Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa
File:                     34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa (raw, json)
Hash identifier:          76v3PwoFqjIvYhNGggm0A6GKqZidjpsE3qEBiwvNcVI=
Subject key identifier:   DC:88:47:12:6B:8F:87:DE:D5:8F:DA:D6:BE:F7:6A:E2:0B:F0:98:75
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       0757FC94BDC8A65641D62405BD9CDF1B73BBE8D0
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa
Signing time:             Tue 03 Jun 2025 16:36:21 +0000
ROA not before:           Tue 03 Jun 2025 16:31:21 +0000
ROA not after:            Tue 02 Jun 2026 16:36:21 +0000
asID:                     268131
IP address blocks:        45.169.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 07:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:57:fc:94:bd:c8:a6:56:41:d6:24:05:bd:9c:df:1b:73:bb:e8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: Jun  3 16:31:21 2025 GMT
            Not After : Jun  2 16:36:21 2026 GMT
        Subject: CN=DC8847126B8F87DED58FDAD6BEF76AE20BF09875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:ce:19:41:ff:bd:70:ec:b9:36:a5:14:a7:
                    25:37:11:48:17:a6:8c:c4:d1:2a:68:da:75:8a:cb:
                    9e:92:c8:23:a3:aa:2b:ee:8a:2a:8b:97:18:40:4d:
                    a7:c5:95:0e:0c:1e:7a:9b:60:20:d4:fe:94:57:70:
                    cc:75:c3:cb:bc:87:19:0d:24:0d:68:1a:43:96:6f:
                    f9:c4:cb:f0:4d:ec:45:35:c0:17:0f:b0:e2:fd:b1:
                    47:be:7c:32:f7:7f:bd:73:6b:34:ae:87:51:0c:47:
                    fb:de:05:fd:cd:a4:86:60:f6:c4:50:77:28:23:c9:
                    12:33:f1:1c:80:1c:6b:54:7d:6c:b6:d5:f6:c6:7b:
                    ee:6c:bb:04:df:1f:35:30:9b:87:02:fa:65:21:53:
                    6b:8e:b1:bc:1c:4c:08:8e:d4:8d:9c:54:db:f2:61:
                    70:d5:c9:24:51:2e:77:fc:5a:37:56:58:ca:90:38:
                    d4:b3:40:43:b7:bd:de:89:03:35:f8:29:5a:d3:24:
                    ea:ea:7f:27:67:b0:cc:b6:99:58:7e:19:0a:f0:6e:
                    a1:dc:70:a6:55:92:48:ee:f4:83:ed:64:e6:aa:bf:
                    74:d0:0b:43:af:6f:5e:37:e1:39:60:ff:9b:f9:0f:
                    8a:51:b9:46:2b:53:a4:f4:ed:7c:64:58:77:c5:23:
                    33:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:88:47:12:6B:8F:87:DE:D5:8F:DA:D6:BE:F7:6A:E2:0B:F0:98:75
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:36:1e:79:bf:bd:63:14:4f:85:54:f2:16:aa:15:f3:22:05:
         78:f1:ed:44:14:8f:9f:61:81:db:fd:b1:86:be:8a:49:0f:3f:
         61:bd:b0:fe:d0:36:33:e5:27:91:b5:3f:12:30:a3:7e:d7:fc:
         33:d1:10:ce:00:63:50:9b:88:c8:5a:49:be:db:03:01:76:9f:
         ff:21:ba:4e:4e:fb:85:f7:92:62:ed:93:f5:06:90:35:25:de:
         cf:9f:89:44:a9:3f:73:d6:c2:65:f3:b9:69:a5:d7:67:b7:fe:
         4d:4e:57:a6:96:5d:b0:03:65:87:bd:7a:22:3c:78:8f:ea:75:
         00:c7:d8:1a:9a:9b:3d:3d:6a:e6:ec:39:98:46:36:24:a8:11:
         27:7e:67:fa:9c:6e:ae:8b:14:28:59:1f:9e:35:13:fe:d3:42:
         c3:10:dd:ed:d0:4d:9a:b3:c3:30:6a:9f:e7:d3:3a:81:11:1a:
         bd:b4:7d:96:32:e4:76:a1:88:81:b6:6e:e6:46:83:45:08:6b:
         51:db:6c:23:2f:08:26:c0:d8:57:bb:9b:5b:98:15:1a:0b:f2:
         90:bf:c7:5b:48:55:63:46:f7:7c:cd:9d:e7:ae:5c:1c:e3:d7:
         8d:b5:de:82:cf:b3:26:73:48:71:d6:1d:b0:5d:5c:59:7f:9f:
         47:86:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 11:01:08 2025 by rpki-client