Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/34352e3138332e35362e302f32322d3234203d3e20323639323633.roa
File:                     34352e3138332e35362e302f32322d3234203d3e20323639323633.roa (raw, json)
Hash identifier:          pbZF64wOzamZ5pRnzIixI4Sdssb2vBvRxZiKinDMrH0=
Subject key identifier:   56:71:24:65:E5:4B:96:55:9D:41:B6:FC:3A:8B:20:68:0A:D1:C1:80
Certificate issuer:       /CN=9516E18FF1D878D34D72A62751C21DF82509593E
Certificate serial:       1080625447EEB53FE76B553441DBBC75394A0B93
Authority key identifier: 95:16:E1:8F:F1:D8:78:D3:4D:72:A6:27:51:C2:1D:F8:25:09:59:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9516E18FF1D878D34D72A62751C21DF82509593E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/34352e3138332e35362e302f32322d3234203d3e20323639323633.roa
Signing time:             Mon 07 Jul 2025 12:48:15 +0000
ROA not before:           Mon 07 Jul 2025 12:43:15 +0000
ROA not after:            Mon 06 Jul 2026 12:48:15 +0000
asID:                     269263
IP address blocks:        45.183.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/9516E18FF1D878D34D72A62751C21DF82509593E.crl
                          rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/9516E18FF1D878D34D72A62751C21DF82509593E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9516E18FF1D878D34D72A62751C21DF82509593E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 03:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:80:62:54:47:ee:b5:3f:e7:6b:55:34:41:db:bc:75:39:4a:0b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9516E18FF1D878D34D72A62751C21DF82509593E
        Validity
            Not Before: Jul  7 12:43:15 2025 GMT
            Not After : Jul  6 12:48:15 2026 GMT
        Subject: CN=56712465E54B96559D41B6FC3A8B20680AD1C180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e8:45:a4:12:af:38:1f:4d:e3:3a:f5:41:f5:
                    09:50:0a:dc:56:ba:40:ea:ad:0d:69:2f:33:7c:c9:
                    04:c3:9b:ae:90:a9:fe:1e:1e:2e:09:25:65:3e:33:
                    39:8e:a3:6a:d8:3e:b2:10:17:fe:5c:f2:01:49:b7:
                    dd:80:b2:03:6b:6b:9a:62:35:e6:61:84:fb:a0:2b:
                    a7:4e:62:2d:03:ac:a7:33:1b:6c:c0:ba:10:7c:f4:
                    78:6a:11:97:99:a5:f7:a3:18:b1:6c:b9:a5:e3:e8:
                    8b:bd:22:93:a4:aa:72:a5:73:b4:36:d3:5b:59:b8:
                    90:5f:6f:a8:f8:e9:e0:67:84:47:3b:96:fd:7a:ec:
                    08:ea:7a:4c:b1:cf:81:35:a8:93:6c:13:04:b4:d3:
                    a5:6c:43:79:13:cb:9d:73:67:3a:60:90:4e:f1:8a:
                    6c:12:06:7c:d9:39:fa:1d:6d:f5:e7:6f:95:48:84:
                    d4:8e:92:2b:83:4e:36:da:fe:b4:9e:bb:17:bf:9b:
                    8d:61:f6:55:12:b0:83:e3:63:40:ca:ad:9a:2d:b8:
                    66:45:67:3c:b8:a0:78:56:dc:02:32:a9:fa:50:fe:
                    36:57:83:db:1b:1c:b0:f3:0c:fb:bb:3f:d0:00:2e:
                    db:24:ed:93:99:68:f8:b0:72:2e:e2:84:10:24:95:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:71:24:65:E5:4B:96:55:9D:41:B6:FC:3A:8B:20:68:0A:D1:C1:80
            X509v3 Authority Key Identifier:
                keyid:95:16:E1:8F:F1:D8:78:D3:4D:72:A6:27:51:C2:1D:F8:25:09:59:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/9516E18FF1D878D34D72A62751C21DF82509593E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9516E18FF1D878D34D72A62751C21DF82509593E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/34352e3138332e35362e302f32322d3234203d3e20323639323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:18:06:a4:3e:d8:9a:cb:a3:64:f7:f5:d7:78:7c:de:4f:90:
         2a:53:61:96:8f:71:cf:67:db:02:d0:45:4a:a7:f8:86:d7:20:
         5e:47:41:7d:4c:a2:29:60:ba:b9:33:9c:b1:61:df:e9:13:0a:
         77:a6:5c:d1:68:72:b9:74:1c:04:46:1c:19:b6:e5:07:bd:b1:
         5b:73:f2:75:09:ce:ac:b9:30:e7:69:20:d0:37:7a:89:cc:67:
         a8:0d:0b:47:ae:57:da:39:03:da:59:20:03:c4:26:3c:a8:cc:
         97:ed:d1:d8:5f:7a:b3:d0:fe:24:fd:d7:8f:52:b8:f4:cf:a2:
         ec:45:ca:48:e2:6e:ce:c9:c5:56:1c:88:2e:e6:9c:7c:d3:5f:
         42:1e:fb:6f:49:3f:9f:b6:7a:fe:8d:5d:3c:50:7e:c0:8f:a1:
         24:56:66:05:43:36:03:7a:8c:1e:2c:92:e7:5f:7c:5b:7a:c1:
         f7:aa:4d:3e:ed:37:4f:0c:d6:f8:66:5b:98:55:35:7e:56:31:
         26:d8:5d:bd:56:64:b8:8b:b6:b4:d7:d2:54:2f:ae:f2:eb:4d:
         f9:0e:27:fb:21:26:16:ff:08:77:4d:55:b1:92:11:95:0f:58:
         01:07:a3:3d:13:1b:10:20:f5:93:72:b3:6c:0b:64:ae:b6:28:
         03:7f:c4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:35:34 2025 by rpki-client