Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/3136382e3139342e3137362e302f32342d3234203d3e20323734363536.roa
File:                     3136382e3139342e3137362e302f32342d3234203d3e20323734363536.roa (raw, json)
Hash identifier:          p9lMMOycBUomn5PpXNWW6Z9pZil4EClbHR50XmQQV/A=
Subject key identifier:   1A:40:84:9D:CA:44:44:57:29:BF:A9:21:D8:70:07:CD:46:CD:7D:69
Certificate issuer:       /CN=45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C
Certificate serial:       5D878C9866AE4C53033C5AD985E6E0596F388935
Authority key identifier: 45:EE:BB:52:4C:BB:A5:D2:2E:E7:BF:9A:51:D7:D9:50:D3:DF:6A:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/3136382e3139342e3137362e302f32342d3234203d3e20323734363536.roa
Signing time:             Wed 16 Jul 2025 16:44:55 +0000
ROA not before:           Wed 16 Jul 2025 16:39:55 +0000
ROA not after:            Wed 15 Jul 2026 16:44:55 +0000
asID:                     274656
IP address blocks:        168.194.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.crl
                          rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 18:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:87:8c:98:66:ae:4c:53:03:3c:5a:d9:85:e6:e0:59:6f:38:89:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C
        Validity
            Not Before: Jul 16 16:39:55 2025 GMT
            Not After : Jul 15 16:44:55 2026 GMT
        Subject: CN=1A40849DCA44445729BFA921D87007CD46CD7D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:aa:4e:7c:02:c1:5f:fa:e5:db:bf:08:82:
                    61:b0:2b:48:b4:d0:ba:fd:5c:a0:ec:30:d9:11:47:
                    c2:25:53:1a:da:d2:b6:5d:06:61:aa:c3:73:38:6e:
                    f9:e1:40:8e:8c:75:f7:9f:fc:82:41:08:e0:07:40:
                    87:40:43:d3:dc:47:f7:04:a2:42:6a:c3:e8:6a:f8:
                    50:cd:07:f0:f6:1f:3b:b2:09:6b:aa:e3:8a:0d:7b:
                    aa:57:7d:da:fe:36:1f:14:cb:63:a3:ee:5a:e0:38:
                    21:eb:7a:42:ba:1d:ae:2c:94:c5:95:c0:71:b5:87:
                    7c:e3:0e:1c:1b:3e:f9:c3:ee:a3:67:03:9d:cf:1e:
                    39:7a:fb:a9:aa:64:a5:16:16:21:43:c7:fe:87:15:
                    58:db:25:65:4e:8a:26:74:31:3c:d9:bd:23:29:2f:
                    95:6d:6f:fd:8b:7c:a4:b2:b8:0f:ce:b6:37:93:45:
                    72:62:b1:97:d3:9e:16:cf:ae:62:a8:28:67:6b:2e:
                    ba:67:5d:fc:e9:78:6c:4b:9c:c6:45:bb:2c:ca:ff:
                    4c:fe:3a:a3:d6:07:91:dd:6e:f7:49:ba:fd:24:6a:
                    65:ea:bd:29:e8:12:8a:9d:d0:d2:fb:33:41:49:03:
                    42:eb:2d:99:2b:88:f5:a7:ea:a4:81:b1:51:43:b5:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:40:84:9D:CA:44:44:57:29:BF:A9:21:D8:70:07:CD:46:CD:7D:69
            X509v3 Authority Key Identifier:
                keyid:45:EE:BB:52:4C:BB:A5:D2:2E:E7:BF:9A:51:D7:D9:50:D3:DF:6A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/3136382e3139342e3137362e302f32342d3234203d3e20323734363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:b6:5d:1e:b7:db:a6:77:ae:23:74:63:1a:a3:ee:83:40:93:
         93:c3:2f:10:c9:07:ad:45:4a:dd:94:c1:a9:60:d1:2f:83:36:
         df:d5:74:7f:2f:ef:58:da:1c:7e:d0:73:0c:17:a9:96:6c:58:
         81:bf:b2:4a:61:3d:4d:e4:98:a9:49:20:4f:fb:f0:2e:37:7b:
         e4:44:4f:46:da:1d:94:c4:40:c7:da:57:65:9b:c6:b2:de:1c:
         ed:d3:60:a0:a6:27:28:5e:e0:1f:ef:cc:11:5c:dd:c1:6a:c2:
         e3:fb:54:05:f9:51:d0:f1:23:e3:e6:f7:01:94:27:95:97:ee:
         e7:76:bf:36:e9:74:81:f3:0c:6c:9a:67:a6:81:71:49:51:a7:
         3a:c5:d2:94:a6:cf:d2:d4:59:e3:f5:82:2d:59:a7:8b:76:25:
         6a:3c:ec:ce:31:be:18:04:72:7c:bb:b1:f4:df:fc:ed:8f:1a:
         c7:98:0d:82:c9:4b:69:46:d7:b1:04:9d:e5:c3:65:24:cc:43:
         fb:14:70:b0:38:8e:ab:ff:7f:3d:ce:63:50:27:6a:fc:20:e1:
         8f:bd:97:0d:8d:07:51:6c:19:4a:df:01:86:0c:32:10:9f:25:
         bd:1c:30:a4:45:8d:0b:28:a9:d0:21:9f:a0:a8:13:aa:91:91:
         8f:7d:87:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:07 2025 by rpki-client