Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34312e302f32342d3234203d3e20323638353936.roa
File:                     34352e3136342e34312e302f32342d3234203d3e20323638353936.roa (raw, json)
Hash identifier:          3djr4zaaOHBQVszvNS4ML3YDInpoO3/XomP175oDp3c=
Subject key identifier:   3D:18:11:52:45:38:5A:42:D2:0D:92:3D:22:33:99:1F:24:AD:38:88
Certificate issuer:       /CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
Certificate serial:       166100D71B331C49C6A10F1EE2A15C408DB1C087
Authority key identifier: 2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34312e302f32342d3234203d3e20323638353936.roa
Signing time:             Sat 02 Aug 2025 02:12:14 +0000
ROA not before:           Sat 02 Aug 2025 02:07:14 +0000
ROA not after:            Sat 01 Aug 2026 02:12:14 +0000
asID:                     268596
IP address blocks:        45.164.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl
                          rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 16:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:61:00:d7:1b:33:1c:49:c6:a1:0f:1e:e2:a1:5c:40:8d:b1:c0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
        Validity
            Not Before: Aug  2 02:07:14 2025 GMT
            Not After : Aug  1 02:12:14 2026 GMT
        Subject: CN=3D18115245385A42D20D923D2233991F24AD3888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:6a:c8:46:f3:f8:bf:d7:a1:7b:1d:26:22:
                    c0:10:f8:a6:d5:e7:5c:2c:1a:c8:6b:53:1d:72:d8:
                    f7:b3:8f:10:de:0a:fb:d7:b9:d4:8f:fa:00:91:6e:
                    ee:96:bb:78:c6:54:6c:11:a3:93:2d:9b:c9:1b:ec:
                    ef:fb:2f:e3:5e:8a:77:10:1d:ee:e6:57:98:5f:ad:
                    04:e9:1b:18:f9:d8:bc:63:0e:08:57:cc:76:a0:9c:
                    7e:08:df:3a:7a:ec:04:f7:ba:86:3b:0f:78:5b:cb:
                    a0:98:ba:bb:3a:7b:e4:ec:3a:ae:97:b5:14:70:5c:
                    ad:ec:47:10:df:8f:03:1d:56:ae:a8:f2:eb:d7:e8:
                    80:67:59:81:04:e6:bd:a1:dc:e1:45:7c:ed:ac:87:
                    54:3e:70:c2:74:3c:1d:cd:8a:3c:bd:04:bc:b9:98:
                    ef:87:06:aa:0d:44:55:57:21:cb:a6:fb:6a:2e:ab:
                    88:1d:9a:24:1c:9e:32:84:18:48:f9:69:a5:49:08:
                    c0:a3:d8:30:4d:a7:de:35:5d:fc:92:52:f0:78:97:
                    9c:df:a9:67:8e:d1:4a:33:3b:dc:ee:c5:14:07:aa:
                    3e:02:26:81:80:81:c2:34:68:99:ff:95:80:8c:be:
                    be:ce:c6:45:b3:15:f3:16:9e:bf:5d:85:c1:0e:72:
                    6e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:18:11:52:45:38:5A:42:D2:0D:92:3D:22:33:99:1F:24:AD:38:88
            X509v3 Authority Key Identifier:
                keyid:2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34312e302f32342d3234203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:d4:2f:08:8a:af:d0:25:be:72:f7:23:de:b3:10:78:46:83:
         dd:78:a6:ce:34:66:91:5c:df:94:ac:a2:e7:1a:b8:57:88:9b:
         32:8b:6a:e8:fd:94:42:eb:b3:46:55:b9:01:8c:4c:25:cc:9e:
         7d:31:73:56:5b:da:5c:8e:0d:6f:ea:da:6a:e8:9e:e1:b8:df:
         8f:8d:19:47:f1:c0:e0:38:90:d0:d2:97:18:fe:0c:ff:ea:d6:
         ca:e7:25:35:9a:9e:68:64:01:5b:ed:b9:d5:f4:c7:94:e6:16:
         18:2f:59:21:18:6a:e1:50:5f:89:a4:75:be:e4:7d:fd:06:9e:
         62:97:fa:7b:76:ba:32:74:e4:1c:30:5b:08:e7:ca:d2:a0:9c:
         dc:28:65:e5:c9:85:67:a6:d1:a5:e0:05:05:40:ae:e2:9d:77:
         e6:b8:66:b7:27:1b:1e:ce:16:cd:7e:ef:d1:4c:54:a0:17:1a:
         07:20:ee:da:07:86:04:f8:98:bf:8c:27:fd:87:b4:d0:34:da:
         9b:8c:8b:d2:e4:05:2c:9c:76:ff:e5:a3:be:a7:7d:2f:3e:f2:
         77:25:8e:4c:0f:22:21:8d:f3:f7:67:59:da:4c:00:61:dc:51:
         78:c0:e9:a6:63:14:45:0d:0c:03:c9:95:a6:e5:67:5e:d6:c3:
         3d:b8:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:30:20 2025 by rpki-client