Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3135302e302f32342d3234203d3e20323639313037.roa
File:                     34352e3137392e3135302e302f32342d3234203d3e20323639313037.roa (raw, json)
Hash identifier:          VFkDhPc1oBPzJAg/yVD+xpQs6sYERAJ3i5KPeXZqX3A=
Subject key identifier:   39:6F:17:63:26:F6:3C:68:43:FF:89:97:AA:83:25:B4:21:DD:38:E3
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       0C196BBB52927C69CB24BA6387ABF13CF67DFC90
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3135302e302f32342d3234203d3e20323639313037.roa
Signing time:             Mon 14 Jul 2025 21:00:02 +0000
ROA not before:           Mon 14 Jul 2025 20:55:02 +0000
ROA not after:            Mon 13 Jul 2026 21:00:02 +0000
asID:                     269107
IP address blocks:        45.179.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:19:6b:bb:52:92:7c:69:cb:24:ba:63:87:ab:f1:3c:f6:7d:fc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Jul 14 20:55:02 2025 GMT
            Not After : Jul 13 21:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:0e:96:06:19:b5:1b:4f:8a:94:0f:ea:d7:
                    55:ad:ba:57:a5:b5:3f:3a:6f:b8:2d:3f:77:6a:85:
                    6f:49:08:41:27:9f:d3:7f:f9:bf:7d:e7:77:af:03:
                    02:f6:e8:6c:3e:0c:02:00:13:48:f0:78:29:b9:5c:
                    3d:b8:f7:0b:9c:10:36:eb:f8:0e:bd:ca:f5:cc:fd:
                    f2:0a:e5:ba:e8:35:47:c6:5a:35:ed:66:f7:10:b8:
                    af:fd:b3:71:da:a2:86:f5:2e:2d:84:ad:af:06:ba:
                    70:b5:b3:c7:fd:c3:f3:72:2e:a6:c4:b6:62:cc:71:
                    a1:23:b0:86:9a:b2:1e:59:67:ce:73:5c:1b:45:76:
                    34:b8:00:27:c2:9c:ad:fd:7c:e8:92:c0:36:4c:d3:
                    fc:3a:d4:d8:c1:cb:cf:c4:7f:aa:82:88:bf:f1:6c:
                    9f:dc:c5:91:aa:e9:fd:45:d8:b7:46:bc:b0:1a:37:
                    9b:e5:6d:fb:9c:35:06:79:e3:9b:e9:da:ab:8e:16:
                    1b:07:5d:1a:d6:2c:ae:b4:b8:4a:30:8d:ec:70:d6:
                    6d:e9:ef:77:2a:df:28:4f:6b:be:64:cc:4e:20:f5:
                    4b:53:d9:3d:28:ff:7b:f3:fb:cc:0b:0a:5c:50:c8:
                    e1:7c:a5:7b:fb:29:fb:57:c1:bf:da:c5:41:5f:42:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6F:17:63:26:F6:3C:68:43:FF:89:97:AA:83:25:B4:21:DD:38:E3
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/34352e3137392e3135302e302f32342d3234203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:51:d7:23:72:74:36:b3:1e:ea:14:80:27:6c:94:20:9b:85:
         97:6f:a2:d5:45:91:97:96:c0:35:e0:04:f0:52:18:0f:ac:cb:
         a8:69:c2:ed:f4:b8:81:71:f6:0d:63:a4:13:9e:8d:33:9e:72:
         b5:80:8f:da:2c:73:e1:b4:e8:4e:be:4d:8f:d2:fd:9e:db:d8:
         98:02:7e:f7:ff:bf:64:cf:50:4a:58:e6:2a:45:39:53:fb:1a:
         bc:55:80:f3:1b:7a:5c:0b:38:a8:ac:aa:b5:4f:98:7c:d4:8e:
         3d:6b:c7:39:1a:2f:28:cd:0a:2c:50:76:73:6f:6c:84:ad:b6:
         83:3e:74:0d:21:83:a9:a2:fa:5a:be:96:2f:99:ed:51:85:0b:
         02:1c:2c:4a:ef:77:8f:6b:b6:d5:1e:08:4e:01:39:80:87:f8:
         cb:1d:f0:94:b6:c6:7f:73:1a:d9:ae:d2:18:f6:b7:83:f4:ad:
         01:31:6e:a7:50:4f:e2:66:58:8d:22:ef:b4:ff:71:86:2a:df:
         1b:dc:79:45:b5:0c:7d:1a:45:8a:16:56:e6:92:db:57:8d:b9:
         bd:a5:14:f8:b5:62:f9:be:43:41:95:5d:ac:aa:cd:38:3b:eb:
         a0:24:e8:d9:68:29:26:d7:5e:33:ff:58:c7:f4:0a:d4:37:7d:
         78:4a:f9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:24:15 2025 by rpki-client