Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34322e302f32342d3234203d3e20323638353936.roa
File:                     34352e3136342e34322e302f32342d3234203d3e20323638353936.roa (raw, json)
Hash identifier:          p/E0OvTKOQImYrbkiAqCQBiNaunJ3Eq1T7t6hAvC+MA=
Subject key identifier:   C3:EB:77:3F:A9:5E:6D:32:ED:FF:9D:58:64:63:E7:E9:99:D5:51:1B
Certificate issuer:       /CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
Certificate serial:       26185BEED7982AC48D43A93A18BF31D53F400578
Authority key identifier: 2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34322e302f32342d3234203d3e20323638353936.roa
Signing time:             Sat 02 Aug 2025 02:12:19 +0000
ROA not before:           Sat 02 Aug 2025 02:07:19 +0000
ROA not after:            Sat 01 Aug 2026 02:12:19 +0000
asID:                     268596
IP address blocks:        45.164.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl
                          rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 16:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:18:5b:ee:d7:98:2a:c4:8d:43:a9:3a:18:bf:31:d5:3f:40:05:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
        Validity
            Not Before: Aug  2 02:07:19 2025 GMT
            Not After : Aug  1 02:12:19 2026 GMT
        Subject: CN=C3EB773FA95E6D32EDFF9D586463E7E999D5511B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:78:eb:09:1d:3f:5a:2f:43:2e:df:27:15:ab:
                    a2:97:9c:eb:81:e4:29:ef:5c:3c:20:e7:ab:58:f7:
                    cf:59:e4:a9:c4:76:90:bb:af:f4:74:36:ff:25:cf:
                    26:54:66:97:53:f3:be:cc:c7:e1:e2:2a:b8:bc:0a:
                    4f:28:54:1d:91:64:91:68:48:e7:aa:b5:a9:87:a5:
                    77:cb:55:3b:5b:97:41:85:87:89:de:3f:3d:6d:3d:
                    56:e3:01:3b:6b:dc:06:60:c4:7e:a3:6b:ef:77:79:
                    59:ff:f3:6e:11:f7:64:ce:87:c0:98:eb:4d:51:6d:
                    78:75:86:8d:1d:b0:ff:e2:a3:48:7f:75:ec:c8:6b:
                    6e:d6:cd:96:77:89:c7:6d:cb:6f:3a:9b:b5:a2:bd:
                    ef:19:f8:2b:8d:65:7e:a0:f1:cc:c3:0e:ce:aa:0d:
                    a7:3a:b3:b8:49:f4:bd:f6:37:61:66:91:22:aa:0f:
                    c2:72:f2:b5:ba:c8:91:77:94:f4:9e:73:5e:6c:7c:
                    c1:2d:d8:83:49:b0:3c:0c:26:41:bb:39:46:7d:22:
                    40:f9:04:bc:70:03:6b:83:42:0c:a1:c0:aa:d7:89:
                    07:50:94:89:31:b0:e4:ae:a5:43:9d:44:b6:b6:05:
                    60:e2:5e:e6:15:77:e6:31:c2:16:1a:4a:7c:48:0e:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EB:77:3F:A9:5E:6D:32:ED:FF:9D:58:64:63:E7:E9:99:D5:51:1B
            X509v3 Authority Key Identifier:
                keyid:2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34322e302f32342d3234203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:18:ba:da:46:0a:5c:e7:da:17:e0:6c:b7:50:e7:27:4f:c3:
         12:f6:20:05:38:c4:0b:d7:87:95:60:da:22:41:e1:b7:11:0d:
         e2:02:68:68:84:75:94:37:4d:c4:8d:db:af:43:77:5a:7f:7b:
         d4:60:e7:d3:07:8d:f7:96:24:ce:0d:ce:34:57:83:e1:60:a6:
         8d:a3:69:9d:98:4b:dc:f4:85:bd:31:61:75:91:49:7b:d9:00:
         98:f1:50:f6:be:1f:52:12:70:8a:88:d9:86:8c:55:04:3a:bb:
         b9:db:94:d2:16:b0:7c:8b:4f:83:b1:99:0a:b0:e0:90:17:61:
         60:07:d4:a5:23:84:b5:63:96:e3:3d:43:5d:55:bb:4c:89:76:
         9f:13:4c:bb:cd:a1:ee:ad:0d:d9:04:c0:78:ac:ad:9c:e6:75:
         51:4f:00:39:3a:dc:77:83:e9:55:9b:36:c7:63:db:3a:1f:3d:
         ba:b7:3b:78:0e:44:d4:55:cd:62:a6:f9:f2:ee:90:bd:a5:2b:
         70:64:3d:13:d7:30:3e:20:9e:8e:25:88:c9:72:33:f1:e6:22:
         c2:25:ae:68:a1:0f:c3:6a:77:eb:66:e4:c4:59:7b:9a:8e:c8:
         d4:3b:e4:05:7d:0d:85:15:07:90:e4:07:10:31:04:73:37:ed:
         f4:d7:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:30:25 2025 by rpki-client