Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/34352e3136332e3234362e302f32342d3234203d3e20323638353838.roa
File:                     34352e3136332e3234362e302f32342d3234203d3e20323638353838.roa (raw, json)
Hash identifier:          fvtzLdCBFs2uVAcnvsgpWY2KCBITPvGTDivs3ijCHTU=
Subject key identifier:   C2:02:4E:72:98:BD:3A:94:5A:8B:E7:ED:3D:20:47:28:AA:81:0D:70
Certificate issuer:       /CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
Certificate serial:       14FB21DBC9AABFC539AABEA59AC5499A34DBAC69
Authority key identifier: BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/34352e3136332e3234362e302f32342d3234203d3e20323638353838.roa
Signing time:             Sun 27 Jul 2025 01:32:58 +0000
ROA not before:           Sun 27 Jul 2025 01:27:58 +0000
ROA not after:            Sun 26 Jul 2026 01:32:58 +0000
asID:                     268588
IP address blocks:        45.163.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl
                          rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 20:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fb:21:db:c9:aa:bf:c5:39:aa:be:a5:9a:c5:49:9a:34:db:ac:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
        Validity
            Not Before: Jul 27 01:27:58 2025 GMT
            Not After : Jul 26 01:32:58 2026 GMT
        Subject: CN=C2024E7298BD3A945A8BE7ED3D204728AA810D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:ea:ac:d3:0e:67:cb:b8:b4:21:67:4f:2b:
                    71:7a:50:2c:14:5d:93:d3:f9:b8:56:22:bc:dc:dd:
                    65:89:a4:67:4e:7f:3b:5d:af:c8:a3:98:2a:f5:db:
                    1a:41:78:35:25:dc:d5:13:b6:b0:e2:e4:0b:1b:48:
                    c3:4f:b8:29:4c:46:d1:83:d7:0d:d1:24:71:11:dd:
                    a8:d9:e2:8c:91:3f:e5:00:87:12:89:79:41:46:53:
                    a9:d1:61:c7:d7:8f:13:7f:8f:0a:a5:38:8a:8f:95:
                    8c:e7:dc:26:d9:bb:ae:1e:4a:a4:61:9a:f5:a7:ee:
                    e9:c7:14:b9:95:33:db:65:e7:87:a8:de:4b:5d:b5:
                    d7:b3:58:40:58:b7:d0:d5:4d:97:92:7f:9e:dd:ba:
                    16:d7:42:a0:40:ea:9a:f4:0c:83:c1:e6:6b:87:d7:
                    3f:bb:16:9e:bd:db:62:6a:28:f6:d3:59:85:f5:57:
                    f0:4d:5b:33:fc:67:64:15:97:aa:d6:7c:13:9c:b4:
                    f7:6e:20:63:ba:a7:7d:0a:20:ad:a6:f7:b6:77:39:
                    f3:33:64:ed:c3:fd:75:b5:d2:37:47:40:2c:07:eb:
                    64:e6:f9:c5:dd:17:dd:d0:2f:fe:d1:e1:ca:c0:7a:
                    b1:2d:1e:92:db:9c:aa:03:ef:20:15:87:51:6b:16:
                    62:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:02:4E:72:98:BD:3A:94:5A:8B:E7:ED:3D:20:47:28:AA:81:0D:70
            X509v3 Authority Key Identifier:
                keyid:BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/34352e3136332e3234362e302f32342d3234203d3e20323638353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:66:6b:87:36:73:a0:57:f6:21:45:45:d7:57:ce:c3:c5:57:
         a0:af:98:00:87:9c:3c:49:b9:54:e7:a8:ac:34:3a:a7:ca:76:
         bc:73:75:d8:f9:b3:41:77:2f:79:f7:3d:49:e8:71:5a:9e:5e:
         9a:6f:0c:ba:a8:75:9a:5e:82:f6:ee:1b:92:21:6a:30:c7:5b:
         c2:1a:a7:2f:61:d4:85:81:29:1e:d3:cb:2b:a3:cc:d6:22:10:
         80:42:bc:50:7a:6c:b7:1c:8a:f1:30:ca:53:33:06:90:b1:d3:
         b4:c6:6a:81:b7:b9:ed:61:50:87:ca:a6:93:7e:6e:a6:fd:af:
         44:2a:83:8f:10:63:d5:37:f0:ce:1f:ce:da:1f:79:1d:1f:09:
         83:89:62:d6:96:a1:97:bf:f4:e4:c8:5f:8a:19:4c:ae:ae:c7:
         f9:0e:19:c1:6d:14:d8:a7:fa:e2:aa:fa:b8:79:59:00:5f:1f:
         14:69:21:09:34:3d:d6:5e:e1:49:48:65:71:50:dd:63:3a:2c:
         5d:70:15:f1:5a:e6:14:e3:70:06:6c:b3:d8:03:a0:a5:dc:f8:
         9e:1d:cd:49:1b:c9:8f:b0:0b:55:8f:86:f2:7e:d0:25:19:ba:
         22:64:e0:30:6a:0b:23:fa:f0:2e:f3:26:b0:39:d7:f4:83:71:
         68:67:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:44:21 2025 by rpki-client