Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9krpLYBucNbLC63ecFnRwkqPZ7BKoYkzRnNwo5ito8uy/0/34352e3136332e3233302e302f32342d3234203d3e20323638353830.roa
File:                     34352e3136332e3233302e302f32342d3234203d3e20323638353830.roa (raw, json)
Hash identifier:          ChuVienwSEc1nHtBdKRVOzJ3MbRwvYJ6Q5uWywoK8qo=
Subject key identifier:   77:22:22:53:90:6E:27:3A:AA:B0:D2:D7:B2:4B:66:6F:C0:DD:EC:F1
Certificate issuer:       /CN=F6742A5AB8CD532CB22A28549A8C307999645838
Certificate serial:       1B6EBC7788FFC8BB81B4E4C16B65E107FECEECDA
Authority key identifier: F6:74:2A:5A:B8:CD:53:2C:B2:2A:28:54:9A:8C:30:79:99:64:58:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6742A5AB8CD532CB22A28549A8C307999645838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9krpLYBucNbLC63ecFnRwkqPZ7BKoYkzRnNwo5ito8uy/0/34352e3136332e3233302e302f32342d3234203d3e20323638353830.roa
Signing time:             Thu 24 Jul 2025 17:54:56 +0000
ROA not before:           Thu 24 Jul 2025 17:49:56 +0000
ROA not after:            Thu 23 Jul 2026 17:54:56 +0000
asID:                     268580
IP address blocks:        45.163.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9krpLYBucNbLC63ecFnRwkqPZ7BKoYkzRnNwo5ito8uy/0/F6742A5AB8CD532CB22A28549A8C307999645838.crl
                          rsync://rpki-repo.registro.br/repo/9krpLYBucNbLC63ecFnRwkqPZ7BKoYkzRnNwo5ito8uy/0/F6742A5AB8CD532CB22A28549A8C307999645838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6742A5AB8CD532CB22A28549A8C307999645838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 16:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6e:bc:77:88:ff:c8:bb:81:b4:e4:c1:6b:65:e1:07:fe:ce:ec:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6742A5AB8CD532CB22A28549A8C307999645838
        Validity
            Not Before: Jul 24 17:49:56 2025 GMT
            Not After : Jul 23 17:54:56 2026 GMT
        Subject: CN=77222253906E273AAAB0D2D7B24B666FC0DDECF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:c4:d4:15:09:6c:6e:89:f7:ff:a6:c8:4d:
                    8b:7b:cd:5e:f5:96:1f:09:b7:91:97:b4:6f:68:f5:
                    f6:d1:9f:e0:16:c4:07:e6:f4:f9:ee:fb:e9:64:1e:
                    6f:6d:cf:85:ff:26:8f:fd:5a:f5:7f:c8:29:55:5e:
                    2f:f3:a7:c5:3e:e0:0c:32:af:e1:a0:59:7c:17:f7:
                    fa:7e:3b:3c:43:7d:ff:42:9b:d8:39:3d:d2:db:f3:
                    05:1d:22:51:56:fa:9f:d4:ef:e5:d3:fa:9b:ea:18:
                    21:19:a8:95:1b:03:71:5a:eb:b4:3c:9d:3c:31:af:
                    d6:c2:de:92:d6:47:43:ab:68:73:a8:1f:c3:3b:de:
                    ce:df:8d:37:89:da:dc:7f:2c:81:80:d2:5c:f2:c5:
                    6e:fc:fd:12:c5:f1:3f:d2:1c:06:1a:56:bc:1c:07:
                    ad:87:fd:58:34:de:05:31:60:75:e6:8a:b7:bb:e1:
                    78:2f:6e:62:ba:55:9c:b3:b2:04:58:52:19:b5:c4:
                    ec:45:47:9b:e0:a4:fa:1b:e2:8c:ee:96:80:50:8c:
                    b6:9b:9a:23:37:9e:25:13:b8:a9:70:60:4d:bd:8c:
                    18:66:3a:48:23:7f:ff:53:1b:d8:01:b8:c5:80:de:
                    4e:d0:79:db:88:1b:cf:b3:03:6f:6d:5f:2e:da:d4:
                    db:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:22:22:53:90:6E:27:3A:AA:B0:D2:D7:B2:4B:66:6F:C0:DD:EC:F1
            X509v3 Authority Key Identifier:
                keyid:F6:74:2A:5A:B8:CD:53:2C:B2:2A:28:54:9A:8C:30:79:99:64:58:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9krpLYBucNbLC63ecFnRwkqPZ7BKoYkzRnNwo5ito8uy/0/F6742A5AB8CD532CB22A28549A8C307999645838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6742A5AB8CD532CB22A28549A8C307999645838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9krpLYBucNbLC63ecFnRwkqPZ7BKoYkzRnNwo5ito8uy/0/34352e3136332e3233302e302f32342d3234203d3e20323638353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:3a:91:b2:c2:20:13:34:20:5f:12:8d:49:87:ee:fc:e8:39:
         1e:d2:a5:9d:13:1b:a7:a2:98:e7:c4:5f:dd:a3:9a:d5:bf:4b:
         82:7b:62:d6:3d:ae:4b:52:c8:8b:81:c8:10:e9:fe:72:36:c5:
         90:ac:9f:9b:f8:31:26:50:95:1b:a0:a1:cb:c3:85:c7:83:05:
         82:f2:86:5c:cc:ea:33:04:19:ba:63:44:66:a9:eb:2f:e0:ff:
         f2:a5:8c:89:82:3c:ee:e5:25:97:79:b0:96:1d:f0:70:b2:6e:
         e9:75:f4:9d:c4:b5:3f:17:cf:b3:ad:49:3f:df:a2:7e:5e:10:
         43:2a:72:de:6e:ad:b9:b4:6a:7d:d3:06:83:1e:f6:42:14:b9:
         7b:f9:55:7e:d3:03:1a:3c:f9:f0:fc:46:7f:90:b6:ce:a4:b4:
         91:15:08:48:18:bc:1a:05:e7:0a:e5:0d:1d:96:ef:61:a0:4b:
         35:37:01:60:b9:45:27:66:98:44:77:59:10:e0:8b:cf:ec:94:
         bb:68:fe:eb:a5:74:77:68:2d:b3:3e:73:d8:33:38:a8:b9:7b:
         1f:0a:2d:57:64:74:a1:70:b1:f0:13:34:f5:2c:36:03:df:81:
         c9:be:37:b9:d1:c9:c5:3f:b9:6e:71:3d:f0:35:6f:af:5a:56:
         26:23:49:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:31:12 2025 by rpki-client