Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34322e302f32332d3233203d3e20323638353936.roa
File:                     34352e3136342e34322e302f32332d3233203d3e20323638353936.roa (raw, json)
Hash identifier:          6KlQD+pV8geK79mH9wLDg7MsB4W34HBF9ATCCOIaeos=
Subject key identifier:   A6:85:BF:7C:CF:D9:A0:23:6C:75:CA:1C:93:5E:E7:97:DE:C4:27:42
Certificate issuer:       /CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
Certificate serial:       6139B807BBB3AEE8B1237F1F85F95B19825C4BFC
Authority key identifier: 2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34322e302f32332d3233203d3e20323638353936.roa
Signing time:             Sat 02 Aug 2025 02:12:20 +0000
ROA not before:           Sat 02 Aug 2025 02:07:20 +0000
ROA not after:            Sat 01 Aug 2026 02:12:20 +0000
asID:                     268596
IP address blocks:        45.164.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl
                          rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 16:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:39:b8:07:bb:b3:ae:e8:b1:23:7f:1f:85:f9:5b:19:82:5c:4b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
        Validity
            Not Before: Aug  2 02:07:20 2025 GMT
            Not After : Aug  1 02:12:20 2026 GMT
        Subject: CN=A685BF7CCFD9A0236C75CA1C935EE797DEC42742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:94:b4:94:73:d2:fd:a8:c6:84:25:46:99:
                    85:a0:00:47:df:df:73:32:ac:44:f6:41:7a:8e:9b:
                    8d:7f:d7:8c:94:f9:87:6f:8f:c5:2c:07:b0:21:63:
                    fb:15:2f:d4:f3:78:17:d0:df:82:e9:9a:bd:37:19:
                    e1:cf:cb:d4:8f:f5:46:25:6f:df:a8:33:8a:44:ae:
                    9d:24:63:f3:78:1a:fa:bc:60:b4:ba:01:19:67:35:
                    b1:fc:40:7b:bf:6e:bf:8b:a0:0b:0c:e7:55:97:bd:
                    d9:72:30:45:14:c5:07:4d:a1:f1:78:31:bc:27:12:
                    69:5a:60:e4:dd:dc:cf:00:f9:5c:8f:df:9e:2c:e4:
                    23:53:a3:b6:a4:ae:25:6d:0f:ac:7c:c1:11:1e:19:
                    4e:ac:8a:92:f5:28:a2:3f:34:01:90:66:b1:d9:75:
                    6d:dc:e5:36:5f:96:d3:ed:c6:ca:a4:5b:4b:f0:41:
                    49:a0:c0:5c:d5:4e:1f:c7:fb:2c:71:6a:d5:54:e8:
                    0c:93:8c:79:95:6d:2e:11:70:97:21:e2:49:93:f5:
                    b1:29:b0:2e:d6:29:5c:72:84:03:d8:35:9a:c6:48:
                    11:cf:ba:09:eb:ba:98:4c:1c:23:5f:f9:3f:72:6d:
                    bf:4d:c2:da:a2:54:6a:1a:10:14:a4:05:7d:86:d7:
                    0c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:85:BF:7C:CF:D9:A0:23:6C:75:CA:1C:93:5E:E7:97:DE:C4:27:42
            X509v3 Authority Key Identifier:
                keyid:2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34322e302f32332d3233203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:26:13:44:c5:72:ce:c7:0b:f3:6b:37:2a:28:23:cd:03:79:
         17:07:92:bb:b6:4a:cd:26:09:49:da:eb:1e:a2:0a:20:72:df:
         92:36:6b:69:67:f8:ad:1b:11:7c:41:2c:bd:27:17:8c:d2:82:
         9c:4d:bc:01:e6:94:95:5f:b5:9e:0d:c2:09:df:c9:6d:5a:0a:
         a3:8e:3e:b8:21:bd:f1:30:78:ac:2a:48:68:71:71:5e:a5:f6:
         49:fe:0c:05:72:f1:4a:38:1b:77:dd:15:79:d9:a9:9b:39:7b:
         21:1a:f9:d5:3c:66:63:7a:43:ac:f2:bf:03:2e:60:c1:62:2c:
         44:82:49:f8:56:36:42:8c:b3:09:d8:44:6a:5d:2f:6d:4a:ad:
         fe:52:7b:49:7f:06:6c:ed:0c:84:de:43:e2:ce:32:6c:84:d9:
         a2:82:1b:66:99:49:be:a7:53:6c:3b:d0:ee:59:d3:e4:54:fc:
         31:b5:b7:f2:83:47:c5:ac:8a:16:97:09:51:96:f7:d4:ac:95:
         41:b1:e3:ac:2d:9d:88:b3:f7:c3:07:7d:3d:1a:01:82:94:f3:
         c1:f5:ae:ee:36:e9:fa:e3:5f:18:2c:1c:c5:3d:81:8d:dc:c4:
         5c:00:3b:a6:f1:9b:99:79:1c:de:1f:c1:66:bd:b4:0d:09:b9:
         d9:e0:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:20 2025 by rpki-client