Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32322d3234203d3e20323639363634.roa
File:                     34352e3139312e32302e302f32322d3234203d3e20323639363634.roa (raw, json)
Hash identifier:          DjdMDcke6ilnD8tmmfgHtUJXmWqTF52hHf84c4Ol0mc=
Subject key identifier:   41:FE:E1:E2:1C:B1:E8:00:9A:E0:0B:CD:7F:15:A0:06:14:06:22:AC
Certificate issuer:       /CN=BCC70231E0F5873F65D74BA9E22BDB4A1E52E437
Certificate serial:       09FB13901E5D3CA45732DF290C9C1671DD63DF58
Authority key identifier: BC:C7:02:31:E0:F5:87:3F:65:D7:4B:A9:E2:2B:DB:4A:1E:52:E4:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32322d3234203d3e20323639363634.roa
Signing time:             Fri 15 Aug 2025 18:10:17 +0000
ROA not before:           Fri 15 Aug 2025 18:05:17 +0000
ROA not after:            Fri 14 Aug 2026 18:10:17 +0000
asID:                     269664
IP address blocks:        45.191.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 05:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fb:13:90:1e:5d:3c:a4:57:32:df:29:0c:9c:16:71:dd:63:df:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC70231E0F5873F65D74BA9E22BDB4A1E52E437
        Validity
            Not Before: Aug 15 18:05:17 2025 GMT
            Not After : Aug 14 18:10:17 2026 GMT
        Subject: CN=41FEE1E21CB1E8009AE00BCD7F15A006140622AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:6a:2e:9c:a6:b4:9f:4d:b8:f4:43:37:8b:
                    7d:fe:cd:db:48:ee:3d:67:72:26:2e:84:fb:1a:ca:
                    6d:51:6f:45:a9:c3:d2:02:a5:76:78:99:a0:83:46:
                    73:27:9d:19:a7:f0:8e:e5:b0:db:f4:b9:a9:c2:69:
                    2c:07:a0:45:55:e5:f8:31:b8:cc:f6:9c:30:40:9e:
                    c0:c0:75:55:6f:4c:0d:bc:1c:12:eb:24:11:2f:55:
                    e4:51:c3:65:a3:15:2b:a9:af:b5:ba:43:76:13:e1:
                    2f:65:f9:bf:f1:e5:59:3e:94:13:e1:60:86:47:c9:
                    df:e6:2b:28:9b:11:1f:b9:20:bf:f2:05:0e:cb:17:
                    c0:e5:d9:b1:cf:19:05:ff:66:63:18:0f:e6:58:69:
                    5d:f1:4d:d4:75:09:d4:79:2b:91:62:e0:aa:7e:1f:
                    a5:f5:1b:43:77:c1:12:39:27:6d:8c:af:0e:15:ec:
                    6b:af:48:a8:d2:db:8e:3c:a8:d6:ad:a3:f5:d5:fd:
                    9a:db:ee:57:45:f0:de:53:34:65:69:62:3c:c9:36:
                    87:0f:51:c0:d6:43:45:fd:fe:94:df:26:33:3d:e9:
                    b8:f4:55:f5:46:48:e1:f1:84:1f:c7:85:b3:3c:eb:
                    4d:ae:14:a4:20:8f:9c:e6:25:0a:b6:b5:61:d6:af:
                    96:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FE:E1:E2:1C:B1:E8:00:9A:E0:0B:CD:7F:15:A0:06:14:06:22:AC
            X509v3 Authority Key Identifier:
                keyid:BC:C7:02:31:E0:F5:87:3F:65:D7:4B:A9:E2:2B:DB:4A:1E:52:E4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32322d3234203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:d8:d2:e2:32:db:20:fb:85:aa:7e:19:1a:68:42:be:11:c2:
         fd:13:05:c8:43:f2:51:ed:8e:89:15:d4:82:cb:ea:e8:35:e0:
         db:34:13:d3:c0:f5:31:a0:48:89:d5:3c:68:70:1d:2c:84:8a:
         2f:ef:6a:a6:96:47:c5:79:4a:01:e4:bc:6f:02:26:a1:48:c4:
         76:24:b4:53:10:d4:20:39:1d:0d:e8:b6:ed:ac:ef:43:e3:1a:
         2c:56:e7:e0:e3:52:a4:f7:cc:fc:ab:80:59:bd:65:40:5c:cb:
         e4:74:f0:90:fe:ea:1a:a0:24:92:cd:b2:0d:d0:82:9f:21:c9:
         95:2d:3a:b0:53:15:31:b9:8d:e6:31:39:e2:10:75:6f:8f:1a:
         76:d4:4c:af:ff:4c:2e:cb:0c:e7:14:ff:28:9e:8c:00:2c:89:
         cf:57:c6:18:77:08:21:ae:48:5b:6a:be:31:29:f2:72:60:3e:
         d9:76:24:39:f5:75:98:72:9b:39:f2:31:77:bf:e9:9c:64:51:
         cf:22:94:f1:dc:0f:4b:2f:59:c0:d5:13:39:ef:2c:d4:17:21:
         ec:69:dc:54:8e:18:b0:1c:94:8f:67:05:c0:57:5f:f7:bf:27:
         9f:b9:35:23:76:a9:20:f2:e5:77:ba:f8:f5:07:88:e8:a7:6b:
         eb:e3:02:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:26:49 2025 by rpki-client