Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/34352e3136362e3136312e302f32342d3234203d3e20323637393835.roa
File:                     34352e3136362e3136312e302f32342d3234203d3e20323637393835.roa (raw, json)
Hash identifier:          7lEgUdTmMbygr9aOy0YeXwYU6RLt//gyV5lJPML1/Z8=
Subject key identifier:   12:3A:D3:EE:50:81:FE:C5:E5:AF:FA:28:82:FF:0E:57:70:C2:ED:8A
Certificate issuer:       /CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
Certificate serial:       5BFFF1BE1EBBD39DC71E348A447242854BBC0487
Authority key identifier: AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/34352e3136362e3136312e302f32342d3234203d3e20323637393835.roa
Signing time:             Wed 20 Aug 2025 13:51:03 +0000
ROA not before:           Wed 20 Aug 2025 13:46:03 +0000
ROA not after:            Wed 19 Aug 2026 13:51:03 +0000
asID:                     267985
IP address blocks:        45.166.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl
                          rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ff:f1:be:1e:bb:d3:9d:c7:1e:34:8a:44:72:42:85:4b:bc:04:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
        Validity
            Not Before: Aug 20 13:46:03 2025 GMT
            Not After : Aug 19 13:51:03 2026 GMT
        Subject: CN=123AD3EE5081FEC5E5AFFA2882FF0E5770C2ED8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cb:2c:24:43:ed:e9:87:33:eb:01:72:fe:0a:
                    7a:9a:36:7c:f6:e9:99:b4:40:8a:ed:78:1e:33:ae:
                    60:f3:df:eb:87:cf:75:b4:b9:95:1f:5f:ca:7f:93:
                    0f:0b:8d:08:bf:82:d6:b1:a0:a0:83:46:6f:14:f2:
                    d3:18:d2:c2:a6:3b:ed:ff:37:6b:b5:17:a4:28:44:
                    09:1c:7d:c3:53:90:f1:f6:c7:3c:83:72:8e:91:39:
                    e7:fa:a1:7e:1f:fc:e3:10:3f:50:2f:61:dd:9f:86:
                    61:7e:12:b7:1e:03:67:99:66:ec:33:50:a6:f7:8f:
                    0a:f8:99:4d:2d:0f:24:96:10:fa:0e:96:a9:bf:1f:
                    e4:63:51:dc:a8:4c:de:dc:7d:a7:e5:54:b6:7a:92:
                    b7:b8:77:0b:4e:6d:a2:90:3f:79:43:0c:91:05:7e:
                    3d:7a:7f:34:ef:94:05:1f:11:06:a5:a2:d2:91:65:
                    c4:3c:ab:d3:0e:bf:4b:89:e5:03:3a:34:3f:a4:c8:
                    8d:c5:ec:4c:74:70:7a:e1:5a:a0:97:83:95:32:1b:
                    82:a2:57:15:34:84:b4:df:1c:8c:96:7f:46:a1:8a:
                    e3:62:fc:8f:2d:6a:0c:41:f4:bb:6f:6c:dd:cd:59:
                    54:5b:c5:ac:69:b5:a3:2f:b6:af:9f:22:ca:46:0e:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3A:D3:EE:50:81:FE:C5:E5:AF:FA:28:82:FF:0E:57:70:C2:ED:8A
            X509v3 Authority Key Identifier:
                keyid:AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/34352e3136362e3136312e302f32342d3234203d3e20323637393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:cd:a2:4c:a7:df:2f:d3:ca:17:78:9d:57:c3:e8:f8:2a:87:
         3d:eb:44:96:8f:4f:d2:8a:d0:97:19:19:56:54:04:97:ae:2b:
         d1:a8:c6:c7:3b:eb:e7:cd:c5:0b:cd:cb:ae:14:ca:71:c7:0c:
         07:36:b4:74:f1:b1:a8:7e:f2:f5:16:6d:3e:c3:5b:87:b7:63:
         6b:92:ee:98:94:ac:ae:7c:68:bb:94:40:58:a5:6e:f9:8a:c4:
         1d:94:89:2c:08:0b:2c:ff:f9:83:0f:17:d1:de:a2:32:c8:f2:
         e2:8a:bc:59:e2:98:5f:16:16:4d:7f:ac:8d:fb:50:53:6e:12:
         91:07:cf:4f:98:ee:f7:44:54:b9:82:3c:a8:10:6a:23:f3:ba:
         fc:82:fa:32:40:11:b3:62:f0:a5:c5:cd:45:25:28:42:cb:ee:
         65:cd:ff:25:76:b6:af:2f:b8:a6:12:4e:04:78:5b:11:1f:41:
         e6:15:96:31:27:09:09:86:7b:4c:89:e1:9d:ff:4c:09:c1:62:
         77:93:38:99:87:8b:53:ea:8c:27:67:74:86:af:dc:9d:04:36:
         1e:c4:62:a3:ca:8a:02:b5:3e:f5:5b:67:6a:84:cc:cf:42:16:
         00:17:12:a8:a0:69:f9:fa:0d:dd:f1:5c:b8:3c:a9:18:26:68:
         fa:f4:69:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:18:29 2025 by rpki-client