Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34302e302f32322d3332203d3e20323636303933.roa
File:                     34352e352e34302e302f32322d3332203d3e20323636303933.roa (raw, json)
Hash identifier:          +Thry6Z4R5SnakUl9sQ3anuc3rd2YZvwSeQG5lXgUt4=
Subject key identifier:   1C:BC:84:D7:1C:8B:D8:7B:74:51:C3:CE:89:23:4F:39:D8:60:6E:46
Certificate issuer:       /CN=C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19
Certificate serial:       2796E4348CADB8C914E6D06513600214CC0565CE
Authority key identifier: C0:8F:5E:3E:F9:9E:E2:AC:9D:C7:62:2C:AF:1A:A2:15:18:75:4C:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34302e302f32322d3332203d3e20323636303933.roa
Signing time:             Wed 25 Jun 2025 20:32:18 +0000
ROA not before:           Wed 25 Jun 2025 20:27:18 +0000
ROA not after:            Wed 24 Jun 2026 20:32:18 +0000
asID:                     266093
IP address blocks:        45.5.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19.crl
                          rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 14:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:96:e4:34:8c:ad:b8:c9:14:e6:d0:65:13:60:02:14:cc:05:65:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19
        Validity
            Not Before: Jun 25 20:27:18 2025 GMT
            Not After : Jun 24 20:32:18 2026 GMT
        Subject: CN=1CBC84D71C8BD87B7451C3CE89234F39D8606E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d0:92:4f:d8:45:45:0b:08:63:76:b1:4f:99:
                    70:cb:2b:71:39:07:e0:44:64:9f:7e:8b:37:6f:67:
                    fd:47:58:a0:11:cb:5a:dd:30:76:ce:6f:d7:d7:83:
                    77:ef:10:24:6b:67:d8:07:5f:87:07:b1:6e:05:0c:
                    e9:fc:95:dd:4d:9a:01:da:ec:40:1d:87:2f:9a:d6:
                    30:0e:56:e7:80:5c:66:81:aa:d7:28:c9:6d:fc:89:
                    a8:27:7c:6d:4d:09:1b:9d:7c:ed:04:58:4c:37:d1:
                    67:28:39:79:07:90:c4:b8:df:89:b1:da:b5:e9:81:
                    5f:da:0d:e0:81:9c:80:fd:ae:0f:b1:de:0a:99:95:
                    95:18:e2:23:6b:e4:13:ae:99:3b:d5:d4:b6:de:f4:
                    3d:5a:3f:b5:f3:14:56:b3:0c:1d:c6:41:23:65:65:
                    d9:a2:e4:ff:ac:93:2b:5a:a6:d8:7a:68:ca:29:60:
                    ee:a2:fc:0d:9b:d0:82:ca:7a:bc:41:85:02:3c:a4:
                    96:31:2b:22:ff:4f:e1:f0:28:da:3e:d4:c5:32:ab:
                    5f:b8:f0:bb:81:19:ef:3e:91:b7:14:bf:e2:2d:57:
                    40:0e:f3:b9:af:9c:d2:bb:6d:aa:8f:99:28:d6:2d:
                    e9:32:76:cd:ae:80:6b:72:25:84:d3:3b:18:f0:a0:
                    43:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BC:84:D7:1C:8B:D8:7B:74:51:C3:CE:89:23:4F:39:D8:60:6E:46
            X509v3 Authority Key Identifier:
                keyid:C0:8F:5E:3E:F9:9E:E2:AC:9D:C7:62:2C:AF:1A:A2:15:18:75:4C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C08F5E3EF99EE2AC9DC7622CAF1AA21518754C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/34352e352e34302e302f32322d3332203d3e20323636303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:a7:cd:cb:ee:02:06:b0:c0:62:44:ec:69:4d:ff:51:f4:f1:
         4e:1f:97:84:6b:fd:01:23:88:9c:9c:33:cd:a0:f0:8a:c1:94:
         d4:23:29:85:a4:6b:9b:b4:45:10:b7:7e:ed:0f:dd:1a:af:8a:
         98:20:29:cb:bf:d0:1d:40:72:40:cc:06:52:94:69:e6:8e:75:
         5d:83:b5:88:81:4d:89:2c:31:2d:41:db:bd:89:cd:70:72:9e:
         da:58:0e:13:13:e9:c9:79:78:f1:5f:5e:2b:96:7d:4c:d2:e5:
         b2:1c:96:6c:0b:69:3d:43:77:68:47:1a:56:87:1f:00:1f:4a:
         b4:3e:54:b5:bf:e6:03:41:46:e9:73:26:e8:26:42:cd:c6:43:
         74:31:b6:2f:bd:2a:17:e2:28:b6:2d:e8:c7:c6:50:bc:e6:ef:
         85:88:35:ff:a9:6d:aa:4a:87:f8:98:bc:dc:ef:41:0d:ce:b4:
         62:40:09:b8:08:cb:a7:af:31:05:6d:e8:f0:bd:fb:a0:30:c3:
         b4:e0:e3:bb:75:5e:10:d2:09:8c:b1:51:55:1a:a3:5c:e2:5a:
         ad:36:d4:20:c4:d6:fc:8d:98:c3:39:66:0f:6c:bd:4b:96:d2:
         30:96:5e:ba:d1:92:14:f4:a5:58:1b:a6:c1:18:0b:14:93:c6:
         54:1d:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:17:13 2025 by rpki-client