Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/34352e3232392e3135312e302f32342d3234203d3e20323731373038.roa
File:                     34352e3232392e3135312e302f32342d3234203d3e20323731373038.roa (raw, json)
Hash identifier:          m7fanAuWMqdRAiDRdvGpGqzVkHxLfxaieqdJgeGJhqs=
Subject key identifier:   91:CA:C3:29:86:BA:00:60:4C:6D:ED:14:54:7E:86:24:37:3F:FB:B9
Certificate issuer:       /CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
Certificate serial:       7A06601BE2C3A4824A7E61B7A520DF3D24F409EE
Authority key identifier: 70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/34352e3232392e3135312e302f32342d3234203d3e20323731373038.roa
Signing time:             Tue 29 Jul 2025 22:38:13 +0000
ROA not before:           Tue 29 Jul 2025 22:33:13 +0000
ROA not after:            Tue 28 Jul 2026 22:38:13 +0000
asID:                     271708
IP address blocks:        45.229.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl
                          rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 10:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:06:60:1b:e2:c3:a4:82:4a:7e:61:b7:a5:20:df:3d:24:f4:09:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
        Validity
            Not Before: Jul 29 22:33:13 2025 GMT
            Not After : Jul 28 22:38:13 2026 GMT
        Subject: CN=91CAC32986BA00604C6DED14547E8624373FFBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d0:c0:73:3f:7b:5a:c1:13:f9:cd:b0:17:09:
                    5b:03:87:67:f7:77:3a:7d:72:e8:a7:ad:d0:1a:8f:
                    dd:3a:89:67:68:b4:b3:04:72:38:fb:3b:6e:5b:28:
                    2f:b8:14:b0:f3:af:f1:a1:f3:d0:b9:63:3c:34:77:
                    86:b8:49:6b:54:be:44:f2:25:6f:99:c6:02:24:3e:
                    ba:35:56:18:1c:67:a6:19:c2:57:d1:2a:2b:f2:ee:
                    b3:9f:62:59:f5:2d:dd:7c:81:63:bd:73:c2:0c:1f:
                    1c:33:3c:0f:2d:72:1f:c7:25:8a:64:9f:d5:f5:64:
                    d6:dd:e6:22:be:81:f3:90:a1:b1:c5:0c:29:0b:3f:
                    cc:7e:4f:e6:36:9a:dd:37:81:ab:63:cc:b1:73:ec:
                    32:b6:b3:2c:a2:25:d3:64:7e:ba:fa:bf:6d:75:85:
                    41:31:12:d1:3f:15:a7:5e:8e:57:7b:6b:f5:d1:d3:
                    af:cc:08:93:2d:30:76:39:73:64:96:0d:84:09:25:
                    eb:d8:ba:95:39:77:c6:1e:e6:1a:81:e8:20:73:e7:
                    88:5f:f5:21:32:fc:39:85:0b:57:fd:b1:5f:68:98:
                    c4:cf:ba:d8:2c:5c:3f:7f:ce:5e:bd:74:de:f2:26:
                    ee:3a:87:6c:66:68:28:1f:4a:01:77:ec:fb:0a:91:
                    4e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CA:C3:29:86:BA:00:60:4C:6D:ED:14:54:7E:86:24:37:3F:FB:B9
            X509v3 Authority Key Identifier:
                keyid:70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/34352e3232392e3135312e302f32342d3234203d3e20323731373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:78:f7:95:aa:d2:ee:9b:0e:f6:42:ac:65:4f:84:34:67:
         88:55:96:2d:0a:82:ea:11:05:ab:fd:75:f3:de:6c:89:1b:a0:
         4d:86:81:13:9f:d8:2d:08:c3:56:f9:30:64:ac:fc:17:82:79:
         3c:06:71:34:eb:d6:fd:5d:97:8f:56:34:77:95:87:37:02:aa:
         11:bd:98:c7:d8:a5:d4:3a:0d:36:52:01:87:84:3d:f3:86:67:
         93:12:ae:69:a8:99:a4:70:96:62:30:b0:51:9e:30:6c:ba:6f:
         33:e8:2a:ea:e7:20:f2:00:91:38:9f:f3:39:83:9f:c8:c1:7b:
         49:7c:40:6c:a2:52:c3:38:73:da:eb:c6:7d:c9:04:49:71:83:
         16:76:ac:6e:47:e4:ea:d7:cd:7f:64:13:f4:e9:09:0b:22:17:
         73:ef:5e:27:b7:1f:11:28:89:46:a5:86:5a:73:87:fa:c4:31:
         3f:6c:78:d0:a3:a8:a7:6b:a2:ac:21:8a:1c:67:f8:bf:eb:e4:
         c6:74:b4:04:82:3c:f9:59:ce:48:67:b1:07:94:a0:65:06:9a:
         27:52:33:b6:83:46:c4:58:d3:c3:06:1b:74:92:d0:31:47:09:
         7d:4c:0e:93:b0:31:a5:52:4a:ed:71:40:8a:97:52:25:cb:04:
         fb:e5:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:20:51 2025 by rpki-client