Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32332e302f32342d3234203d3e20323639363038.roa
File:                     34352e3139302e32332e302f32342d3234203d3e20323639363038.roa (raw, json)
Hash identifier:          AuGhc4ux8pahvcP9O3nGzn0mzEJFzSv1C3YtrsLXhnE=
Subject key identifier:   3A:8F:2C:15:08:AE:11:73:07:DF:0B:FD:9D:F8:C6:1D:5E:FA:AE:56
Certificate issuer:       /CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F
Certificate serial:       1B5C1AD22E8649F5E24F96F12799C02CA936BE9A
Authority key identifier: 14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32332e302f32342d3234203d3e20323639363038.roa
Signing time:             Wed 02 Jul 2025 20:17:29 +0000
ROA not before:           Wed 02 Jul 2025 20:12:29 +0000
ROA not after:            Wed 01 Jul 2026 20:17:29 +0000
asID:                     269608
IP address blocks:        45.190.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.crl
                          rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 16:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5c:1a:d2:2e:86:49:f5:e2:4f:96:f1:27:99:c0:2c:a9:36:be:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F
        Validity
            Not Before: Jul  2 20:12:29 2025 GMT
            Not After : Jul  1 20:17:29 2026 GMT
        Subject: CN=3A8F2C1508AE117307DF0BFD9DF8C61D5EFAAE56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:e9:15:e1:0e:25:ab:99:98:70:2f:2c:9b:
                    11:74:d8:6a:4a:9a:5a:b8:a0:63:32:fb:b0:d4:fa:
                    f5:7b:6c:64:98:60:60:7b:99:ab:b5:11:26:93:bc:
                    60:0a:25:8b:6b:c2:30:70:d6:7d:e2:8f:9b:af:db:
                    9f:6a:b4:52:29:9c:a4:5c:01:38:9d:2f:f4:81:11:
                    50:8c:9a:7d:ed:99:03:db:7a:bd:ed:db:ca:10:85:
                    c4:94:44:91:c7:90:42:ea:92:af:89:cf:14:6f:c6:
                    18:8a:4d:c6:8a:a2:93:cc:f9:cd:b0:58:d9:fc:ea:
                    82:f6:9c:57:40:45:27:dc:16:47:fb:bc:c9:c0:41:
                    94:cb:1f:82:b3:b6:5d:af:37:96:d1:0b:0a:83:ec:
                    24:f3:82:b3:81:7e:a1:ed:6c:4f:ac:c5:2b:e0:e3:
                    ac:d2:d7:08:ad:14:03:d7:c6:ae:25:9b:eb:88:85:
                    c4:71:92:07:58:3a:7d:23:3f:d4:12:bd:ca:70:a6:
                    83:ad:98:f3:70:57:0d:bd:bc:d4:79:47:04:e4:82:
                    72:f3:be:32:39:1f:9c:2d:88:48:d1:39:21:fb:15:
                    6e:ab:ea:3d:fc:5b:65:ff:18:4e:72:31:b5:69:08:
                    62:31:1a:22:ea:d8:f0:a9:88:77:e7:b0:02:d8:d9:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8F:2C:15:08:AE:11:73:07:DF:0B:FD:9D:F8:C6:1D:5E:FA:AE:56
            X509v3 Authority Key Identifier:
                keyid:14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32332e302f32342d3234203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:73:9b:4c:ca:85:02:6e:13:7a:1a:66:49:69:b2:ad:ec:77:
         38:1a:3b:0a:7a:30:75:44:27:51:91:a6:c7:fa:f7:4e:e0:30:
         35:d4:95:4f:90:84:09:fd:74:c3:f9:ad:5b:27:50:9f:fe:4e:
         7d:5a:a9:41:48:d6:7b:f2:27:2e:b2:e3:22:70:cd:3d:72:4c:
         fe:7c:ec:f1:f2:5c:5a:6d:37:0f:e5:75:1e:8c:db:3d:db:a0:
         04:3a:d8:8b:43:18:02:9d:54:a1:29:8e:be:9c:74:28:80:41:
         70:a5:94:9c:f5:5d:7f:a2:c0:d2:55:83:28:eb:9f:5d:40:5a:
         be:20:19:98:07:f5:cc:07:81:85:43:7d:c8:f2:75:22:14:b1:
         32:b3:fb:c5:0f:aa:b8:e5:d1:a8:5a:ac:25:97:75:50:51:e1:
         21:c6:79:47:21:5d:d9:55:eb:0d:ea:2c:81:48:5b:38:2b:bb:
         62:37:44:30:f3:44:58:64:72:e5:51:31:61:f5:0d:74:8c:28:
         8e:9f:cc:48:88:5b:e2:48:d0:16:98:b6:5c:24:1e:8c:c6:32:
         2e:21:78:79:11:cc:60:7e:41:02:e1:8f:2d:15:c4:0c:70:f0:
         64:42:fb:b7:51:74:64:ec:a6:93:59:fc:50:3c:b9:1e:c6:5e:
         67:23:b7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:45:08 2025 by rpki-client