Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa
File:                     34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier:          JH39lCrZxU6fzf1b4Tw+d7pgacK5Q6EkGFH7i4jf/q4=
Subject key identifier:   6F:4B:99:C2:EA:EF:B9:EA:69:F8:78:50:9A:67:4B:5B:28:F9:3D:6F
Certificate issuer:       /CN=030432E293597EB9BE73A032AB1ED40C750C628E
Certificate serial:       5D44C77B610610A5EB817B07220C174719A4294C
Authority key identifier: 03:04:32:E2:93:59:7E:B9:BE:73:A0:32:AB:1E:D4:0C:75:0C:62:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030432E293597EB9BE73A032AB1ED40C750C628E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa
Signing time:             Tue 22 Jul 2025 13:34:55 +0000
ROA not before:           Tue 22 Jul 2025 13:29:55 +0000
ROA not after:            Tue 21 Jul 2026 13:34:55 +0000
asID:                     268746
IP address blocks:        45.171.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030432E293597EB9BE73A032AB1ED40C750C628E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 06:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:44:c7:7b:61:06:10:a5:eb:81:7b:07:22:0c:17:47:19:a4:29:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030432E293597EB9BE73A032AB1ED40C750C628E
        Validity
            Not Before: Jul 22 13:29:55 2025 GMT
            Not After : Jul 21 13:34:55 2026 GMT
        Subject: CN=6F4B99C2EAEFB9EA69F878509A674B5B28F93D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:55:e0:b9:87:0b:72:b9:59:8b:b1:4b:c2:
                    d9:ae:81:fb:d4:4d:b7:87:49:98:23:78:ec:a8:bb:
                    90:f7:21:bc:a6:c3:29:4e:64:20:ff:07:a4:26:e6:
                    56:74:d4:7f:d8:7a:2e:6e:f8:79:cc:72:a8:26:27:
                    26:9b:02:b2:e3:88:67:13:52:80:98:f6:a8:88:1b:
                    b5:4b:b2:5b:00:26:07:bf:e7:f9:30:7b:9d:63:30:
                    86:b2:16:42:f6:cb:30:81:ca:72:56:6c:4d:0e:8a:
                    b0:c3:34:8a:ce:1d:b1:50:95:4b:63:7f:39:2d:a1:
                    6a:a8:07:3d:46:54:92:2e:ef:9b:c3:af:a5:c9:65:
                    20:a9:07:80:44:fa:1b:5a:07:71:e0:83:33:07:8d:
                    ef:ae:7a:7f:6f:1b:ed:3c:9f:d2:10:de:f1:4e:49:
                    f3:2f:c6:ea:64:db:0e:3f:60:66:8e:9a:49:4d:1f:
                    01:0e:32:ae:fa:a3:ea:8f:c7:89:a1:8d:1e:78:9c:
                    0a:f1:54:fb:60:1b:81:9a:0e:22:16:a1:b6:46:ee:
                    d7:86:80:7a:61:b3:8c:52:cf:f6:c5:d5:31:c9:30:
                    71:10:4b:3f:8b:39:61:e9:4c:85:ea:56:91:6e:16:
                    68:b5:6a:29:44:0f:e1:92:37:c8:ce:62:03:dd:f1:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4B:99:C2:EA:EF:B9:EA:69:F8:78:50:9A:67:4B:5B:28:F9:3D:6F
            X509v3 Authority Key Identifier:
                keyid:03:04:32:E2:93:59:7E:B9:BE:73:A0:32:AB:1E:D4:0C:75:0C:62:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030432E293597EB9BE73A032AB1ED40C750C628E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:16:fc:70:2c:c6:11:25:f5:1f:9c:69:0c:3e:fd:b8:12:d5:
         ea:61:97:54:ed:69:49:df:38:78:4b:30:71:60:ff:bf:18:19:
         db:5f:de:e7:f6:f4:6a:a9:00:2f:9d:1f:3b:ef:2e:c9:7a:ae:
         ae:b3:ef:e4:b2:c9:f5:01:d9:50:63:ca:f7:04:6a:5f:3a:bf:
         c2:e5:46:69:b3:ee:48:e3:ad:88:95:c4:1f:c7:a0:c9:38:28:
         d7:df:26:4b:38:8a:1e:4c:6f:18:6a:4d:e5:cf:8d:83:95:28:
         29:eb:32:9c:0c:8a:1c:64:c5:35:a7:24:ad:3d:f7:1d:a5:d5:
         91:67:db:6c:bd:5a:de:d7:b5:b7:fc:b6:fa:8d:a4:a0:f2:1d:
         d0:c7:f7:d5:a6:d8:c0:e4:89:c0:77:4a:02:84:c9:a3:91:a5:
         5a:5b:d4:3e:23:58:41:e2:1e:16:d0:05:e4:d5:25:08:8a:53:
         4e:e3:ae:99:45:7e:7b:3b:77:29:b8:a5:cc:00:7c:31:78:59:
         34:0e:67:d8:84:2f:db:8a:1c:3f:58:9a:f4:72:b6:57:82:20:
         18:9c:a6:e2:b7:a0:64:0d:66:36:2c:6c:bc:e0:2d:d1:65:71:
         cb:b5:24:42:0c:df:dc:21:92:ab:d9:5b:62:85:03:40:6c:aa:
         3b:2a:50:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:54 2025 by rpki-client