Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232352e302f32342d3234203d3e20323639343035.roa
File:                     34352e3138352e3232352e302f32342d3234203d3e20323639343035.roa (raw, json)
Hash identifier:          /hi2Ppkh4LJYj49yJ7Dt9lT/I+zgN5aU9TjEDqH5ub4=
Subject key identifier:   D2:E0:1A:1D:F0:22:D2:71:E0:AD:07:DC:08:AD:0D:EF:24:B8:E2:40
Certificate issuer:       /CN=748041F88BBB1083E96FEC5DCF73AE0E40DA21EE
Certificate serial:       61B5F6FE2C78BD86DBF9E97CCB8053FB113C01BE
Authority key identifier: 74:80:41:F8:8B:BB:10:83:E9:6F:EC:5D:CF:73:AE:0E:40:DA:21:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232352e302f32342d3234203d3e20323639343035.roa
Signing time:             Thu 12 Jun 2025 13:02:55 +0000
ROA not before:           Thu 12 Jun 2025 12:57:55 +0000
ROA not after:            Thu 11 Jun 2026 13:02:55 +0000
asID:                     269405
IP address blocks:        45.185.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.crl
                          rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 23:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b5:f6:fe:2c:78:bd:86:db:f9:e9:7c:cb:80:53:fb:11:3c:01:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748041F88BBB1083E96FEC5DCF73AE0E40DA21EE
        Validity
            Not Before: Jun 12 12:57:55 2025 GMT
            Not After : Jun 11 13:02:55 2026 GMT
        Subject: CN=D2E01A1DF022D271E0AD07DC08AD0DEF24B8E240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:91:5a:1a:48:dd:68:3f:ae:0e:06:b4:83:77:
                    7c:0e:6c:6a:9d:3e:02:a2:e7:e2:c5:e4:28:42:c5:
                    47:0a:42:29:54:11:e4:2f:35:b3:a0:a8:8b:0a:f9:
                    60:cc:e6:0a:1e:76:ec:2f:95:3e:bc:70:24:b2:c5:
                    8c:21:17:3e:5c:70:18:0a:bb:ad:55:4b:26:00:9c:
                    01:2f:78:93:0f:f6:56:b0:a8:a6:e7:16:a8:89:29:
                    8b:4b:f5:b8:7b:79:aa:a7:50:51:bd:27:3b:be:ec:
                    1d:5b:d2:91:c2:2f:97:b4:ed:b0:7f:bf:bf:cb:3c:
                    7f:2f:e4:82:65:52:5b:af:8c:e4:78:e6:4f:f1:3c:
                    ca:70:12:71:8f:70:7a:f3:8b:d1:66:b6:99:45:9c:
                    46:c0:bf:15:b6:8e:69:84:ea:68:70:ee:b7:38:ec:
                    a3:fa:71:d3:7a:7d:7d:e5:ad:6c:fa:09:7d:0e:37:
                    d6:a2:f6:dd:f2:37:b0:3f:d6:7d:a7:f3:35:b4:35:
                    a2:40:0b:0c:e4:82:b9:4e:5b:2d:0a:d1:ad:30:d4:
                    4b:f9:a9:4d:c4:62:07:ab:30:ad:95:2e:cb:e3:a1:
                    65:68:a9:9f:ac:9e:c5:37:76:53:ef:0e:c5:b6:9c:
                    d9:d4:e6:99:cb:f7:46:15:99:4e:f5:b0:c6:cc:4f:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E0:1A:1D:F0:22:D2:71:E0:AD:07:DC:08:AD:0D:EF:24:B8:E2:40
            X509v3 Authority Key Identifier:
                keyid:74:80:41:F8:8B:BB:10:83:E9:6F:EC:5D:CF:73:AE:0E:40:DA:21:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232352e302f32342d3234203d3e20323639343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f0:1b:86:10:25:e2:c5:9d:40:2d:85:ee:0d:ee:db:a0:22:17:
         d0:34:15:e8:70:2c:11:67:9c:6c:4a:92:d3:4c:d3:00:36:43:
         47:22:57:0b:a9:8f:79:fa:25:b1:5c:7a:80:48:1b:e4:d0:f8:
         5a:5d:e5:ba:0f:49:7a:07:40:19:02:2f:a3:b0:90:4e:ea:c3:
         3c:3e:cc:74:d3:6a:ff:7b:a8:54:50:81:b9:ae:35:b8:9b:9a:
         f6:e8:4a:26:84:9d:51:07:2e:7a:9f:45:91:6c:3b:7d:c9:15:
         48:b1:76:8e:34:07:2d:c8:b3:ba:f2:d9:f0:85:b2:e2:76:e7:
         aa:f8:11:06:3e:82:58:70:49:a3:30:c7:62:71:ee:1e:3e:ce:
         fd:8b:f2:e9:cf:3d:61:53:1a:94:35:5d:1e:61:4f:a3:c1:f4:
         30:b1:c3:48:f1:a8:7e:b9:81:c1:0b:ff:fc:4a:3d:37:13:01:
         30:f6:dd:92:22:2a:0a:11:f3:a6:1c:e3:17:6e:e9:bd:62:40:
         76:30:e9:ec:23:ee:5a:cf:96:d4:6f:ff:58:c0:d5:f2:49:b9:
         c9:3e:8a:33:b0:18:d0:c7:a9:9f:bc:a3:9c:a0:82:5c:64:ad:
         37:30:10:73:a2:49:5a:9e:72:05:2d:9d:86:a7:5a:4c:33:a9:
         ca:df:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:41:27 2025 by rpki-client