b:fe:d6:d4:72:fe:28:4d:92:ab:f8:0a:19:81:
                    fd:25:9a:1d:18:85:90:e9:03:52:b0:0e:7c:d7:ad:
                    62:34:0a:dc:66:3f:9a:06:49:4f:12:b2:47:fc:3a:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BB:F0:2D:9E:00:2A:A0:1D:07:FE:1F:CF:39:3B:20:53:06:F8:46
            X509v3 Authority Key Identifier:
                keyid:C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3138392e3136312e302f32342d3234203d3e20323639373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:59:86:f2:24:c9:e3:08:58:82:a6:02:b3:81:0f:33:74:b7:
         78:76:61:c1:d8:77:15:78:b1:46:92:61:db:57:18:01:a4:97:
         17:c5:0c:13:01:cb:c2:9d:8b:68:ac:63:f4:88:77:49:08:cc:
         d8:c1:31:71:f6:68:8e:7a:33:e7:de:2f:22:b3:4a:f0:b0:43:
         b1:7c:20:6f:89:31:27:76:e4:a9:9c:65:64:6b:83:3a:a3:62:
         fd:07:e7:c1:ed:3d:b7:79:f5:e6:ca:20:f5:3a:8f:43:eb:11:
         7d:77:b9:10:92:42:a5:07:98:09:19:b5:8e:ed:62:37:bf:e5:
         4c:8b:8e:66:55:7c:10:d1:c6:1d:c2:8d:ee:01:07:49:c3:7b:
         dc:32:eb:47:3e:a5:f9:27:7f:b9:1d:07:92:57:a9:f4:d0:cb:
         c2:8f:51:c9:ee:44:63:8d:53:60:26:46:90:4f:1e:07:a1:53:
         ee:74:66:b3:46:13:17:af:01:9c:7c:40:d3:36:31:f7:3e:0a:
         0e:51:fe:e8:5c:e2:3c:44:29:35:25:4b:b5:d8:68:25:06:fa:
         6b:77:3b:d3:0d:ee:2a:2d:57:20:56:4a:1c:e8:08:60:7b:1e:
         70:6c:fd:06:64:55:6a:d4:b0:08:13:17:43:3f:ac:42:d0:cf:
         a6:62:bd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:36 2025 by rpki-client