Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/34352e3136362e3136332e302f32342d3234203d3e20323637393835.roa
File:                     34352e3136362e3136332e302f32342d3234203d3e20323637393835.roa (raw, json)
Hash identifier:          yawP4G/X45WxHSHmzXNI13pBAL/44P9LR5GEYp5D2ys=
Subject key identifier:   C3:87:0A:8C:96:D7:4D:DD:3B:DE:98:8E:7A:B5:44:0C:96:1B:18:FE
Certificate issuer:       /CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
Certificate serial:       3DA0E724903B5DFDECEE2B268B5F892ECED2C69D
Authority key identifier: AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/34352e3136362e3136332e302f32342d3234203d3e20323637393835.roa
Signing time:             Thu 21 Aug 2025 11:53:53 +0000
ROA not before:           Thu 21 Aug 2025 11:48:53 +0000
ROA not after:            Thu 20 Aug 2026 11:53:53 +0000
asID:                     267985
IP address blocks:        45.166.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl
                          rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a0:e7:24:90:3b:5d:fd:ec:ee:2b:26:8b:5f:89:2e:ce:d2:c6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
        Validity
            Not Before: Aug 21 11:48:53 2025 GMT
            Not After : Aug 20 11:53:53 2026 GMT
        Subject: CN=C3870A8C96D74DDD3BDE988E7AB5440C961B18FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7c:76:ad:49:c6:53:43:44:85:7e:f6:fb:82:
                    b0:89:fb:81:8f:f1:7f:41:65:14:32:d5:af:ee:b9:
                    1d:8f:fc:98:2a:7d:bf:9b:41:8b:08:56:98:b4:2e:
                    32:89:01:96:a5:7f:a2:e6:00:84:91:69:97:ea:84:
                    34:8b:0f:bf:6e:4b:c6:e2:76:90:f1:d0:7a:a5:73:
                    bc:68:db:5f:7d:64:8b:29:0f:70:75:10:96:88:e3:
                    7d:6c:62:06:6b:8b:c9:dc:f7:24:0c:27:bd:89:9b:
                    22:19:61:0d:b9:b2:74:ca:c9:3f:20:a0:ca:a5:c1:
                    23:32:68:76:1f:04:ff:e4:1d:0f:18:aa:f4:0a:c6:
                    98:91:dd:9f:42:75:b2:e1:73:5c:a5:a0:cc:5e:3d:
                    56:f3:fa:8b:d6:f7:88:bf:0d:43:8e:8d:e6:4e:00:
                    57:95:15:8d:d4:fc:e2:fd:4e:85:de:38:da:69:a0:
                    47:90:4c:52:21:9c:7c:96:45:99:a2:17:8c:54:03:
                    55:4a:17:8c:c3:20:0d:0c:5f:86:a5:2d:ed:54:71:
                    c1:6c:3c:83:58:5c:cd:e6:44:0f:2c:13:ba:0d:ae:
                    5d:c1:b5:aa:3a:26:15:02:2a:8f:18:c3:9a:05:db:
                    e9:15:af:4a:e4:9c:5f:29:b0:1a:c3:fc:42:8d:18:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:87:0A:8C:96:D7:4D:DD:3B:DE:98:8E:7A:B5:44:0C:96:1B:18:FE
            X509v3 Authority Key Identifier:
                keyid:AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/34352e3136362e3136332e302f32342d3234203d3e20323637393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d4:91:46:4f:4c:9d:4a:85:72:4c:15:30:50:b6:cf:09:a0:
         32:ab:b7:9b:85:4d:4c:08:82:ab:bf:9a:22:53:ea:da:a2:c5:
         eb:7e:6b:06:95:aa:a7:f3:96:b3:a3:ed:1a:58:a8:63:fa:8b:
         3f:c2:35:2e:c7:fd:12:c4:8d:d3:fa:16:77:c4:08:31:99:44:
         3b:bd:72:10:34:9c:ef:88:48:05:3b:dc:aa:06:65:fb:88:18:
         a1:3b:03:45:55:42:1f:95:3b:d6:b2:b1:90:3e:1e:b6:9f:af:
         f1:1b:af:0e:31:10:ea:17:ac:6b:1d:be:34:dc:87:56:73:3a:
         82:11:a4:82:1c:8e:41:94:63:94:62:76:98:44:f0:5f:9b:1a:
         57:bf:6d:a3:3b:32:97:23:0d:1b:2e:66:bf:af:3a:8d:dd:9c:
         00:e5:35:7f:60:3a:dc:f1:d9:de:df:e6:61:59:7c:37:c4:26:
         d6:42:03:be:6d:41:9c:0f:d4:ed:f7:23:74:b7:af:0d:31:49:
         1e:81:f9:a9:2a:b2:ac:4f:c7:2d:8f:0f:c9:f7:a2:40:c6:db:
         18:e7:87:18:2a:9a:60:ba:cc:4c:d0:83:74:7d:29:0f:3e:0f:
         a3:4a:f2:50:63:bf:bd:57:69:56:c9:9a:52:ba:a3:6b:39:b4:
         c5:c0:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:17:00 2025 by rpki-client