Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32322e302f32332d3233203d3e20323639363038.roa
File:                     34352e3139302e32322e302f32332d3233203d3e20323639363038.roa (raw, json)
Hash identifier:          clfo+RDi1XQzTZ5EHRQ9dstcJpXOuT9dpIPP8cDNTMk=
Subject key identifier:   2F:6A:59:AC:20:D9:F2:A1:49:4E:74:AF:F6:CC:AD:2F:26:7D:45:7C
Certificate issuer:       /CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F
Certificate serial:       5459D2058D0D2E02DD6F89D96AFDC6D2EBA92963
Authority key identifier: 14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32322e302f32332d3233203d3e20323639363038.roa
Signing time:             Wed 02 Jul 2025 20:17:29 +0000
ROA not before:           Wed 02 Jul 2025 20:12:29 +0000
ROA not after:            Wed 01 Jul 2026 20:17:29 +0000
asID:                     269608
IP address blocks:        45.190.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.crl
                          rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Jul 2025 23:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:59:d2:05:8d:0d:2e:02:dd:6f:89:d9:6a:fd:c6:d2:eb:a9:29:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F
        Validity
            Not Before: Jul  2 20:12:29 2025 GMT
            Not After : Jul  1 20:17:29 2026 GMT
        Subject: CN=2F6A59AC20D9F2A1494E74AFF6CCAD2F267D457C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:1d:b5:25:0b:f9:b6:48:a7:19:ee:05:3c:
                    3e:d2:8b:8b:e2:a5:ab:a6:22:ee:da:a3:39:5b:aa:
                    7d:79:46:3e:61:cb:9b:ab:36:b5:7f:ce:30:2f:20:
                    b2:d5:57:8b:de:a1:81:e0:30:0c:b4:d9:d4:59:96:
                    e6:08:b9:33:e2:dc:2d:ce:5a:52:e4:57:f5:6d:9b:
                    0a:87:ac:76:be:ec:d6:1e:fb:e3:b6:f9:b3:d0:c4:
                    57:9a:57:ea:4b:7d:3e:88:db:cb:86:f2:2b:3a:cf:
                    cf:db:40:9a:6b:39:bc:91:95:34:e9:b4:d1:7a:8c:
                    68:f6:fb:ca:ae:09:68:72:75:9a:6d:75:36:7c:75:
                    3a:fd:f2:eb:9c:97:ca:35:52:dd:92:66:81:c4:43:
                    93:2c:de:5f:22:b1:bb:1e:89:0e:b0:e8:8b:cc:46:
                    66:04:c6:76:01:21:0a:50:fd:f9:33:1d:24:ed:4f:
                    c1:81:bf:55:de:25:8e:93:f2:e1:b0:d1:e3:d6:2b:
                    10:f1:f3:f9:a4:13:9d:49:43:04:47:35:a2:36:08:
                    cd:a0:48:76:5b:12:5c:9b:dc:86:e3:42:87:d1:f9:
                    08:66:6e:be:30:0f:2c:d1:e2:02:3c:d8:62:37:74:
                    ed:8e:55:44:ca:90:bb:78:8a:82:7c:ab:ab:e7:aa:
                    d3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6A:59:AC:20:D9:F2:A1:49:4E:74:AF:F6:CC:AD:2F:26:7D:45:7C
            X509v3 Authority Key Identifier:
                keyid:14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32322e302f32332d3233203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:19:1f:aa:c0:f6:7a:9f:93:21:7a:7d:45:61:7e:c5:0f:15:
         f6:b6:7e:36:2a:0e:17:63:25:3f:30:6e:4b:5c:ed:1d:6d:b4:
         42:3b:70:da:6c:f2:17:a8:43:34:4b:61:b5:e8:1a:51:6e:be:
         77:44:19:e2:0d:57:02:a4:31:06:38:d5:53:ec:3f:ed:42:d4:
         59:75:d0:16:4e:0e:73:2b:b7:93:a7:89:94:73:2a:fa:ee:25:
         5d:96:c5:6d:9b:32:e1:5a:7e:09:06:69:ae:7a:8b:1e:f2:20:
         d9:e6:26:5a:b6:45:63:99:52:f3:77:28:93:00:aa:3a:9a:1f:
         42:73:8b:10:67:a6:96:bd:ca:2e:22:31:ec:02:5a:63:d4:3a:
         0f:72:71:c6:69:79:9d:04:66:45:fd:70:14:70:db:1b:3c:c4:
         b3:85:c8:02:e8:d0:60:bb:86:a1:4c:8c:e0:db:a8:63:16:42:
         8c:39:85:bd:a2:73:b6:0b:1b:08:0e:fd:80:07:3b:73:f5:20:
         67:ce:89:e7:50:08:09:16:46:3f:a5:4e:1f:21:d2:35:a4:8e:
         8b:ff:d5:49:41:75:e7:dd:e2:ee:3b:e5:95:5b:6b:b2:a2:9f:
         92:08:7f:04:ef:f0:e8:89:c3:4e:5e:58:d7:c3:53:8c:69:d2:
         ae:2e:16:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 13:04:01 2025 by rpki-client