Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36312e302f32342d3332203d3e20323639323230.roa
File:                     34352e3138322e36312e302f32342d3332203d3e20323639323230.roa (raw, json)
Hash identifier:          oy3/Ru/w87kKE28k9kpWFIQPqR/7v5DZt1boF576KWg=
Subject key identifier:   F8:F3:C5:4F:75:0D:BF:BF:DB:4A:F8:AF:59:72:4F:BC:03:EA:F1:F2
Certificate issuer:       /CN=44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A
Certificate serial:       5A248EBC17D7E9705F0CC18C83C54308B3AAD068
Authority key identifier: 44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36312e302f32342d3332203d3e20323639323230.roa
Signing time:             Mon 19 May 2025 14:29:50 +0000
ROA not before:           Mon 19 May 2025 14:24:50 +0000
ROA not after:            Mon 18 May 2026 14:29:50 +0000
asID:                     269220
IP address blocks:        45.182.61.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.crl
                          rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:24:8e:bc:17:d7:e9:70:5f:0c:c1:8c:83:c5:43:08:b3:aa:d0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A
        Validity
            Not Before: May 19 14:24:50 2025 GMT
            Not After : May 18 14:29:50 2026 GMT
        Subject: CN=F8F3C54F750DBFBFDB4AF8AF59724FBC03EAF1F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ed:67:1d:c5:5f:51:a2:d7:c5:0d:d7:7b:62:
                    19:ca:00:6a:61:76:66:f1:15:5d:d0:43:63:fc:aa:
                    e2:ac:fc:d0:a9:09:80:56:4d:84:25:b5:f8:64:8a:
                    dd:b3:d1:1b:e1:47:ff:34:f7:d2:a2:4c:32:9f:0e:
                    e5:dd:f8:17:e8:9f:93:f5:fd:d2:e4:e9:e3:60:9b:
                    43:a0:e7:bf:66:e6:2c:f9:4d:60:9d:00:c5:0f:c4:
                    a6:a1:6f:79:47:4e:4b:63:50:de:c8:52:38:7d:1d:
                    74:72:7e:7a:8d:8f:ef:64:8b:fa:62:c0:3e:c4:6b:
                    32:b7:d9:8b:85:fc:e0:36:81:45:48:a7:2b:88:0c:
                    9c:3d:d3:fb:5a:e4:7a:9e:1c:ac:a1:c6:7a:ea:c5:
                    b6:46:66:32:3a:1d:e7:d4:82:7a:7b:ee:d7:f2:4f:
                    d9:d4:e3:7c:aa:e6:6a:37:54:b7:e0:ee:16:00:71:
                    3b:1a:fb:e3:da:e5:7d:2f:f9:91:06:96:35:b9:3b:
                    ef:42:b4:57:34:1c:64:42:a8:79:f6:3f:25:b3:4d:
                    52:df:df:3f:fd:47:38:9a:00:30:40:a3:d5:96:d3:
                    32:ea:57:8b:aa:dc:26:16:e9:6f:ba:71:cf:33:7e:
                    63:71:7a:6e:04:fa:2a:de:a0:62:c5:bc:15:9a:c2:
                    cd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F3:C5:4F:75:0D:BF:BF:DB:4A:F8:AF:59:72:4F:BC:03:EA:F1:F2
            X509v3 Authority Key Identifier:
                keyid:44:F6:D8:3B:E0:FA:5D:3B:20:9C:B8:9B:51:8F:74:DA:0C:D2:BA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44F6D83BE0FA5D3B209CB89B518F74DA0CD2BA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36312e302f32342d3332203d3e20323639323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:32:f4:a2:44:d5:0f:32:51:09:a5:62:d6:e5:b1:e2:5a:
         60:67:a4:ca:a4:24:04:9e:80:4d:db:e3:54:2a:44:2c:96:fc:
         73:97:3d:2a:6f:86:69:dd:97:52:aa:0e:a1:03:22:4d:3b:e9:
         fc:3c:0e:fa:b9:01:75:65:64:1b:56:60:1a:a3:64:45:33:17:
         6b:77:21:b3:18:e4:50:30:f8:3b:5a:dc:31:aa:41:3b:b3:91:
         ac:48:c2:33:b1:2a:08:b7:27:04:1a:c1:de:5e:78:b0:51:2b:
         50:6f:cc:c3:d5:c0:07:53:94:e2:6d:ae:1a:4a:b2:db:ca:1a:
         df:2d:f5:23:30:0f:33:02:19:4c:88:3d:8e:3c:a6:22:8a:23:
         4d:73:e1:16:a1:15:e5:9b:46:29:e0:a3:d9:64:66:2c:50:3b:
         32:e6:48:61:ad:8f:63:b6:a3:58:d2:42:5b:08:55:1a:7c:92:
         a6:16:13:fd:b4:42:b1:d5:dd:1d:ef:c1:89:f3:d8:18:da:2a:
         1f:0f:7e:9c:e0:f6:27:48:57:fa:1f:ef:24:60:57:5e:97:48:
         8d:8f:63:d7:d7:04:ea:d9:91:f0:4a:13:d6:7c:37:1c:50:89:
         51:9e:2e:33:4c:31:85:a0:95:9e:77:0f:9c:8e:99:12:23:9d:
         0d:76:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:39:40 2025 by rpki-client