Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/34352e3137322e38342e302f32322d3332203d3e20323638373537.roa
File:                     34352e3137322e38342e302f32322d3332203d3e20323638373537.roa (raw, json)
Hash identifier:          XfsrGBMwGQdmIBeApqO3Zln8yrp8eWCi8HYeGmPZ/cg=
Subject key identifier:   93:93:65:51:DE:5C:D8:A8:92:E3:7B:35:CE:5E:14:0D:31:3F:9C:48
Certificate issuer:       /CN=80C809FA23F8FE5F0C14001C9199D568F7E9DDEE
Certificate serial:       56FB80B2A684C64F52AC4331715F73EC301288E3
Authority key identifier: 80:C8:09:FA:23:F8:FE:5F:0C:14:00:1C:91:99:D5:68:F7:E9:DD:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C809FA23F8FE5F0C14001C9199D568F7E9DDEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/34352e3137322e38342e302f32322d3332203d3e20323638373537.roa
Signing time:             Fri 20 Jun 2025 00:04:20 +0000
ROA not before:           Thu 19 Jun 2025 23:59:20 +0000
ROA not after:            Fri 19 Jun 2026 00:04:20 +0000
asID:                     268757
IP address blocks:        45.172.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/80C809FA23F8FE5F0C14001C9199D568F7E9DDEE.crl
                          rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/80C809FA23F8FE5F0C14001C9199D568F7E9DDEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C809FA23F8FE5F0C14001C9199D568F7E9DDEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 04:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fb:80:b2:a6:84:c6:4f:52:ac:43:31:71:5f:73:ec:30:12:88:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C809FA23F8FE5F0C14001C9199D568F7E9DDEE
        Validity
            Not Before: Jun 19 23:59:20 2025 GMT
            Not After : Jun 19 00:04:20 2026 GMT
        Subject: CN=93936551DE5CD8A892E37B35CE5E140D313F9C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:e1:90:12:1a:ea:78:ad:a2:59:64:bd:c8:
                    2b:52:3c:c3:ae:3f:5f:b6:f8:86:32:28:8f:ab:98:
                    a1:c7:86:33:60:42:ac:fa:05:c9:d2:85:d6:e4:33:
                    6d:6e:3e:50:c7:4e:01:c1:e4:38:67:0f:19:69:f3:
                    da:e8:fb:3d:02:6b:5e:9a:da:9b:c0:3e:b8:78:79:
                    66:3d:45:0d:0c:ae:0c:76:56:2d:fe:6b:68:dd:16:
                    22:87:e3:71:48:7a:4d:66:75:55:87:63:55:b7:80:
                    94:63:aa:9d:47:ff:dc:ea:80:bb:f5:d4:99:8d:56:
                    f5:cb:0e:e1:c0:41:6e:10:cf:53:64:7e:10:f6:45:
                    c7:ad:19:38:ae:55:6c:61:59:45:a2:2e:46:f9:48:
                    e4:0f:98:9c:3b:8f:20:e9:f1:ee:43:da:9f:4b:b8:
                    4a:8d:ee:5b:fa:a4:b4:14:ea:8e:98:99:df:8e:40:
                    d5:2d:9a:aa:5c:b7:f9:cf:e2:5c:33:38:5d:80:9f:
                    7f:81:78:18:ac:c7:5c:9e:b5:f7:af:4d:64:f9:82:
                    57:19:4f:58:55:63:7b:c5:00:36:83:02:8a:fe:21:
                    11:0e:4a:97:89:26:35:28:db:0c:61:96:ed:a1:28:
                    71:82:0b:0a:ca:d2:ce:06:14:76:2b:2a:ab:1d:37:
                    70:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:93:65:51:DE:5C:D8:A8:92:E3:7B:35:CE:5E:14:0D:31:3F:9C:48
            X509v3 Authority Key Identifier:
                keyid:80:C8:09:FA:23:F8:FE:5F:0C:14:00:1C:91:99:D5:68:F7:E9:DD:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/80C809FA23F8FE5F0C14001C9199D568F7E9DDEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C809FA23F8FE5F0C14001C9199D568F7E9DDEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/34352e3137322e38342e302f32322d3332203d3e20323638373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:18:b5:c0:ff:c8:be:fd:b0:4b:c4:d6:c8:65:06:89:76:94:
         f7:fd:25:4c:d7:7a:e4:b8:fe:99:07:9e:0d:15:14:de:f0:1b:
         50:aa:f6:a7:0f:0d:fd:f2:af:4e:97:58:59:37:7c:5b:11:15:
         31:86:7b:f4:1b:ef:b5:e7:36:b0:f4:13:ad:20:58:9f:14:1c:
         ed:d9:8c:29:c8:d5:54:c3:a4:94:dd:1d:12:62:b6:62:07:84:
         58:d1:ae:cb:f1:ed:10:44:79:fa:72:74:bc:a5:06:f8:79:30:
         cd:6c:4f:43:a3:63:e9:02:83:80:1c:c7:c9:69:22:16:68:aa:
         15:0d:7f:bd:15:0e:d3:64:54:e4:00:28:b6:ab:a7:1e:59:2b:
         6d:70:40:a9:b8:fa:de:1b:df:85:2f:7d:f6:45:01:4c:10:a3:
         88:48:09:84:dd:76:a1:4d:5b:4e:73:a9:55:95:50:b6:13:a8:
         e8:c1:e6:82:79:17:78:05:c3:ad:fe:a0:5c:3a:c7:66:47:79:
         da:af:7d:c5:35:b0:34:cd:86:a8:e6:5c:be:34:2c:b6:9b:6a:
         05:79:23:3c:e0:35:a2:b4:4a:2a:52:a7:4c:1a:75:17:5c:6c:
         76:93:c1:85:8a:b1:e9:11:9f:e2:d7:e7:91:dd:c3:6e:2f:b5:
         55:23:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:18:50 2025 by rpki-client