Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/a6XeReMMdcMPQz8TziAFUJU6LZraT5Lf1D4W3vUXywv/0/34352e3232342e3133322e302f32322d3234203d3e20323637363539.roa
File:                     34352e3232342e3133322e302f32322d3234203d3e20323637363539.roa (raw, json)
Hash identifier:          Eu8H1iZGq9JYu7M64QsFPfe6ADEgvEx78aRixa2NJy8=
Subject key identifier:   CF:6E:C9:47:74:4A:FC:77:62:1B:DB:C4:0E:E8:3F:9E:33:D4:AC:1D
Certificate issuer:       /CN=69DDA7A4B9F30993524C390274E6EC05AA6A8EC8
Certificate serial:       093D1F75949ABFB4A4C0F6A68D37B1A7B56EC11C
Authority key identifier: 69:DD:A7:A4:B9:F3:09:93:52:4C:39:02:74:E6:EC:05:AA:6A:8E:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DDA7A4B9F30993524C390274E6EC05AA6A8EC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a6XeReMMdcMPQz8TziAFUJU6LZraT5Lf1D4W3vUXywv/0/34352e3232342e3133322e302f32322d3234203d3e20323637363539.roa
Signing time:             Mon 28 Jul 2025 17:59:47 +0000
ROA not before:           Mon 28 Jul 2025 17:54:47 +0000
ROA not after:            Mon 27 Jul 2026 17:59:47 +0000
asID:                     267659
IP address blocks:        45.224.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a6XeReMMdcMPQz8TziAFUJU6LZraT5Lf1D4W3vUXywv/0/69DDA7A4B9F30993524C390274E6EC05AA6A8EC8.crl
                          rsync://rpki-repo.registro.br/repo/a6XeReMMdcMPQz8TziAFUJU6LZraT5Lf1D4W3vUXywv/0/69DDA7A4B9F30993524C390274E6EC05AA6A8EC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DDA7A4B9F30993524C390274E6EC05AA6A8EC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 16:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3d:1f:75:94:9a:bf:b4:a4:c0:f6:a6:8d:37:b1:a7:b5:6e:c1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69DDA7A4B9F30993524C390274E6EC05AA6A8EC8
        Validity
            Not Before: Jul 28 17:54:47 2025 GMT
            Not After : Jul 27 17:59:47 2026 GMT
        Subject: CN=CF6EC947744AFC77621BDBC40EE83F9E33D4AC1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:9f:5b:5c:45:fe:44:0e:90:5d:36:83:fe:
                    e0:cd:46:f9:cf:70:fb:69:52:24:07:c1:28:e8:61:
                    44:9e:26:f6:7f:07:ad:67:6e:ac:c0:b0:29:d8:a3:
                    b7:04:e4:3b:e7:51:53:f3:de:14:44:1f:73:4b:10:
                    90:42:65:fc:35:85:57:de:b4:f8:2a:d8:50:5d:c9:
                    6f:46:83:c0:31:f8:37:f1:a9:65:e8:85:a0:87:f5:
                    bb:1a:c3:da:37:dd:58:71:c7:2d:18:5a:7b:d0:20:
                    18:eb:1d:f9:27:10:70:73:8d:33:13:10:bc:4f:cc:
                    77:49:da:de:8e:41:78:cb:f1:2f:56:33:6c:82:cd:
                    6c:4a:88:2f:ae:62:36:5c:68:69:a0:e3:90:be:2c:
                    04:a5:e0:be:58:a6:3f:3b:a7:c6:93:20:e8:61:35:
                    34:57:07:83:74:90:50:d3:ae:27:18:82:08:6e:96:
                    51:7b:45:bb:0b:ee:9f:35:63:4c:90:65:d0:67:24:
                    4c:5a:59:df:c0:e6:5f:18:e6:3e:32:e1:6f:ea:5b:
                    b1:5e:28:c3:85:2b:da:ab:93:a4:9d:a0:cf:ac:d4:
                    f3:11:e2:6e:53:90:13:11:03:14:5e:de:38:e3:9c:
                    0d:d4:02:51:aa:02:8c:9e:8d:b8:f1:f2:2a:61:37:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6E:C9:47:74:4A:FC:77:62:1B:DB:C4:0E:E8:3F:9E:33:D4:AC:1D
            X509v3 Authority Key Identifier:
                keyid:69:DD:A7:A4:B9:F3:09:93:52:4C:39:02:74:E6:EC:05:AA:6A:8E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a6XeReMMdcMPQz8TziAFUJU6LZraT5Lf1D4W3vUXywv/0/69DDA7A4B9F30993524C390274E6EC05AA6A8EC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DDA7A4B9F30993524C390274E6EC05AA6A8EC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a6XeReMMdcMPQz8TziAFUJU6LZraT5Lf1D4W3vUXywv/0/34352e3232342e3133322e302f32322d3234203d3e20323637363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:55:05:0b:81:c8:38:be:27:0d:a7:fa:fc:a4:66:df:03:26:
         91:a7:ef:30:40:72:63:52:92:82:6b:a7:99:ba:b4:ec:88:45:
         82:64:22:ab:5a:12:55:a9:27:5b:ec:00:09:2b:3e:6c:f9:09:
         11:fa:97:89:2b:ba:49:e5:a0:24:34:13:23:7e:5a:99:ce:44:
         26:7a:dc:0b:0a:e4:21:2e:13:9f:e8:86:60:7f:72:d1:36:3e:
         b2:93:f2:aa:b0:6f:87:66:52:a0:63:4a:4d:cf:7d:ab:b7:a1:
         54:95:2e:d4:34:30:fa:c9:cf:0e:0d:84:c6:f6:f2:e0:c1:2a:
         b9:6d:41:b5:49:f9:24:1f:3f:75:a9:47:9e:cf:d0:13:d4:41:
         8c:e5:ce:b9:f2:94:76:68:cc:39:a3:68:84:1a:fc:2a:7b:33:
         a0:13:5d:d2:8a:28:16:11:7f:ed:e6:82:87:47:c9:e0:db:c0:
         aa:6d:75:88:2c:66:23:ad:90:c1:08:66:6f:fa:30:7f:ba:2f:
         c1:99:f2:49:5c:ea:ce:c4:c9:8f:6d:41:b3:c4:6c:d0:bf:7e:
         b8:7e:5e:4d:b3:97:22:62:1c:76:9f:05:29:5e:fb:6d:19:9f:
         c3:42:f9:f8:d6:83:be:36:aa:44:3b:08:b9:50:02:5f:8a:05:
         1b:b3:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:39 2025 by rpki-client