Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/34352e3136342e3230322e302f32332d3332203d3e20323732313734.roa
File:                     34352e3136342e3230322e302f32332d3332203d3e20323732313734.roa (raw, json)
Hash identifier:          V7ee/ZIyjG1csvf3721aEFPJJ+X8O/x+M2dogK6V9Vg=
Subject key identifier:   8E:E9:8E:6F:94:2D:B3:63:A4:04:37:63:91:F4:45:D3:F9:00:93:BF
Certificate issuer:       /CN=9A0F3F8F96F763E503AA1695E46721EED45714D7
Certificate serial:       0605FCADCB1218536C4FE727D14A454A1BA1288D
Authority key identifier: 9A:0F:3F:8F:96:F7:63:E5:03:AA:16:95:E4:67:21:EE:D4:57:14:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A0F3F8F96F763E503AA1695E46721EED45714D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/34352e3136342e3230322e302f32332d3332203d3e20323732313734.roa
Signing time:             Tue 08 Jul 2025 21:21:26 +0000
ROA not before:           Tue 08 Jul 2025 21:16:26 +0000
ROA not after:            Tue 07 Jul 2026 21:21:26 +0000
asID:                     272174
IP address blocks:        45.164.202.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.crl
                          rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A0F3F8F96F763E503AA1695E46721EED45714D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:05:fc:ad:cb:12:18:53:6c:4f:e7:27:d1:4a:45:4a:1b:a1:28:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A0F3F8F96F763E503AA1695E46721EED45714D7
        Validity
            Not Before: Jul  8 21:16:26 2025 GMT
            Not After : Jul  7 21:21:26 2026 GMT
        Subject: CN=8EE98E6F942DB363A404376391F445D3F90093BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:83:0b:89:33:9c:42:95:74:75:62:52:b1:
                    13:74:11:3b:7c:e5:b8:cd:69:6b:fb:9d:2a:f9:ac:
                    fd:ff:1e:7c:6a:86:00:25:6c:e9:40:8d:a3:c7:37:
                    16:91:79:32:e1:9d:82:ca:9d:0b:1a:d8:cb:8d:c7:
                    e3:72:2b:14:88:2e:b2:b1:c8:66:ea:a0:bf:58:66:
                    7e:82:72:55:f5:d1:5d:ae:99:b5:21:76:c3:63:e0:
                    2d:8f:35:e9:72:cb:56:6c:af:2a:75:cf:2e:01:59:
                    d2:31:c6:ec:fd:ab:b6:03:34:0c:80:f6:bf:b2:cb:
                    b3:c1:2e:49:55:ca:24:32:dc:ef:1c:35:91:ef:6c:
                    16:f5:d3:97:36:54:7f:80:c5:17:ca:64:dd:4a:1d:
                    7d:ac:99:d7:2c:ef:f2:37:f1:b4:d6:42:93:66:61:
                    2d:7a:56:43:a2:e3:66:3f:9c:db:2e:6e:09:63:0f:
                    ff:4d:47:0a:85:a3:64:c5:a8:91:65:8e:59:6a:7e:
                    28:d5:ae:76:1b:15:ce:76:8c:a8:58:14:0b:aa:51:
                    3b:72:fd:8f:e6:62:cf:c0:ff:b7:ca:d8:19:29:b1:
                    53:6f:05:59:07:f4:91:12:73:8a:11:41:bd:46:1d:
                    25:bf:d8:4d:1d:79:fb:b5:9a:34:e1:d3:87:30:bb:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E9:8E:6F:94:2D:B3:63:A4:04:37:63:91:F4:45:D3:F9:00:93:BF
            X509v3 Authority Key Identifier:
                keyid:9A:0F:3F:8F:96:F7:63:E5:03:AA:16:95:E4:67:21:EE:D4:57:14:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A0F3F8F96F763E503AA1695E46721EED45714D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/34352e3136342e3230322e302f32332d3332203d3e20323732313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:f7:dc:55:17:06:72:52:41:e4:4e:a7:f7:7f:99:db:d1:ec:
         9f:64:1f:45:47:45:df:71:ad:31:aa:bc:e0:be:12:74:97:47:
         7d:a6:6c:38:c5:a0:91:cd:d5:7f:00:67:2d:1b:ad:b2:07:0b:
         30:95:6b:32:f8:6f:5e:e9:ed:81:d1:04:96:a7:26:81:9f:61:
         20:20:15:23:17:d7:c9:4e:39:d1:33:ff:34:48:64:b1:15:6f:
         78:ed:f3:4a:db:e5:a3:bc:66:18:49:f9:84:98:1f:98:bb:26:
         7c:fd:21:37:84:53:fd:53:fa:b1:c0:46:2b:d5:4e:a4:72:36:
         ad:6e:7c:9c:17:24:bd:89:76:26:01:4d:1a:c4:ee:09:17:3d:
         c0:75:69:26:23:5f:c1:11:0b:96:a3:b0:74:49:45:1f:b2:d8:
         a5:91:50:d4:42:ee:15:70:21:9d:ad:91:0a:0d:a7:66:22:3c:
         f4:c6:ad:e8:22:59:1a:f2:33:7e:2b:74:30:13:70:54:82:61:
         29:af:91:cb:4d:a7:9a:68:f7:ae:04:02:aa:e2:d0:3e:2c:0b:
         11:2e:c1:5e:71:ec:0c:1c:f2:e4:fd:ab:88:db:25:4b:1e:6e:
         12:f1:cf:ad:f5:e2:10:1a:f4:d4:82:83:23:1e:a9:43:37:c1:
         5a:14:87:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:01:58 2025 by rpki-client