Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/34352e3137372e3232322e302f32332d3332203d3e20323635323035.roa
File:                     34352e3137372e3232322e302f32332d3332203d3e20323635323035.roa (raw, json)
Hash identifier:          Xx5hsKHw7ROd6R3JG1uyp0LkjZ59/dUaJ/BwS/sp10o=
Subject key identifier:   C4:84:EB:D5:71:8F:1F:99:E7:EC:79:C6:F1:43:C8:6B:90:CB:79:BC
Certificate issuer:       /CN=258ECE436F837048C74260D70C5C4816AE1FC553
Certificate serial:       13392AC7BE99E855BEAE9DEE13CF36F5F5D34B9B
Authority key identifier: 25:8E:CE:43:6F:83:70:48:C7:42:60:D7:0C:5C:48:16:AE:1F:C5:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258ECE436F837048C74260D70C5C4816AE1FC553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/34352e3137372e3232322e302f32332d3332203d3e20323635323035.roa
Signing time:             Thu 14 Aug 2025 21:23:51 +0000
ROA not before:           Thu 14 Aug 2025 21:18:51 +0000
ROA not after:            Thu 13 Aug 2026 21:23:51 +0000
asID:                     265205
IP address blocks:        45.177.222.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/258ECE436F837048C74260D70C5C4816AE1FC553.crl
                          rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/258ECE436F837048C74260D70C5C4816AE1FC553.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258ECE436F837048C74260D70C5C4816AE1FC553.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:39:2a:c7:be:99:e8:55:be:ae:9d:ee:13:cf:36:f5:f5:d3:4b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258ECE436F837048C74260D70C5C4816AE1FC553
        Validity
            Not Before: Aug 14 21:18:51 2025 GMT
            Not After : Aug 13 21:23:51 2026 GMT
        Subject: CN=C484EBD5718F1F99E7EC79C6F143C86B90CB79BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:d1:f8:ed:9f:ce:52:a5:0e:bc:66:cb:a5:
                    0f:8f:a5:ec:f7:d3:2e:98:14:2a:06:4e:e1:00:ed:
                    a2:c5:12:1f:43:f8:a1:36:81:37:81:9b:83:4e:7e:
                    cd:bd:13:4f:9d:d4:17:3d:f3:34:e7:95:1a:7a:fe:
                    5d:30:cb:9f:d9:d5:ea:7e:1d:57:02:78:80:de:d1:
                    02:4f:61:8a:f7:76:7a:de:7b:d8:f8:ab:3b:8a:02:
                    7c:84:31:9d:9e:a6:4d:1f:01:09:25:a0:b9:73:55:
                    5e:76:73:59:32:65:b1:8d:37:46:fa:0c:c0:c9:74:
                    07:3c:66:1d:3f:54:1e:85:ea:8b:70:7b:ce:c0:64:
                    33:6b:96:78:78:9a:78:12:82:9f:97:42:09:48:c5:
                    7b:85:9e:8e:68:25:80:93:93:67:3b:31:51:b9:80:
                    d9:0b:ba:e9:e6:17:61:f6:a4:e4:51:7f:2f:de:5a:
                    5b:0a:ee:95:11:a6:d8:df:f9:b4:6b:7f:6a:04:db:
                    3d:c7:fe:62:6f:9e:2a:34:04:3e:43:cb:38:c0:cb:
                    75:70:dc:8c:ab:60:14:d7:07:72:28:7e:21:dc:e0:
                    2e:e3:af:fd:65:0a:f8:fe:1b:80:f7:a1:de:65:40:
                    c7:f4:0b:e9:44:57:7f:e1:15:50:80:74:47:74:f3:
                    ad:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:84:EB:D5:71:8F:1F:99:E7:EC:79:C6:F1:43:C8:6B:90:CB:79:BC
            X509v3 Authority Key Identifier:
                keyid:25:8E:CE:43:6F:83:70:48:C7:42:60:D7:0C:5C:48:16:AE:1F:C5:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/258ECE436F837048C74260D70C5C4816AE1FC553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258ECE436F837048C74260D70C5C4816AE1FC553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/34352e3137372e3232322e302f32332d3332203d3e20323635323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:1a:f3:1f:5f:82:e6:00:59:a8:07:bf:0d:01:27:2b:da:04:
         83:af:de:db:f0:48:f5:ef:d5:91:ee:35:2d:ec:7e:ae:97:cb:
         f5:cf:6c:b0:da:34:61:e9:0b:91:22:65:d7:72:68:8d:13:2e:
         29:99:b3:4e:7e:87:5c:ca:80:a3:e0:50:4f:6c:2f:bd:1d:90:
         8e:94:55:bf:ea:b2:21:c9:af:ab:59:d7:3b:a3:73:5b:0d:45:
         4c:2f:e4:13:eb:b4:2e:77:9a:88:bb:90:7f:0b:e6:36:7d:84:
         1e:2e:c9:fb:f7:95:dc:dd:f8:77:37:7b:26:07:96:25:ed:f7:
         e0:78:5f:1f:d0:30:c4:36:7b:00:0f:f1:29:6a:7d:e1:1e:b8:
         c6:19:01:be:e3:f3:7b:b1:b5:e0:31:34:b3:75:50:d6:45:06:
         f3:4e:55:62:01:7e:57:30:ad:e9:a8:4d:44:14:0d:09:e8:d3:
         ca:2d:5b:04:30:3e:3d:35:34:06:75:c6:92:8f:1a:5b:8b:bd:
         21:ac:d9:aa:b5:de:d5:ec:4d:97:0f:48:f4:7c:32:74:cc:12:
         9e:f1:e6:f1:70:17:b2:cd:87:0a:b4:ba:2c:10:27:c3:68:3d:
         a0:9b:8d:25:c2:16:f1:24:77:ee:8f:bb:68:23:bd:4a:d9:80:
         be:7d:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:53 2025 by rpki-client