Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130332e302f32342d3234203d3e20323639313832.roa
File:                     34352e3138312e3130332e302f32342d3234203d3e20323639313832.roa (raw, json)
Hash identifier:          UEhJ3lr26zAANVlylL3MUg8/DAUR2//b5YNdI5IlKwg=
Subject key identifier:   31:A9:5C:62:37:B7:72:D4:6E:EC:DA:C4:62:A1:17:C7:99:12:36:EE
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       4832ABD3C7EDE9C07DCB839BCAF3833B11BE7942
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130332e302f32342d3234203d3e20323639313832.roa
Signing time:             Sat 05 Jul 2025 01:32:47 +0000
ROA not before:           Sat 05 Jul 2025 01:27:47 +0000
ROA not after:            Sat 04 Jul 2026 01:32:47 +0000
asID:                     269182
IP address blocks:        45.181.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 19:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:32:ab:d3:c7:ed:e9:c0:7d:cb:83:9b:ca:f3:83:3b:11:be:79:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Jul  5 01:27:47 2025 GMT
            Not After : Jul  4 01:32:47 2026 GMT
        Subject: CN=31A95C6237B772D46EECDAC462A117C7991236EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:5f:79:01:63:0d:d7:96:d7:e4:25:e2:de:
                    40:e8:88:d7:f7:cc:bc:b3:65:1a:69:1f:5c:27:57:
                    b8:e1:5a:f2:00:d3:38:2c:e6:19:e2:5f:ad:87:65:
                    00:07:6a:60:93:32:06:b7:9b:b9:b9:62:80:26:f8:
                    b6:6a:30:d4:27:ab:29:db:06:db:8a:3f:8f:fe:18:
                    3b:06:f6:35:f5:29:ae:ab:00:42:0e:e3:52:b1:23:
                    01:65:05:da:1e:fe:de:ff:3d:13:11:4a:bb:60:e7:
                    ad:2e:a8:0d:d7:e6:c0:8d:07:7e:5a:11:53:5e:3c:
                    62:8e:12:48:ee:e6:6c:dc:c5:0c:f1:6d:73:0e:c8:
                    51:7b:30:87:2b:f4:1e:ef:92:dc:7d:61:7f:5f:6d:
                    86:bd:75:d5:fb:4a:11:3e:fc:a5:d8:04:24:82:76:
                    96:86:a6:29:91:af:f8:d8:6a:a0:3f:a0:a3:82:34:
                    62:bd:24:5f:1a:79:b1:34:9a:52:fe:19:4b:be:8b:
                    dd:f9:8f:14:49:a7:43:f8:65:06:83:a9:7d:7f:37:
                    52:00:e4:69:e1:b7:5f:db:aa:4e:26:0c:c9:51:b4:
                    4a:a0:76:fb:e4:b5:69:2e:29:75:07:df:bc:bd:e1:
                    7f:8c:f6:c5:41:16:ea:71:53:25:d4:67:70:26:c9:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A9:5C:62:37:B7:72:D4:6E:EC:DA:C4:62:A1:17:C7:99:12:36:EE
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130332e302f32342d3234203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:46:06:4a:6e:e7:3a:56:0a:a9:2c:a2:f4:a6:55:ea:4a:88:
         df:c8:3f:9d:ee:e4:e7:e1:e2:1d:cc:01:fb:8d:76:03:07:6b:
         18:30:9d:8d:98:f1:e6:35:b1:34:43:20:c5:84:6e:60:69:2f:
         84:3e:19:c6:36:e4:5a:6b:a1:6b:83:0d:7b:17:de:11:28:1a:
         fd:f2:8a:d6:5a:1a:72:62:55:d7:17:9e:41:81:32:94:7e:53:
         7e:ab:a4:30:31:3d:ee:34:8e:dd:7b:22:ef:cf:1b:9e:a1:7d:
         de:91:71:f5:01:dd:68:f8:33:5a:ac:16:b6:b0:bb:5c:f8:80:
         e6:47:a8:89:bb:00:1a:81:f4:c8:71:85:22:1c:e2:36:b4:b2:
         28:72:0f:5a:cf:23:8b:02:8f:f9:19:95:d3:d9:41:4a:f2:6d:
         e2:7d:fc:d0:bf:b3:34:16:a4:0d:0c:ff:b2:02:ea:8d:1d:77:
         19:d1:6a:80:91:99:be:b1:ce:1a:74:19:bc:24:ea:a4:a8:9f:
         1f:bd:a7:a1:99:ac:c6:dd:df:7b:79:bc:f4:60:41:db:55:d5:
         0d:0c:99:4a:04:3a:b7:e2:08:cb:54:2b:38:12:57:05:9e:47:
         d0:57:5b:1d:2e:dd:c4:43:5a:84:2a:f5:3b:c8:6d:ba:9e:25:
         d0:f3:4c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:43 2025 by rpki-client