Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa
File:                     34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa (raw, json)
Hash identifier:          0YQVcXYgXkFuvzQgnjd0gj2dQOryDEzoDlO4KLAzZ6s=
Subject key identifier:   93:A5:59:B0:33:EB:13:3B:26:83:DC:A3:20:EC:C6:66:B3:9D:79:74
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       2C55F38A561287609F6C1B67B5ACF691AB43C1CC
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa
Signing time:             Sat 05 Jul 2025 01:32:48 +0000
ROA not before:           Sat 05 Jul 2025 01:27:48 +0000
ROA not after:            Sat 04 Jul 2026 01:32:48 +0000
asID:                     269182
IP address blocks:        45.181.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 21:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:55:f3:8a:56:12:87:60:9f:6c:1b:67:b5:ac:f6:91:ab:43:c1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Jul  5 01:27:48 2025 GMT
            Not After : Jul  4 01:32:48 2026 GMT
        Subject: CN=93A559B033EB133B2683DCA320ECC666B39D7974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:04:07:54:e0:47:8d:48:38:b5:cb:26:92:
                    3d:13:5d:23:38:e8:13:45:87:12:d4:b6:9f:a0:74:
                    bc:0e:97:ac:13:68:ad:a9:ba:78:0d:cf:64:2d:b2:
                    58:ff:c6:a8:bc:b7:35:eb:15:5e:a3:38:fd:c8:18:
                    79:50:0f:3e:24:06:50:d3:54:7b:0d:6e:17:00:ab:
                    b2:a8:26:0a:40:57:81:9a:b6:86:d8:f6:e5:2a:5d:
                    57:c1:11:6a:d2:5f:00:fd:09:31:4d:e3:0b:77:9c:
                    ea:5d:7f:7c:97:97:ac:5e:c8:6d:c2:29:f4:d5:e2:
                    be:bb:3c:6c:0d:55:d8:09:68:48:a2:3d:8f:8f:59:
                    8d:6e:44:dc:bf:52:1b:60:0a:32:5b:51:74:51:b7:
                    22:65:fe:c2:55:26:73:9e:ab:ba:53:c3:2a:9c:5f:
                    68:0f:df:1c:c7:1e:ea:a8:39:9d:4d:e2:f4:e1:3b:
                    3d:30:53:4c:db:77:ed:5a:75:36:a6:aa:71:70:ed:
                    89:38:99:d4:17:5a:6f:f6:51:c0:f1:a6:ea:ad:7e:
                    b9:69:f3:43:d5:35:3b:79:a1:2f:4c:d4:69:db:57:
                    db:f2:c5:74:10:42:90:0e:73:9f:0b:b3:56:c9:26:
                    a8:55:37:2d:66:a2:3a:7d:f5:7d:08:01:89:05:cd:
                    d4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A5:59:B0:33:EB:13:3B:26:83:DC:A3:20:EC:C6:66:B3:9D:79:74
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:02:b3:7a:ad:3c:fd:1a:40:8a:6d:e4:de:7d:d8:e7:e8:5d:
         56:9a:6f:26:67:ca:b1:82:f1:3c:69:7c:a7:70:2c:65:b3:03:
         20:b3:ea:ba:02:eb:3f:5d:63:82:f2:69:bc:4c:d8:4c:0f:76:
         5b:54:35:91:ff:ac:bf:f3:23:a8:ce:6c:a0:09:88:6d:da:0d:
         50:35:73:8a:7c:5d:16:9e:c3:45:b1:99:73:1e:ff:46:44:a4:
         30:52:cf:15:1c:89:64:4e:13:d5:41:7c:99:6f:28:2f:90:b6:
         c4:c7:47:5b:78:ac:04:ab:dc:ec:8f:34:cf:ac:cc:73:61:cd:
         c3:2b:e4:70:38:e2:25:65:b7:40:65:1f:ed:1e:56:ec:1e:7f:
         d5:9c:98:1f:f0:9f:59:bc:53:dd:59:35:13:00:41:67:75:e5:
         d3:c3:69:b1:7f:df:12:95:40:6e:2f:38:a5:2c:b1:67:ea:ea:
         3b:5a:a8:4b:9c:15:88:e6:22:5d:e6:06:d1:3f:5e:1b:89:8b:
         67:98:58:4f:16:1a:f0:8c:a9:7f:ce:46:ca:88:78:45:e9:07:
         69:c6:3f:b7:e6:ca:ae:2f:20:52:f2:05:5d:19:58:91:27:2d:
         49:d7:92:01:5a:4b:47:0d:1d:3f:ff:21:62:99:d5:cf:b0:bf:
         fb:f1:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:48:19 2025 by rpki-client