Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa
File:                     34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa (raw, json)
Hash identifier:          B7bkMTVvvMJbLRKotv0XjIUWl82PDZM6ex6/kWMOKJM=
Subject key identifier:   EA:62:03:1A:2A:85:8E:DD:ED:F1:C5:15:C6:E8:C7:7D:FB:59:1E:02
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       3C92B1704B42E2193BD1B1EEB5D3E9A44BC2BF8E
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa
Signing time:             Mon 14 Jul 2025 18:09:28 +0000
ROA not before:           Mon 14 Jul 2025 18:04:28 +0000
ROA not after:            Mon 13 Jul 2026 18:09:28 +0000
asID:                     271632
IP address blocks:        45.172.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 05:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:92:b1:70:4b:42:e2:19:3b:d1:b1:ee:b5:d3:e9:a4:4b:c2:bf:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Jul 14 18:04:28 2025 GMT
            Not After : Jul 13 18:09:28 2026 GMT
        Subject: CN=EA62031A2A858EDDEDF1C515C6E8C77DFB591E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:c1:bb:7e:d2:1d:33:e0:5e:49:d8:70:b8:
                    0e:ee:6c:25:24:71:49:e9:3e:e0:5e:ef:58:aa:06:
                    ea:9c:3b:cb:10:77:06:8c:7c:ff:c8:82:94:91:05:
                    eb:22:28:60:50:5a:e2:2f:aa:33:52:df:a7:90:48:
                    b7:6c:c5:97:57:e3:03:29:14:52:5d:08:3f:3c:b8:
                    84:fd:98:b0:6c:5e:fa:91:14:16:f1:aa:f0:91:d4:
                    c8:0b:79:93:48:44:1d:83:93:89:d0:82:9a:a5:44:
                    e5:02:f4:af:95:4e:75:07:a5:09:c6:59:34:16:27:
                    dd:58:87:8d:91:77:30:2f:4f:d0:e5:f7:9d:05:5b:
                    b5:a6:99:e3:44:bf:39:34:75:b5:3c:3a:06:8e:41:
                    61:35:33:26:50:f7:54:02:c2:68:6f:05:e1:7d:f3:
                    52:af:f3:12:9c:b0:e3:de:b8:cb:f8:2c:29:6c:ba:
                    ce:4e:a6:6a:20:7b:36:e6:09:d4:35:0c:56:c7:b3:
                    94:f4:48:14:b0:e3:c2:99:d0:02:37:05:1b:b4:c1:
                    b3:bc:9f:fd:81:ec:e6:2a:92:01:71:92:1c:82:48:
                    03:5d:2f:33:2b:54:17:af:90:44:f5:ef:40:2f:22:
                    7e:38:ba:7d:75:91:e6:60:cf:11:34:c7:ca:6c:16:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:62:03:1A:2A:85:8E:DD:ED:F1:C5:15:C6:E8:C7:7D:FB:59:1E:02
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:db:97:2e:41:67:b8:9f:9b:5c:db:4f:2e:d6:af:89:ba:a6:
         23:50:4a:63:24:73:d9:ca:ad:f4:3d:3c:a1:53:c1:6e:ed:91:
         0d:21:e9:d2:7d:b5:8e:db:96:02:63:56:e8:60:63:d0:6e:71:
         81:f6:a6:55:b7:3d:25:27:40:5a:85:25:3b:79:18:14:c6:52:
         49:a3:76:23:ae:e5:cd:24:42:34:2b:79:a0:0d:09:39:11:bd:
         9d:54:1a:8e:27:a2:a7:57:8d:b9:fe:65:8a:a2:07:6d:73:c5:
         4d:b3:bd:d9:5d:a6:ae:12:6a:37:6d:0b:17:9f:a2:1a:db:b1:
         ff:e7:08:56:e1:7a:47:17:20:f0:39:d1:bb:0b:8d:97:6d:5f:
         a9:39:aa:51:36:b8:6a:6b:38:af:d3:d1:95:a2:f1:af:af:f1:
         13:4d:65:b3:58:db:64:1a:4a:12:16:05:52:7f:dd:d9:a7:07:
         b6:e4:17:90:8a:8b:5c:20:d5:3f:12:9c:52:55:af:52:ce:87:
         f4:67:95:a5:27:bf:45:11:87:1f:f2:ab:ae:fb:ad:43:aa:23:
         92:f0:82:a1:e4:7a:c6:92:06:8a:bd:63:f5:0b:35:19:2e:71:
         48:9f:60:b7:ad:ae:78:36:a5:0c:6e:fa:67:83:21:4b:db:ff:
         5e:99:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:10:17 2025 by rpki-client