Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3134382e302f32342d3234203d3e20323639313037.roa
File:                     34352e3137392e3134382e302f32342d3234203d3e20323639313037.roa (raw, json)
Hash identifier:          x6LWmVIoNsXvDrNQg/D3nm1eeJfrGPvPxCzYG2J7Njc=
Subject key identifier:   99:59:72:14:6F:46:74:54:9E:17:F6:3A:40:CF:E1:AC:AA:B7:1A:99
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       3564B8BD3BDA338EE5C613EC20430490A9C64DBC
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3134382e302f32342d3234203d3e20323639313037.roa
Signing time:             Mon 14 Jul 2025 21:00:01 +0000
ROA not before:           Mon 14 Jul 2025 20:55:01 +0000
ROA not after:            Mon 13 Jul 2026 21:00:01 +0000
asID:                     269107
IP address blocks:        45.179.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:64:b8:bd:3b:da:33:8e:e5:c6:13:ec:20:43:04:90:a9:c6:4d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Jul 14 20:55:01 2025 GMT
            Not After : Jul 13 21:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:96:ce:03:f4:d4:54:32:ca:3d:cf:e7:60:
                    35:44:ed:17:33:bb:54:43:21:e3:ed:07:34:61:89:
                    08:51:7e:48:29:38:b3:eb:f0:81:72:fa:ef:07:93:
                    01:ea:2b:9f:4a:f7:c2:3d:10:0f:12:6d:da:62:42:
                    b5:2c:a9:ef:f5:b9:69:7b:58:d2:dd:51:87:d4:0b:
                    7f:0f:90:36:5f:03:99:a9:45:39:f3:08:28:95:79:
                    a6:b6:d2:f0:b0:13:96:34:3f:80:3f:3c:44:2d:aa:
                    b5:70:77:cd:a3:fc:21:a6:25:2c:d2:3a:43:98:25:
                    d9:66:dc:3b:55:63:d3:99:05:b6:0d:6a:b2:f5:d9:
                    e4:ac:1a:89:98:af:af:bb:95:f5:5e:10:e8:15:15:
                    bc:9c:26:39:79:72:ac:a7:6a:93:26:aa:d6:5f:9c:
                    9a:d0:dd:54:48:6b:cf:5e:87:63:38:c7:9c:ca:c3:
                    d9:9b:88:b3:e3:c3:01:3b:30:af:8b:81:a4:ff:68:
                    c6:bd:e6:45:83:ff:ae:cd:f0:e6:0d:b4:b4:a7:88:
                    25:20:b0:8e:c7:46:2e:a3:cf:32:a3:43:7b:88:49:
                    80:63:cb:88:46:a5:7b:08:65:cf:1a:20:58:d8:39:
                    b6:f5:48:ec:81:9a:4e:96:a8:d2:1b:8e:97:04:eb:
                    79:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:59:72:14:6F:46:74:54:9E:17:F6:3A:40:CF:E1:AC:AA:B7:1A:99
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3134382e302f32342d3234203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:08:8c:12:56:24:dd:40:be:7b:51:25:14:5e:45:51:15:1f:
         58:93:02:63:7a:b6:c7:de:c2:f7:b5:46:68:9d:07:1a:fc:19:
         41:41:70:0c:e0:9e:2e:2c:60:1d:ee:6c:59:86:0a:e8:8f:e7:
         85:47:f9:88:ae:15:74:66:28:89:6c:3b:78:59:b3:b4:d1:e4:
         e7:24:c4:9f:84:c0:ed:29:5a:60:fe:5e:65:94:82:36:c1:af:
         58:52:12:27:a6:4c:e1:c9:8d:1a:ec:45:a3:02:93:25:fa:dd:
         e0:1e:67:23:2b:4e:9b:b6:17:ce:b3:7f:b0:53:12:49:d2:86:
         31:36:4a:2b:80:d0:51:65:7d:d1:e1:93:18:db:43:e6:63:a9:
         67:70:93:ab:cb:ff:55:86:aa:52:9e:21:04:cc:ff:7d:e1:3d:
         4b:7a:00:09:35:36:bb:33:e3:57:f3:35:c8:c9:b5:d4:87:02:
         92:64:51:84:c6:1d:09:8b:73:55:04:3c:8f:86:db:6f:d6:7d:
         c1:98:cf:99:c9:e0:a5:6c:3d:85:31:59:8d:2c:c8:cd:18:f0:
         55:91:8e:58:57:21:58:c7:6d:ff:13:12:45:39:58:b5:58:24:
         e2:70:55:81:b6:ae:87:99:94:86:87:73:cd:bb:89:6d:01:33:
         5e:8c:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:05:26 2025 by rpki-client