Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3136392e302f32342d3234203d3e20323638333431.roa
File:                     34352e3233382e3136392e302f32342d3234203d3e20323638333431.roa (raw, json)
Hash identifier:          XCorMYGwFP7xYZPyTgAFGx6XhDAgx2WA8TTXiVNQ34M=
Subject key identifier:   71:DB:FE:12:FA:D1:C7:CA:0D:3D:D0:F4:B9:C2:FE:E5:28:8E:AE:CE
Certificate issuer:       /CN=7A156DCDCD0ACF159FE4705A579B3F0277F6DD64
Certificate serial:       0C9D66FF593A6CA106322C13D25DBDC83FCC3B49
Authority key identifier: 7A:15:6D:CD:CD:0A:CF:15:9F:E4:70:5A:57:9B:3F:02:77:F6:DD:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3136392e302f32342d3234203d3e20323638333431.roa
Signing time:             Thu 07 Aug 2025 12:48:49 +0000
ROA not before:           Thu 07 Aug 2025 12:43:49 +0000
ROA not after:            Thu 06 Aug 2026 12:48:49 +0000
asID:                     268341
IP address blocks:        45.238.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.crl
                          rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 23:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9d:66:ff:59:3a:6c:a1:06:32:2c:13:d2:5d:bd:c8:3f:cc:3b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A156DCDCD0ACF159FE4705A579B3F0277F6DD64
        Validity
            Not Before: Aug  7 12:43:49 2025 GMT
            Not After : Aug  6 12:48:49 2026 GMT
        Subject: CN=71DBFE12FAD1C7CA0D3DD0F4B9C2FEE5288EAECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:cb:70:08:c0:c5:71:84:54:2a:21:b3:46:
                    dc:50:1f:c5:1b:01:fe:80:5c:b5:09:4b:4c:c3:62:
                    4f:75:d3:ea:ae:c0:36:19:99:8e:84:da:ee:10:2d:
                    85:e5:c3:1e:70:8d:07:c9:22:22:f4:f7:26:68:3e:
                    15:93:41:20:3f:4a:ea:b6:f3:b3:d7:df:41:37:10:
                    1f:be:9f:14:94:f7:64:ea:e2:4e:f6:cf:43:33:32:
                    4b:36:a6:e1:b5:77:6d:0c:04:57:ed:16:f9:19:8b:
                    dc:2c:b6:5a:21:14:08:44:67:c1:5f:21:3d:5a:bd:
                    f6:b1:cd:69:5e:75:16:91:e9:d6:36:86:df:4a:65:
                    d7:0c:b7:b6:bf:b2:37:01:bd:59:43:cc:9e:07:c7:
                    6b:e8:fd:5f:ae:b7:0b:34:44:22:c0:36:41:d0:80:
                    eb:c8:6e:8f:91:01:4b:1b:79:6c:ef:d0:46:46:84:
                    c1:0e:bb:fe:5b:b8:1a:9f:b3:46:ce:15:f2:97:8d:
                    7c:9f:9b:38:0f:d4:7c:15:d4:31:be:7e:9b:08:7f:
                    3e:48:f0:a3:76:17:89:7a:da:ca:5e:6e:bd:c6:f2:
                    37:54:84:db:0f:00:7a:0f:82:07:1a:47:2d:c2:87:
                    19:58:24:40:0c:7c:93:c7:5a:0c:08:45:57:ca:2e:
                    c6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DB:FE:12:FA:D1:C7:CA:0D:3D:D0:F4:B9:C2:FE:E5:28:8E:AE:CE
            X509v3 Authority Key Identifier:
                keyid:7A:15:6D:CD:CD:0A:CF:15:9F:E4:70:5A:57:9B:3F:02:77:F6:DD:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3136392e302f32342d3234203d3e20323638333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:8b:64:94:c2:0d:ea:75:01:4e:c5:ff:3e:8a:98:e8:93:2b:
         f0:aa:93:2c:a7:fc:e7:cd:b4:e4:64:45:0d:ca:18:cb:08:6b:
         d3:55:da:22:1a:7e:d7:14:b8:1d:45:67:b5:a9:b8:17:3e:e1:
         a9:a4:c3:8f:57:48:9c:dd:19:b5:e9:2a:66:06:5d:87:66:1e:
         ec:92:70:ba:d0:49:2b:ba:95:e8:ec:00:4e:cb:e4:7c:8d:f4:
         cf:d4:36:e4:c9:ef:6b:21:bd:2b:40:03:39:3d:9f:66:4d:e3:
         cd:4d:52:c6:2c:06:c7:cc:18:02:e2:dc:68:e2:23:d6:2f:86:
         89:64:68:1f:c4:72:72:91:67:a6:4a:4b:61:a4:24:74:9e:aa:
         da:bd:f7:e1:b8:14:74:d4:e4:7a:9c:cf:c3:e5:1b:96:b8:b9:
         69:69:ee:0f:cb:21:34:0f:57:49:7d:34:28:57:f2:a1:97:e2:
         87:bd:1c:ae:b3:db:26:ec:35:89:2f:83:43:e1:4c:2c:8c:39:
         e4:63:66:3c:64:42:58:3a:42:0d:36:29:b0:2d:c3:ae:19:63:
         39:38:fd:2a:9c:20:35:d8:4e:6e:ef:05:88:3b:ef:21:e7:36:
         9a:98:b7:db:07:68:bb:84:a0:20:0b:d8:95:fc:4d:67:29:ce:
         cb:53:bd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:02:17 2025 by rpki-client