Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32332d3233203d3e20323639303135.roa
File:                     34352e3137382e32302e302f32332d3233203d3e20323639303135.roa (raw, json)
Hash identifier:          nZoTO6V13fdeP4F7qu6XoMPlBc9UnexQz7l/L7lHCFY=
Subject key identifier:   4B:35:0A:53:1C:C4:F2:1C:9C:C6:05:8A:66:E4:54:61:4F:0C:AB:09
Certificate issuer:       /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
Certificate serial:       0A320C100E7C5D527F90C9654FA1C79940850929
Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32332d3233203d3e20323639303135.roa
Signing time:             Mon 09 Jun 2025 18:25:28 +0000
ROA not before:           Mon 09 Jun 2025 18:20:28 +0000
ROA not after:            Mon 08 Jun 2026 18:25:28 +0000
asID:                     269015
IP address blocks:        45.178.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 07:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:32:0c:10:0e:7c:5d:52:7f:90:c9:65:4f:a1:c7:99:40:85:09:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
        Validity
            Not Before: Jun  9 18:20:28 2025 GMT
            Not After : Jun  8 18:25:28 2026 GMT
        Subject: CN=4B350A531CC4F21C9CC6058A66E454614F0CAB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:69:37:b4:59:f8:85:e2:33:42:2b:b9:bb:07:
                    84:01:71:a7:69:8b:4f:4d:97:9d:63:c7:da:71:45:
                    8f:5e:0b:b9:43:9d:f1:98:03:cd:bb:6f:4f:28:61:
                    ec:5c:f3:10:4b:e0:09:81:20:1f:f0:ad:74:ca:53:
                    a8:fb:57:5d:14:58:a0:8d:83:b8:5c:cf:51:2a:51:
                    44:32:68:de:05:df:61:eb:ea:77:07:c6:9d:8b:50:
                    c2:37:f7:73:ac:45:71:90:6f:e2:bc:69:64:f6:d7:
                    0a:e2:3f:23:39:dd:32:e1:c9:f8:67:2a:4f:06:a9:
                    f6:31:60:bf:e1:29:e0:ec:d5:96:2b:d1:00:f8:6a:
                    1b:15:a0:0b:fa:93:81:8c:f0:1c:2a:45:78:83:c7:
                    7b:7a:b6:0a:bc:62:95:5f:64:06:f9:51:fa:cf:a0:
                    b9:42:ff:63:c5:88:1d:b3:81:10:36:8e:68:a4:8d:
                    1b:87:25:35:cc:22:93:25:87:a5:b2:f2:6c:26:64:
                    d2:77:28:23:d8:9d:8a:09:50:34:72:5b:b3:2d:01:
                    81:47:41:b7:96:51:10:9e:63:73:ae:41:dd:75:b7:
                    e7:1e:f5:51:a1:ef:7f:1d:ef:d1:0f:95:73:2c:7a:
                    4e:23:8f:da:9f:2a:63:f6:39:b4:fc:29:1e:dd:cc:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:35:0A:53:1C:C4:F2:1C:9C:C6:05:8A:66:E4:54:61:4F:0C:AB:09
            X509v3 Authority Key Identifier:
                keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32332d3233203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:ce:7c:fe:b1:00:a2:ac:f7:55:f6:7e:d8:e0:e1:cf:36:11:
         5c:35:95:96:dc:dd:ad:5d:5d:6d:2d:80:38:5e:64:ab:04:b5:
         61:d0:2c:45:02:50:2c:f4:8f:89:5d:45:d2:94:18:6c:ca:ff:
         24:25:0e:09:5b:e0:c6:2c:88:68:29:a0:ae:71:53:6c:ed:c5:
         49:f0:c5:57:52:94:23:5a:08:a0:1e:7f:b6:a2:51:1f:ce:47:
         f8:c0:2d:70:f8:7a:fb:9e:3a:93:d8:ce:49:c7:16:46:af:af:
         85:fb:35:85:28:14:bc:d3:95:81:cf:24:1f:6b:22:ca:7d:49:
         79:54:ac:84:0c:cb:1d:19:44:59:ac:7a:a8:4d:3c:e8:88:75:
         84:c6:bb:14:ec:c2:8f:f3:d9:3c:1e:48:3f:88:c6:53:77:b1:
         9e:21:c2:eb:53:4f:ff:b5:3d:3f:55:d2:84:3e:30:b6:07:0e:
         33:11:c8:94:58:7e:72:e0:6e:d2:b9:4e:dd:96:10:0a:b6:a8:
         f8:fa:81:c7:61:21:22:8c:7f:bf:23:65:9b:54:dc:ad:e6:81:
         a2:ef:f8:36:db:e6:70:ba:98:0b:ab:c2:8a:c9:d4:2c:a5:02:
         7c:f1:fd:29:a3:f2:48:90:e0:4d:73:49:8b:72:10:1d:54:73:
         72:9f:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:19:43 2025 by rpki-client