Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32302e302f32342d3234203d3e20323639363038.roa
File:                     34352e3139302e32302e302f32342d3234203d3e20323639363038.roa (raw, json)
Hash identifier:          0SCdbmQrUTShqTgfXs4Z7jJe7S29u6TTRWzJMW7c+Ws=
Subject key identifier:   A4:E9:F7:12:2B:80:4B:01:2E:05:39:E4:EB:12:9C:FB:40:7B:A9:9C
Certificate issuer:       /CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F
Certificate serial:       50459432B437EF210305B15D3B7A9872DCB8B27C
Authority key identifier: 14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32302e302f32342d3234203d3e20323639363038.roa
Signing time:             Wed 02 Jul 2025 20:17:29 +0000
ROA not before:           Wed 02 Jul 2025 20:12:29 +0000
ROA not after:            Wed 01 Jul 2026 20:17:29 +0000
asID:                     269608
IP address blocks:        45.190.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.crl
                          rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 16:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:45:94:32:b4:37:ef:21:03:05:b1:5d:3b:7a:98:72:dc:b8:b2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F
        Validity
            Not Before: Jul  2 20:12:29 2025 GMT
            Not After : Jul  1 20:17:29 2026 GMT
        Subject: CN=A4E9F7122B804B012E0539E4EB129CFB407BA99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:36:e8:34:03:c7:1e:57:17:ef:ca:88:3f:af:
                    05:86:56:17:0a:fb:90:f1:d0:d6:73:7c:eb:78:d1:
                    b5:30:72:83:79:ec:da:2d:ce:f5:c0:9f:84:df:d9:
                    0b:d3:2e:11:1c:fe:fb:be:1c:3a:92:36:b3:7a:d0:
                    36:5b:a1:45:fa:32:86:04:de:5c:e2:9f:ae:4b:c7:
                    d3:67:d2:0e:67:d7:b2:bc:15:92:08:97:4c:7a:2b:
                    6e:ba:33:b1:2f:f9:16:d6:c6:5c:da:22:e7:62:17:
                    ea:36:fc:9f:bf:b6:61:5a:1f:d4:0c:73:c8:21:3a:
                    61:4d:75:d1:b5:8c:63:da:bc:85:3d:eb:a3:1a:31:
                    ba:85:c3:bc:31:ec:de:b5:4b:77:b7:59:a8:d7:c0:
                    6a:46:65:9c:86:d6:2c:cd:8d:c3:3e:a5:21:8f:52:
                    db:ad:b1:83:be:09:80:3c:b8:be:3e:26:27:95:2b:
                    93:9a:57:b7:f4:5c:b0:c6:be:d2:3d:b7:9e:28:63:
                    49:40:0e:7b:c2:55:83:99:7b:89:0b:4f:53:80:8b:
                    c8:a1:a9:d9:0e:ab:03:08:22:f3:06:84:2f:30:4f:
                    b2:f4:df:9a:a9:51:f3:71:17:7e:bf:a7:da:29:22:
                    e9:b3:7f:0c:2b:23:79:19:a3:87:13:63:31:6e:40:
                    00:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E9:F7:12:2B:80:4B:01:2E:05:39:E4:EB:12:9C:FB:40:7B:A9:9C
            X509v3 Authority Key Identifier:
                keyid:14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32302e302f32342d3234203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:30:ae:4b:e2:99:b5:b6:32:5f:c5:40:28:d3:d4:8c:f4:bd:
         4f:cb:0d:7c:9b:7f:c8:a6:73:37:f9:89:aa:d4:d8:c7:98:22:
         f0:1a:94:ac:b8:a5:c8:50:b0:24:1d:3b:02:c4:91:dd:fb:16:
         f8:d1:48:1d:01:e2:24:7c:97:0c:87:b6:a2:12:92:7e:d6:12:
         ac:4f:14:4c:fb:b1:af:41:66:33:7d:46:d6:c5:60:84:f6:fd:
         5d:81:f7:81:1b:1c:99:ca:f6:a0:9d:da:1b:9b:84:00:a5:58:
         f2:ce:ec:b8:10:64:e3:7e:3a:3e:82:f0:f8:c3:6e:cb:cb:b3:
         9d:b0:df:b1:f3:98:ec:28:20:a9:02:60:7c:a8:41:58:1f:8e:
         c6:ec:32:3f:79:4c:67:ca:a8:01:a9:af:4e:1b:08:31:67:5a:
         2a:04:7c:6b:a0:e4:28:2f:34:a0:43:f6:59:85:7f:c8:a2:64:
         d0:75:f4:45:e2:de:f5:e9:19:3c:aa:82:64:33:7a:0a:aa:d7:
         49:c5:8e:e1:87:6c:63:db:4b:45:bd:c7:62:57:be:4f:f5:f7:
         66:d7:ec:43:e0:9b:5c:c6:19:19:4f:cf:19:3c:fd:63:d1:c7:
         e3:6d:b5:bd:f0:af:6b:23:77:d3:d2:ef:91:40:50:1d:c6:34:
         c1:f4:e0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:51:22 2025 by rpki-client