Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9krpLYBucNbLC63ecFnRwkqPZ7BKoYkzRnNwo5ito8uy/0/34352e3136332e3233312e302f32342d3234203d3e20323638353830.roa
File:                     34352e3136332e3233312e302f32342d3234203d3e20323638353830.roa (raw, json)
Hash identifier:          GNAUveJQDR1s/7VdsSFpJzEPx/ZhfNsKN3EUOLjJFD8=
Subject key identifier:   FC:90:FD:D9:E6:3C:6E:A2:9E:B9:6C:02:69:13:10:33:88:92:48:4A
Certificate issuer:       /CN=F6742A5AB8CD532CB22A28549A8C307999645838
Certificate serial:       6CB15C70E5EA63E83D6C067524C1264C5722147D
Authority key identifier: F6:74:2A:5A:B8:CD:53:2C:B2:2A:28:54:9A:8C:30:79:99:64:58:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6742A5AB8CD532CB22A28549A8C307999645838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9krpLYBucNbLC63ecFnRwkqPZ7BKoYkzRnNwo5ito8uy/0/34352e3136332e3233312e302f32342d3234203d3e20323638353830.roa
Signing time:             Thu 24 Jul 2025 17:54:56 +0000
ROA not before:           Thu 24 Jul 2025 17:49:56 +0000
ROA not after:            Thu 23 Jul 2026 17:54:56 +0000
asID:                     268580
IP address blocks:        45.163.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9krpLYBucNbLC63ecFnRwkqPZ7BKoYkzRnNwo5ito8uy/0/F6742A5AB8CD532CB22A28549A8C307999645838.crl
                          rsync://rpki-repo.registro.br/repo/9krpLYBucNbLC63ecFnRwkqPZ7BKoYkzRnNwo5ito8uy/0/F6742A5AB8CD532CB22A28549A8C307999645838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6742A5AB8CD532CB22A28549A8C307999645838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 16:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b1:5c:70:e5:ea:63:e8:3d:6c:06:75:24:c1:26:4c:57:22:14:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6742A5AB8CD532CB22A28549A8C307999645838
        Validity
            Not Before: Jul 24 17:49:56 2025 GMT
            Not After : Jul 23 17:54:56 2026 GMT
        Subject: CN=FC90FDD9E63C6EA29EB96C02691310338892484A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:9d:b5:86:14:c1:67:2e:47:93:b0:11:b2:
                    fb:13:af:97:c5:b7:88:53:34:6e:d2:1a:eb:da:17:
                    c8:7e:f7:66:73:d0:7e:9e:86:da:dd:8a:3a:08:de:
                    97:48:ec:1b:a2:63:81:c4:90:b8:07:e5:7a:3f:26:
                    d1:0d:31:3a:e9:50:64:dd:da:98:34:11:48:39:a3:
                    09:1b:71:4b:6e:26:ec:2b:e5:c9:51:ea:bb:e3:06:
                    8d:fc:bb:1b:14:71:97:a2:00:15:9e:aa:5c:95:57:
                    90:e9:a5:09:1c:b2:99:e7:ae:6b:3b:85:0e:e0:de:
                    5a:16:b8:20:67:da:13:69:54:7e:18:80:b8:98:be:
                    e2:e3:ab:e9:17:7c:61:bf:10:5f:1c:d7:60:d6:c3:
                    30:99:30:df:8c:1d:99:ee:7b:72:85:0d:9c:f1:dd:
                    8e:9a:86:34:76:3a:d0:53:aa:98:4c:67:da:df:0c:
                    30:84:f6:54:f6:1f:46:07:49:ce:2b:23:05:2c:14:
                    ce:d9:39:ee:30:dc:b9:3b:9a:12:bd:54:ae:bd:96:
                    b5:4f:f0:75:a8:7d:51:72:8b:a2:40:ce:54:01:e9:
                    44:8a:96:29:64:eb:ef:c4:44:a3:9b:7f:78:2f:c8:
                    19:79:ba:b2:b9:c1:c8:82:fb:f2:fb:9f:8c:11:f4:
                    21:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:90:FD:D9:E6:3C:6E:A2:9E:B9:6C:02:69:13:10:33:88:92:48:4A
            X509v3 Authority Key Identifier:
                keyid:F6:74:2A:5A:B8:CD:53:2C:B2:2A:28:54:9A:8C:30:79:99:64:58:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9krpLYBucNbLC63ecFnRwkqPZ7BKoYkzRnNwo5ito8uy/0/F6742A5AB8CD532CB22A28549A8C307999645838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6742A5AB8CD532CB22A28549A8C307999645838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9krpLYBucNbLC63ecFnRwkqPZ7BKoYkzRnNwo5ito8uy/0/34352e3136332e3233312e302f32342d3234203d3e20323638353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:4f:d3:5c:c0:a3:db:4c:16:7e:8a:78:2b:28:56:06:ec:9d:
         72:4b:17:d4:54:b1:c3:f6:7d:8e:23:da:3b:ba:47:aa:84:80:
         70:31:a8:59:a7:6a:3b:a5:0c:1a:5c:63:b3:0d:dd:95:26:94:
         de:53:e2:e3:a9:c8:54:8c:9c:23:d3:7c:ee:99:ea:57:7b:44:
         3d:1f:d4:ca:e0:13:df:b8:18:ed:b9:e4:00:12:f2:fe:b6:8d:
         a1:1e:0f:54:9b:61:a1:26:10:07:eb:6c:ef:a2:8a:f6:b2:31:
         8c:d7:45:9f:c0:35:d3:53:30:5f:12:50:ac:13:f9:e4:59:70:
         71:53:e7:05:7e:0d:57:93:4c:cf:87:c9:09:75:79:fc:e3:4a:
         f4:7e:55:3c:0f:a9:b3:34:16:da:0a:1e:32:1a:d3:2b:61:ec:
         a8:26:ae:0f:9b:32:79:b9:5c:a2:ed:ae:3c:0e:2c:6f:43:7c:
         c8:fa:9f:9a:68:e3:b1:22:eb:33:ef:0d:62:68:65:cc:e8:68:
         42:86:ad:f7:6e:fc:8c:dd:7b:18:f8:f0:db:85:59:ad:0e:29:
         00:31:30:f4:c3:19:a7:0b:e3:d3:9f:26:4e:e5:0f:63:81:50:
         45:43:dc:65:52:88:ea:2f:d8:dc:0b:b6:07:a6:ce:11:4a:c1:
         a7:a0:3f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:16:02 2025 by rpki-client