Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS61844.roa
File:                     AS61844.roa (raw, json)
Hash identifier:          kZQZbHFkUd/Orkc4L1qxhgzp5lx9I57wcR8K214EM/o=
Subject key identifier:   7D:25:34:1B:1F:D1:D4:5C:6B:AD:E8:BD:C3:85:A8:FC:2F:59:3F:80
Certificate issuer:       /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial:       7D3A662BA73F030EB3E139AFB44F4D6670DCC72A
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS61844.roa
Signing time:             Wed 02 Jul 2025 11:40:19 +0000
ROA not before:           Wed 02 Jul 2025 11:35:19 +0000
ROA not after:            Wed 01 Jul 2026 11:40:19 +0000
asID:                     61844
IP address blocks:        45.177.252.0/22 maxlen: 24
                          45.179.20.0/22 maxlen: 24
                          138.255.212.0/22 maxlen: 24
                          201.148.124.0/22 maxlen: 24
                          2804:1a30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3a:66:2b:a7:3f:03:0e:b3:e1:39:af:b4:4f:4d:66:70:dc:c7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
        Validity
            Not Before: Jul  2 11:35:19 2025 GMT
            Not After : Jul  1 11:40:19 2026 GMT
        Subject: CN=7D25341B1FD1D45C6BADE8BDC385A8FC2F593F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:df:ea:63:bd:ab:08:1d:27:df:75:0f:14:
                    62:54:64:27:99:40:3c:26:f5:93:87:7d:78:74:45:
                    67:4e:35:47:ef:73:f1:af:ba:b4:8b:62:db:a2:d5:
                    d9:b2:32:f7:a6:9b:16:ae:e8:09:01:dd:9b:70:97:
                    e4:f2:cb:63:3b:47:06:8a:45:2b:ca:98:bd:36:9e:
                    98:cf:03:8b:9c:55:fb:12:7b:ea:da:84:06:01:20:
                    6c:6b:42:da:74:5f:e1:2e:43:78:c9:8a:a5:7d:e4:
                    47:5b:08:a1:a9:6f:6a:e9:e2:af:50:e6:ba:bc:13:
                    df:9a:c1:76:7d:ff:aa:d8:7c:fa:47:f9:d5:a1:05:
                    a7:3b:c9:64:2d:b5:c8:12:a0:74:bd:31:6f:ef:70:
                    db:5b:ee:ca:04:6b:c8:bb:8d:07:11:26:91:2c:23:
                    52:7f:51:ae:50:67:f0:96:f8:45:7e:a6:7c:93:d4:
                    fd:2b:65:bb:4e:fb:3e:34:74:15:fe:2c:47:d3:13:
                    e0:eb:0e:68:8f:f8:6e:d9:43:a9:52:ea:98:aa:83:
                    97:b6:13:22:2f:17:60:09:09:8a:b1:74:70:e8:9f:
                    cf:bc:97:8f:be:e5:53:67:49:3a:8e:18:46:62:65:
                    bd:91:99:7a:c3:cc:f3:90:da:5d:b2:a8:11:0f:24:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:25:34:1B:1F:D1:D4:5C:6B:AD:E8:BD:C3:85:A8:FC:2F:59:3F:80
            X509v3 Authority Key Identifier:
                keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS61844.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.252.0/22
                  45.179.20.0/22
                  138.255.212.0/22
                  201.148.124.0/22
                IPv6:
                  2804:1a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:ea:06:b9:68:a9:3b:12:24:3a:11:44:c1:68:ae:7d:66:c6:
         99:6b:2c:71:84:f8:42:2c:6e:c7:3e:76:b6:15:5f:9d:d9:55:
         d8:ec:81:79:db:40:4e:72:5b:7c:95:fb:de:c0:5d:fb:f9:62:
         9c:93:8d:46:94:b7:c9:c2:18:ed:54:08:29:48:02:b7:31:34:
         3c:54:41:d3:fb:2c:92:83:3f:73:d0:6c:dc:12:0b:1e:63:78:
         81:0f:7d:73:9c:e6:db:9b:d2:19:09:ff:87:49:f3:04:c8:37:
         33:dc:8d:ea:b1:9b:01:53:9d:fe:78:25:76:33:49:8f:e7:3e:
         94:0d:4a:7a:a9:6a:f5:7d:74:51:6e:4d:53:21:72:40:9b:ec:
         32:48:52:f9:9c:11:96:96:95:60:ab:b9:d8:25:13:b6:fc:de:
         53:10:21:a0:2a:59:e8:09:67:2a:74:4d:95:3f:3f:b2:88:70:
         b1:bc:1e:0e:e1:d3:4b:14:09:14:48:81:11:e7:57:9b:58:6b:
         3c:5d:9e:1d:92:d3:a8:e4:93:39:68:9d:26:33:7a:1d:8d:48:
         18:79:49:29:6f:e9:be:ac:0f:21:8b:f0:f2:bc:e0:e7:27:9f:
         5e:86:8a:54:1d:ae:7e:30:ab:05:44:67:6c:45:70:e5:9c:1a:
         71:35:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:04:40 2025 by rpki-client