Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35332e302f32342d3234203d3e20323639323835.roa
File:                     34352e3138322e35332e302f32342d3234203d3e20323639323835.roa (raw, json)
Hash identifier:          095KOiCgelfFAJaEWZp4FBq2DB3dXDZ9yQVjrdfn984=
Subject key identifier:   28:0F:6F:BB:DA:C8:D9:E4:43:9B:A1:F5:C8:99:16:67:94:85:CE:06
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       7340EC076631567D3B12CA657D3F45912B220632
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35332e302f32342d3234203d3e20323639323835.roa
Signing time:             Wed 30 Jul 2025 17:02:28 +0000
ROA not before:           Wed 30 Jul 2025 16:57:28 +0000
ROA not after:            Wed 29 Jul 2026 17:02:28 +0000
asID:                     269285
IP address blocks:        45.182.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 17:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:40:ec:07:66:31:56:7d:3b:12:ca:65:7d:3f:45:91:2b:22:06:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Jul 30 16:57:28 2025 GMT
            Not After : Jul 29 17:02:28 2026 GMT
        Subject: CN=280F6FBBDAC8D9E4439BA1F5C89916679485CE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:65:2a:e1:e7:74:e1:13:02:ba:c3:fd:e4:
                    0f:43:30:52:1d:85:64:ca:74:df:44:0b:d3:b5:15:
                    d4:51:d3:38:41:e9:41:0f:4f:b2:0c:0e:4a:c6:1f:
                    f1:5d:b2:14:27:1f:bc:ee:db:e7:fc:dc:00:89:c4:
                    d6:5b:01:08:8e:c9:d4:b0:67:ca:db:2c:9a:ba:2f:
                    be:97:90:21:41:35:94:0a:7a:e1:3f:14:5b:63:6b:
                    a2:96:32:72:76:8b:7a:9a:7b:29:9c:5b:37:8e:76:
                    18:44:69:e8:43:4a:8e:65:22:a3:62:02:4c:9e:98:
                    b7:cc:48:90:e1:b8:91:c6:4c:58:16:c0:03:21:27:
                    ba:d6:fc:d4:f5:bf:98:28:2f:29:d6:3e:c7:69:97:
                    e6:a8:fb:96:05:28:42:41:ea:92:28:45:55:13:54:
                    b0:8e:bb:a3:4a:7c:3e:f1:08:7b:ca:9e:3b:2d:ed:
                    56:d7:ce:c1:3e:56:43:e0:c4:79:91:10:a9:13:56:
                    80:19:82:e7:24:ec:96:86:6e:5a:7a:4c:f7:ad:b7:
                    57:f4:86:7d:d8:5a:0c:8f:2f:5e:9d:d6:f5:58:6e:
                    3a:6f:b6:46:0e:ec:a0:3c:15:ed:a6:da:dd:ff:75:
                    49:6d:52:5c:60:3c:f5:7d:9a:3a:04:7e:6d:a8:b0:
                    c4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0F:6F:BB:DA:C8:D9:E4:43:9B:A1:F5:C8:99:16:67:94:85:CE:06
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35332e302f32342d3234203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:99:77:2f:c8:e0:94:89:88:82:4c:2a:7f:9e:51:40:11:c8:
         a7:75:08:e0:7a:a6:67:fc:9d:79:b1:40:01:a1:13:8b:c5:12:
         64:8e:ec:57:1d:5a:a6:34:c9:2a:5e:1b:5e:02:08:c2:ef:1a:
         1d:33:38:54:c1:00:b0:67:0f:be:03:fd:90:ab:1f:28:e5:75:
         ab:71:65:71:c2:0d:a8:fd:0b:a2:f6:23:74:7e:43:d9:dc:32:
         c5:a3:44:0f:19:bd:7a:e7:f3:ab:f7:da:d6:e6:aa:77:16:24:
         d7:d6:77:e7:85:f9:9e:1f:49:51:84:37:71:8b:87:15:85:d6:
         ae:6a:b3:f3:a7:5d:d3:a1:66:35:f5:89:d0:b5:83:5c:d4:48:
         d7:5d:e0:71:13:18:6a:f1:eb:1c:1c:1a:7e:5b:ec:65:72:f8:
         c8:59:b6:aa:b0:4c:af:c8:15:e4:c6:c8:12:1b:dd:65:1c:e3:
         01:48:29:81:91:f9:62:16:1d:a0:40:21:a8:d5:7b:a2:2f:f1:
         10:82:f6:88:2d:e7:5f:29:37:02:c9:f8:54:c6:b1:dd:dd:0d:
         94:29:58:dd:9c:85:80:7d:65:c4:f7:44:7f:57:7a:29:08:94:
         1f:89:c3:99:70:a8:09:60:34:3e:af:e5:a9:c1:e7:2a:ee:28:
         b9:5d:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:55:14 2025 by rpki-client