Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa
File:                     34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa (raw, json)
Hash identifier:          za9AbZEKlOYGQY5R+Kg5D3fi1tQ8KChVDuAcBTjU05k=
Subject key identifier:   9B:53:F7:DB:C5:A3:DF:74:0B:62:FA:6A:02:A6:FE:6B:FF:0E:B3:BC
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       423621876226D8C7A705EA615F61F101540ACF9F
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa
Signing time:             Sat 05 Jul 2025 01:32:49 +0000
ROA not before:           Sat 05 Jul 2025 01:27:49 +0000
ROA not after:            Sat 04 Jul 2026 01:32:49 +0000
asID:                     269182
IP address blocks:        45.181.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 09:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:36:21:87:62:26:d8:c7:a7:05:ea:61:5f:61:f1:01:54:0a:cf:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Jul  5 01:27:49 2025 GMT
            Not After : Jul  4 01:32:49 2026 GMT
        Subject: CN=9B53F7DBC5A3DF740B62FA6A02A6FE6BFF0EB3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:69:89:0b:c4:d6:1d:3d:d8:e1:d3:7b:a0:
                    d8:29:77:0c:2a:ae:dd:bd:7a:fc:09:21:02:a7:ee:
                    fb:27:ee:6a:1f:05:cb:b8:b1:dc:c7:96:ce:4a:5b:
                    ce:4e:78:b6:8f:b3:04:f1:c2:0b:68:b1:3f:5c:eb:
                    c9:58:16:e2:06:62:83:ca:44:20:3b:df:64:c8:62:
                    a4:e6:8d:d9:40:0d:bb:f9:bf:52:81:ed:ec:f5:7b:
                    0a:5e:f9:16:a9:c6:2d:71:f9:6f:0d:5d:17:a9:7f:
                    d8:2a:ae:3a:77:a3:65:9f:d2:0b:ae:2b:61:80:eb:
                    ff:3e:78:a8:1b:3d:3e:38:5f:57:94:f6:f4:d3:81:
                    25:6c:41:b4:a0:12:5c:c9:35:3d:93:4d:3c:11:e4:
                    8a:3b:2c:5f:00:30:d2:4f:0a:7d:c3:f1:63:6d:0c:
                    1d:89:e4:17:5b:c2:33:e7:14:b9:1e:bb:2d:b5:99:
                    37:61:0a:7b:a2:f9:b5:63:25:45:9d:0d:0d:54:81:
                    de:fe:bb:62:7e:7f:0a:91:fb:f3:3c:2a:96:a6:1d:
                    d2:01:55:f4:92:f2:4c:17:f6:e0:4a:50:38:66:ff:
                    3e:e1:88:b4:33:8c:15:40:ae:7a:4d:f3:63:a1:97:
                    47:24:dd:4e:97:04:92:c9:dc:85:bb:43:a6:5c:85:
                    c7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:53:F7:DB:C5:A3:DF:74:0B:62:FA:6A:02:A6:FE:6B:FF:0E:B3:BC
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:a0:f0:d1:3e:8d:c9:60:a5:f1:ce:fa:f1:98:68:05:f9:e9:
         ad:99:42:e4:3d:95:aa:22:60:48:90:cc:79:3c:7d:60:d9:25:
         3a:37:7f:de:0a:19:f9:23:0b:2c:60:ff:63:b0:2c:8d:54:c5:
         7d:cd:fb:64:cb:c9:41:f8:49:35:60:38:6d:3b:57:af:fb:6c:
         09:35:f5:fc:a4:ac:c9:01:0f:98:14:d6:2a:d4:50:48:35:82:
         1b:b9:74:fb:f8:f5:7b:44:26:d5:1e:b3:53:dd:82:e9:66:c6:
         bc:b6:bf:9e:78:6c:67:4b:b1:ff:6e:44:b8:34:4e:33:59:55:
         69:37:5c:0f:ab:b3:c7:86:6e:06:60:4d:0a:13:04:96:79:07:
         e7:c9:52:5b:c0:29:6b:6b:13:6f:c4:fa:1d:06:5a:b0:91:e7:
         63:e1:51:81:bd:47:fd:b8:25:84:6a:9f:fc:d0:61:83:ab:bd:
         ef:be:3a:70:a4:d8:c7:72:33:7c:34:25:66:eb:d6:f5:27:b5:
         6c:4b:12:f1:02:6a:03:d4:2c:53:cf:80:c4:40:71:91:f0:7c:
         cf:73:f4:c7:32:0b:b5:c0:1c:fe:57:ab:58:e9:04:58:49:9b:
         1f:4f:30:78:48:75:1b:7e:3b:1a:cb:3c:c0:b4:0f:52:b0:b7:
         40:35:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:18 2025 by rpki-client