Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/34352e3138302e3136302e302f32322d3234203d3e20323632323835.roa
File:                     34352e3138302e3136302e302f32322d3234203d3e20323632323835.roa (raw, json)
Hash identifier:          hI2lUzJhGfFKpzkDEF0hrz8EhV4snCWydLWxiQr4mXg=
Subject key identifier:   75:EE:10:47:7E:96:44:B8:EA:92:EA:27:0B:2A:71:EA:DF:06:CF:91
Certificate issuer:       /CN=E52DC6D79EBB8997F0D46E5D907493E17D8242B2
Certificate serial:       4D10E3E8E11332248354BBE15A2EF099044A50D8
Authority key identifier: E5:2D:C6:D7:9E:BB:89:97:F0:D4:6E:5D:90:74:93:E1:7D:82:42:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/34352e3138302e3136302e302f32322d3234203d3e20323632323835.roa
Signing time:             Thu 10 Jul 2025 20:07:08 +0000
ROA not before:           Thu 10 Jul 2025 20:02:08 +0000
ROA not after:            Thu 09 Jul 2026 20:07:08 +0000
asID:                     262285
IP address blocks:        45.180.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.crl
                          rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 21:57:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:10:e3:e8:e1:13:32:24:83:54:bb:e1:5a:2e:f0:99:04:4a:50:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E52DC6D79EBB8997F0D46E5D907493E17D8242B2
        Validity
            Not Before: Jul 10 20:02:08 2025 GMT
            Not After : Jul  9 20:07:08 2026 GMT
        Subject: CN=75EE10477E9644B8EA92EA270B2A71EADF06CF91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:3d:7a:fa:65:2c:eb:18:d5:7b:38:a8:97:
                    3f:b9:0d:6e:c7:2a:7b:5f:a9:08:aa:bb:b1:90:69:
                    62:d4:7b:05:35:26:9e:53:a6:d8:93:5e:af:bd:8a:
                    c7:11:c3:1b:05:0c:8a:9f:f9:26:47:8c:56:87:75:
                    03:31:5b:54:5e:ee:0d:c0:db:8f:9f:46:f7:cc:dc:
                    2e:3f:b3:c1:3e:ea:5e:13:a2:2b:b4:7a:5c:67:f6:
                    05:ea:6f:05:44:d8:4c:09:18:c1:3c:b6:83:d0:24:
                    94:4b:2b:d8:f5:3a:b2:88:5d:f9:e4:fe:14:17:af:
                    ef:c6:b7:a5:33:56:d7:e9:c0:fe:2f:d1:b7:da:e4:
                    e4:86:0c:d6:c4:05:e7:79:7c:d8:ff:c9:c9:8d:fe:
                    2c:da:65:85:37:3a:8e:63:67:24:df:3f:76:0d:c9:
                    8d:96:4c:7e:c8:fb:0c:6d:23:fe:dc:a2:8e:36:b8:
                    c8:c7:47:91:bb:4a:9e:8e:25:98:23:86:c9:d1:d8:
                    dd:20:a0:29:e0:0f:59:f2:dc:b1:55:42:e7:ef:35:
                    fc:3a:9d:c3:c4:3e:c1:8b:07:c8:80:0d:f9:da:01:
                    b9:8b:19:08:03:7c:22:e3:81:11:d2:a0:02:7a:15:
                    3b:ad:40:fa:f9:89:e0:76:cc:63:99:d1:e4:70:8c:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EE:10:47:7E:96:44:B8:EA:92:EA:27:0B:2A:71:EA:DF:06:CF:91
            X509v3 Authority Key Identifier:
                keyid:E5:2D:C6:D7:9E:BB:89:97:F0:D4:6E:5D:90:74:93:E1:7D:82:42:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/34352e3138302e3136302e302f32322d3234203d3e20323632323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:bc:70:7f:d1:a9:44:16:6b:a3:15:f0:31:bb:38:bd:1b:4b:
         0c:b2:81:4d:7a:07:7e:62:a3:71:1b:e8:1e:8f:b8:33:b7:50:
         ff:86:79:c2:2d:fe:cf:73:89:e8:b8:4b:eb:88:90:53:5f:86:
         a4:41:6c:b0:12:75:f8:a3:7c:bc:5c:11:88:8c:1a:a7:ae:c4:
         61:a0:ff:4e:ec:d1:dd:41:78:fc:29:00:82:75:96:51:9f:b8:
         d8:f2:dd:82:2d:c6:60:29:8f:1d:b5:27:33:40:51:9f:d5:f8:
         e0:12:ca:81:a0:e7:3d:ec:28:e2:72:bb:e7:f1:43:de:20:4a:
         15:59:55:7e:1c:3d:85:dc:ba:cb:04:23:68:cd:16:4e:6f:d3:
         8e:56:d8:fa:fe:9e:36:78:e9:81:a7:78:e0:00:da:9b:75:f3:
         a1:15:86:2d:1e:68:71:3d:b1:ac:3a:3c:0b:38:b0:b0:bf:b0:
         5e:61:b4:18:31:52:a8:3b:bb:90:17:9a:a5:c3:f4:40:29:98:
         b5:b6:c7:7b:7a:36:88:0d:4d:0f:ff:db:0d:a6:68:a6:71:9e:
         4e:ce:c6:7b:69:01:22:b0:77:07:ce:a5:46:5c:2b:05:d7:ec:
         7a:0a:9a:4f:54:ea:d8:b2:7d:02:c6:09:cd:20:b6:a5:52:1f:
         2a:70:c5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:34:12 2025 by rpki-client