Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/34352e3137342e39362e302f32332d3234203d3e20313938393439.roa
File:                     34352e3137342e39362e302f32332d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          Q09t2p45/NsZttcu/CjPLfwlZp4ocGEYmoki8KM+oJk=
Subject key identifier:   50:1B:DC:56:6B:20:6F:A6:6F:8D:52:08:3D:A9:19:15:AD:B9:54:5D
Certificate issuer:       /CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
Certificate serial:       2B93CDA835EB13233A8E58CA825F15145554BAE0
Authority key identifier: 8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/34352e3137342e39362e302f32332d3234203d3e20313938393439.roa
Signing time:             Wed 25 Jun 2025 11:38:04 +0000
ROA not before:           Wed 25 Jun 2025 11:33:04 +0000
ROA not after:            Wed 24 Jun 2026 11:38:04 +0000
asID:                     198949
IP address blocks:        45.174.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl
                          rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 06:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:93:cd:a8:35:eb:13:23:3a:8e:58:ca:82:5f:15:14:55:54:ba:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
        Validity
            Not Before: Jun 25 11:33:04 2025 GMT
            Not After : Jun 24 11:38:04 2026 GMT
        Subject: CN=501BDC566B206FA66F8D52083DA91915ADB9545D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:64:31:fb:ae:76:3f:55:40:55:62:00:7f:8f:
                    06:08:3b:6e:42:c9:73:6c:bc:45:b3:d3:08:5f:de:
                    34:f8:1d:ea:a8:7b:cb:8d:40:4d:7d:c9:0e:f7:3f:
                    06:bc:f5:6f:a2:bc:1a:76:bc:78:b0:6a:ce:bd:6a:
                    8e:f9:c1:1d:92:4a:34:6e:9b:41:3d:38:ce:f5:67:
                    ce:5a:98:56:15:16:4d:1f:89:dc:d6:7f:7e:34:b5:
                    3d:dc:47:0e:11:78:c0:e6:df:05:cd:4a:2f:fc:a8:
                    0f:26:de:6a:f5:07:d1:87:74:4c:67:7a:e1:97:20:
                    a6:31:57:2b:68:0e:ea:45:87:d0:5a:29:05:e8:29:
                    7c:34:24:51:ff:1f:0f:24:94:26:83:4e:a7:64:52:
                    cf:3c:b2:6f:2e:65:5e:20:43:f9:ea:9f:bd:d1:c4:
                    ee:4e:f3:18:ac:ab:11:ad:d6:35:2c:8c:96:d8:71:
                    e8:31:43:b6:7b:77:e9:bb:de:24:8e:ca:b0:45:05:
                    6f:b0:43:52:64:74:2f:e6:26:bc:af:37:ca:58:c5:
                    e8:ca:09:48:e2:d5:1e:2b:f2:00:59:e1:92:0b:69:
                    af:c2:a5:96:8a:6d:e6:b1:57:fc:82:0f:37:cd:93:
                    48:f3:49:98:98:7e:65:f3:f7:18:9c:fa:63:50:a2:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1B:DC:56:6B:20:6F:A6:6F:8D:52:08:3D:A9:19:15:AD:B9:54:5D
            X509v3 Authority Key Identifier:
                keyid:8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/34352e3137342e39362e302f32332d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:9d:05:c7:52:02:e0:af:a7:2d:79:88:10:f6:49:af:1d:29:
         f3:49:b7:1d:55:43:89:9b:4a:a9:4f:30:39:65:83:3c:27:bb:
         51:33:c3:64:42:82:6a:46:17:62:41:e1:67:b5:12:86:1f:66:
         b5:dc:c1:be:81:92:b1:e8:fd:0b:c5:fa:5b:ca:c0:02:a0:09:
         c8:ac:d6:38:7c:4a:10:51:45:a2:07:00:89:f9:ee:b1:be:d9:
         68:0d:3d:7b:4b:23:ec:7c:5c:cd:b0:31:e6:c9:dd:f5:47:6b:
         04:d6:a1:dd:30:c3:42:d4:97:de:37:38:ce:fd:c1:59:b9:06:
         1f:ee:ed:bf:7e:e8:cc:67:dd:a3:b7:c9:78:c0:98:29:ad:65:
         89:11:1c:d5:8e:09:fe:d3:66:78:05:aa:dd:88:6b:13:19:52:
         04:44:40:36:ff:72:1c:a0:ca:59:6a:52:97:5e:a4:3e:ff:5e:
         92:98:b6:42:90:d2:09:86:cc:03:98:21:36:39:85:5d:c0:79:
         f4:3d:de:0d:89:05:52:8a:b4:de:1d:c0:f5:64:11:59:ed:b4:
         b5:70:33:4f:1d:32:eb:72:59:03:7c:65:b4:8f:56:c7:5d:76:
         54:fc:5e:4b:50:4f:06:6f:6c:0b:77:45:46:20:6c:ac:d3:5f:
         88:7c:0c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:53:10 2025 by rpki-client