Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa
File:                     34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa (raw, json)
Hash identifier:          2gDYLbS8FT3XXMXgz+yPkUd6NLgUqLgAy607GHBKxOk=
Subject key identifier:   D1:B1:F7:86:26:9B:96:C0:E9:84:AC:8C:3A:CA:DF:01:F4:DB:1E:81
Certificate issuer:       /CN=2093C028134D5E53FE47E27335D15EB3DE7F9C85
Certificate serial:       678B8B3A3B3317B057304B763B2E78587D0F8DBC
Authority key identifier: 20:93:C0:28:13:4D:5E:53:FE:47:E2:73:35:D1:5E:B3:DE:7F:9C:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2093C028134D5E53FE47E27335D15EB3DE7F9C85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa
Signing time:             Fri 13 Jun 2025 00:07:49 +0000
ROA not before:           Fri 13 Jun 2025 00:02:49 +0000
ROA not after:            Fri 12 Jun 2026 00:07:49 +0000
asID:                     267320
IP address blocks:        45.233.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/2093C028134D5E53FE47E27335D15EB3DE7F9C85.crl
                          rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/2093C028134D5E53FE47E27335D15EB3DE7F9C85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2093C028134D5E53FE47E27335D15EB3DE7F9C85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 08:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8b:8b:3a:3b:33:17:b0:57:30:4b:76:3b:2e:78:58:7d:0f:8d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2093C028134D5E53FE47E27335D15EB3DE7F9C85
        Validity
            Not Before: Jun 13 00:02:49 2025 GMT
            Not After : Jun 12 00:07:49 2026 GMT
        Subject: CN=D1B1F786269B96C0E984AC8C3ACADF01F4DB1E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:5f:e3:e3:1b:0b:6e:74:c7:92:f8:0b:12:
                    10:e5:ec:4c:76:74:a9:f3:92:58:bc:6c:57:0b:d1:
                    af:04:2c:3f:c1:43:37:71:a3:dc:b3:3b:77:b5:ec:
                    f8:c4:97:35:90:8c:b1:d9:b8:c1:1a:96:41:8c:75:
                    44:2e:86:9f:cf:6c:c6:f5:b7:74:54:04:3c:79:8c:
                    58:1e:79:99:7f:32:47:0a:06:5b:36:47:33:33:09:
                    cf:73:ba:ec:5a:a6:bc:db:00:bf:4a:0a:74:3c:33:
                    65:6f:cd:36:35:bd:e7:92:d1:64:7d:23:44:46:39:
                    3d:a8:f4:08:7b:38:e1:e9:2a:79:2f:59:da:8b:81:
                    6a:e0:df:75:2f:07:b7:35:ad:a4:d3:6d:a3:ac:02:
                    68:99:6d:28:e7:6b:f7:df:5c:1c:ff:4e:92:99:89:
                    e2:1a:4e:a5:ab:eb:d3:fc:45:8d:21:72:48:1c:02:
                    38:76:91:1d:33:b1:46:b4:6a:ea:b3:32:e3:ae:7b:
                    33:ea:3e:c4:d3:86:f3:37:8b:09:88:32:e7:13:79:
                    1e:88:85:e6:9c:cb:56:db:2f:cb:d4:9c:49:c4:e8:
                    4e:d4:95:fd:2e:d3:88:d1:62:de:a5:06:b1:c5:40:
                    0b:bf:40:51:c7:96:f9:d4:58:3b:f6:66:0c:de:8d:
                    99:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B1:F7:86:26:9B:96:C0:E9:84:AC:8C:3A:CA:DF:01:F4:DB:1E:81
            X509v3 Authority Key Identifier:
                keyid:20:93:C0:28:13:4D:5E:53:FE:47:E2:73:35:D1:5E:B3:DE:7F:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/2093C028134D5E53FE47E27335D15EB3DE7F9C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2093C028134D5E53FE47E27335D15EB3DE7F9C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:dd:f0:91:04:92:89:17:7f:63:b5:ab:7f:8d:4d:27:b9:b4:
         6f:e8:ae:7a:bf:1f:bb:4f:41:85:dc:fc:f6:a6:ff:01:b2:6f:
         95:43:74:ea:4c:94:28:7e:c3:27:e8:e1:e8:01:70:20:92:9e:
         ba:2c:9c:0d:08:5e:a5:f5:b9:cd:5f:59:21:dd:9f:21:2d:fb:
         ae:b5:9c:b9:e2:5c:bf:cf:d1:ca:88:9b:38:85:ee:ef:f6:39:
         5c:b8:8b:88:88:7a:9f:6a:a8:6a:4f:35:61:a3:42:2d:3a:01:
         2f:39:91:d2:f3:13:7a:38:ac:9e:05:09:97:19:61:ba:6e:45:
         d3:48:b5:6a:ad:6f:cd:9e:9d:aa:64:e9:1c:ac:3a:f2:53:5d:
         c4:f9:d0:a6:b0:05:e0:df:1a:b2:a7:e6:af:09:da:87:f5:6a:
         9b:43:80:cd:e8:65:58:38:bf:a1:6b:cb:6a:ec:c5:7e:69:81:
         66:b6:8d:24:97:b5:5a:11:32:d6:b8:5b:85:f8:c0:e9:04:87:
         3f:64:ca:23:1f:f8:d9:ab:b2:82:61:10:7b:0a:66:53:92:4b:
         54:c0:7b:cb:f0:57:be:19:a5:78:80:6f:b2:91:93:9b:48:c4:
         ea:58:ab:02:df:3d:45:e9:6c:0c:b7:94:2b:3e:c9:c0:2e:13:
         a4:4f:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:10:17 2025 by rpki-client