Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232362e302f32342d3234203d3e20323639343035.roa
File:                     34352e3138352e3232362e302f32342d3234203d3e20323639343035.roa (raw, json)
Hash identifier:          xMjA5ShhmNErn8JnIU9C6wHdSks8jW2RgeNff0JOOUg=
Subject key identifier:   F2:4F:60:9F:13:33:65:64:64:3D:95:E3:4A:2C:27:51:DA:82:2E:42
Certificate issuer:       /CN=748041F88BBB1083E96FEC5DCF73AE0E40DA21EE
Certificate serial:       39CA6E56D4B38A2C595776D0E8C1B3107A52B7E5
Authority key identifier: 74:80:41:F8:8B:BB:10:83:E9:6F:EC:5D:CF:73:AE:0E:40:DA:21:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232362e302f32342d3234203d3e20323639343035.roa
Signing time:             Thu 12 Jun 2025 13:02:58 +0000
ROA not before:           Thu 12 Jun 2025 12:57:58 +0000
ROA not after:            Thu 11 Jun 2026 13:02:58 +0000
asID:                     269405
IP address blocks:        45.185.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.crl
                          rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 23:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ca:6e:56:d4:b3:8a:2c:59:57:76:d0:e8:c1:b3:10:7a:52:b7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748041F88BBB1083E96FEC5DCF73AE0E40DA21EE
        Validity
            Not Before: Jun 12 12:57:58 2025 GMT
            Not After : Jun 11 13:02:58 2026 GMT
        Subject: CN=F24F609F13336564643D95E34A2C2751DA822E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f7:88:b3:9b:15:a3:40:80:b5:22:ac:53:9e:
                    04:b9:bf:57:cb:82:17:0f:8e:5c:38:0b:bb:37:1b:
                    35:e1:3a:16:cb:fe:18:c6:62:4b:94:53:f2:49:59:
                    34:18:a0:14:6f:a6:52:95:50:e3:8a:3b:da:bb:25:
                    d4:0e:d1:cf:2c:21:5f:b4:1c:01:da:c8:7a:f5:39:
                    54:2c:a5:34:07:bf:12:3b:d5:ae:2a:a9:16:45:2a:
                    65:be:93:10:2c:29:4e:80:4b:91:cd:9d:f3:d1:b6:
                    8c:52:11:ee:05:0e:1d:82:0c:a1:b2:2c:fa:33:b6:
                    7b:50:58:8b:9b:14:53:08:6c:7d:18:8f:b3:ef:ff:
                    73:b8:a0:35:54:65:76:0a:6b:fb:9d:9b:d3:97:41:
                    3c:b4:c0:6f:5c:3a:d9:9e:82:25:f6:a6:68:84:b5:
                    ad:3f:9d:a8:e6:11:fd:8f:15:ca:18:b1:29:ce:47:
                    3c:dd:b1:14:9e:b6:bc:aa:e4:10:ee:44:51:34:bc:
                    85:37:ba:fd:a9:d4:99:0d:a7:7d:61:92:be:d2:02:
                    30:e0:fc:88:e5:0e:c2:11:99:76:c7:90:c4:e0:e7:
                    ea:10:ee:c2:6a:83:8b:dd:ff:e6:72:04:1e:5e:42:
                    e1:a2:b0:6e:13:75:4c:e7:3d:43:8e:57:b4:05:2b:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4F:60:9F:13:33:65:64:64:3D:95:E3:4A:2C:27:51:DA:82:2E:42
            X509v3 Authority Key Identifier:
                keyid:74:80:41:F8:8B:BB:10:83:E9:6F:EC:5D:CF:73:AE:0E:40:DA:21:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232362e302f32342d3234203d3e20323639343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:89:7a:c1:6a:3b:05:89:42:bf:7a:cd:b0:4b:02:2e:d2:6b:
         d0:c7:41:27:59:e8:9e:5b:b8:3d:b6:f0:90:23:48:b0:03:75:
         aa:d5:38:46:77:4b:d7:65:b8:d4:6b:50:9e:26:4c:15:7d:db:
         3b:41:d0:92:6b:2f:ed:e5:1f:30:d2:97:16:6a:f9:eb:c0:d2:
         c3:72:75:d4:64:20:5e:a1:03:7a:4b:dd:87:ad:73:1b:8c:52:
         bf:69:c0:a1:b7:0d:9f:92:8f:79:53:80:78:85:65:a4:08:ed:
         14:d0:08:94:36:09:9f:45:f8:6e:3c:9e:3d:cf:2b:78:ca:48:
         1c:34:a2:25:18:ab:69:e7:f6:97:94:b5:bb:8a:21:c2:fe:90:
         6e:91:bf:5a:8b:3a:40:2d:d2:50:b0:6d:3b:d8:df:51:f3:d0:
         a1:62:d0:9e:eb:37:f6:15:2d:3e:68:46:91:dc:45:5c:09:2c:
         71:97:23:78:05:91:9b:e4:84:55:ec:87:39:87:f3:42:a2:06:
         2f:c9:02:9a:59:65:49:37:5b:7a:0d:fb:37:59:07:9d:c1:2d:
         d2:19:9e:74:0e:0d:bf:a8:88:f1:f7:5a:44:18:06:32:60:fa:
         39:90:21:00:7d:4c:ed:29:46:85:0a:0d:e0:45:55:54:e0:0e:
         e1:e7:43:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:02:42 2025 by rpki-client