Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33352e302f32342d3234203d3e20323638383337.roa
File:                     34352e3137342e33352e302f32342d3234203d3e20323638383337.roa (raw, json)
Hash identifier:          h7Oyc0CpYl9weVLUdncX8eltpPYFUzbL6TPhqcX6Mrs=
Subject key identifier:   7D:C8:33:59:24:AB:AE:48:5A:EA:46:EB:CD:43:A5:50:C3:B1:BC:02
Certificate issuer:       /CN=1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6
Certificate serial:       487ED3C9DD8616D658E5BBEB08DEEE98B43F530E
Authority key identifier: 1E:2A:6F:FD:6B:B1:63:D9:B8:C4:84:35:DD:B8:EE:59:92:3D:58:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33352e302f32342d3234203d3e20323638383337.roa
Signing time:             Thu 21 Aug 2025 01:57:45 +0000
ROA not before:           Thu 21 Aug 2025 01:52:45 +0000
ROA not after:            Thu 20 Aug 2026 01:57:45 +0000
asID:                     268837
IP address blocks:        45.174.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.crl
                          rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7e:d3:c9:dd:86:16:d6:58:e5:bb:eb:08:de:ee:98:b4:3f:53:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6
        Validity
            Not Before: Aug 21 01:52:45 2025 GMT
            Not After : Aug 20 01:57:45 2026 GMT
        Subject: CN=7DC8335924ABAE485AEA46EBCD43A550C3B1BC02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:dd:cb:79:39:11:b5:7c:d7:c3:2b:ce:0d:
                    d4:95:5c:77:6e:02:be:a7:1a:62:de:eb:7f:f8:ce:
                    7e:20:9a:79:84:8e:40:be:e9:ba:08:fe:fe:f8:2d:
                    d5:10:cc:53:8a:85:4d:33:94:fc:4a:53:2b:62:7e:
                    aa:8a:be:49:f2:f9:0f:a2:e6:a4:2c:7f:b3:dc:8b:
                    e6:93:4a:2e:42:98:a1:da:42:4a:8f:74:36:73:7b:
                    8d:98:1b:79:45:df:2a:b8:86:24:df:8b:05:57:e2:
                    16:3d:a9:9c:03:58:68:9f:e1:1b:aa:53:0d:95:2f:
                    5d:ce:d3:a7:63:a9:bc:11:a6:00:b3:ea:63:17:bb:
                    01:d5:a7:1f:8c:0b:7d:6f:c5:5e:8d:06:e2:00:a8:
                    ba:19:11:58:98:80:b6:ec:b7:71:15:c2:de:5b:32:
                    58:90:0a:80:81:70:76:ce:1c:d9:1e:02:21:09:b3:
                    38:62:8c:49:05:e3:1d:29:21:8e:5c:4c:75:23:eb:
                    e4:f0:b5:85:c3:60:b5:b3:68:a3:0f:50:5b:fa:b4:
                    b2:6e:fe:9d:71:14:73:07:db:c8:52:9b:ef:a4:0b:
                    22:27:76:1c:51:da:f5:48:da:9c:41:eb:e3:f6:62:
                    c7:1e:96:14:c5:14:44:07:d2:ef:30:fc:31:ea:dd:
                    cb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C8:33:59:24:AB:AE:48:5A:EA:46:EB:CD:43:A5:50:C3:B1:BC:02
            X509v3 Authority Key Identifier:
                keyid:1E:2A:6F:FD:6B:B1:63:D9:B8:C4:84:35:DD:B8:EE:59:92:3D:58:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2A6FFD6BB163D9B8C48435DDB8EE59923D58F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33352e302f32342d3234203d3e20323638383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:31:54:c4:e7:09:f4:c8:51:c5:11:dc:9c:be:c4:43:45:3a:
         80:91:b8:76:48:ab:c5:57:aa:e5:86:7a:f0:86:02:37:67:df:
         9e:68:a9:7a:cd:df:72:9f:81:2e:f2:7e:b1:d8:91:57:29:40:
         db:7f:7e:f6:bc:10:0a:90:e3:a7:5f:71:e7:88:50:5a:0f:d4:
         45:8c:47:20:d4:f3:33:5f:00:8c:84:1b:a3:48:1d:a1:81:c8:
         b1:4a:28:51:a7:c0:24:6d:41:28:2e:34:3b:63:49:72:ee:37:
         86:0b:97:f8:8c:9f:5c:df:4c:e5:31:b2:f5:0f:0d:04:d1:64:
         de:61:52:70:68:7e:f5:6d:f2:33:be:be:9d:2c:eb:fe:5a:0e:
         e1:4b:41:55:da:41:54:bd:79:20:66:37:4c:c1:95:10:4e:c1:
         43:6f:a9:bd:cf:07:f0:69:1c:de:21:2f:61:1e:cd:52:c6:b1:
         c1:13:73:49:bd:18:0d:f6:6c:c9:3b:60:94:5e:18:b1:12:8d:
         c2:d2:75:d0:7c:10:9a:2c:75:22:74:02:ed:f0:98:1c:8e:63:
         dc:69:9d:84:ab:e7:8c:a6:64:1e:04:f1:a8:20:ce:a9:23:fd:
         12:8c:12:7b:49:c7:fa:26:4f:80:a1:a4:f7:21:0d:03:8a:f5:
         0d:d7:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:24 2025 by rpki-client