Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138372e302f32342d3234203d3e20323638393034.roa
File:                     34352e3137352e3138372e302f32342d3234203d3e20323638393034.roa (raw, json)
Hash identifier:          VYVYjL/3JyvW8zNOWuLy3nBT7P+I7wx0VeZJAQd60lY=
Subject key identifier:   F4:AB:E9:19:5D:EA:26:9E:6B:CF:CC:B0:47:F0:CA:99:5D:1F:DB:61
Certificate issuer:       /CN=51C7BA1E3942705B2F09644F9699345322A65D7B
Certificate serial:       35CC27F8FB3B0345A847BE276C01FF4338122E2A
Authority key identifier: 51:C7:BA:1E:39:42:70:5B:2F:09:64:4F:96:99:34:53:22:A6:5D:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138372e302f32342d3234203d3e20323638393034.roa
Signing time:             Tue 17 Jun 2025 12:36:26 +0000
ROA not before:           Tue 17 Jun 2025 12:31:26 +0000
ROA not after:            Tue 16 Jun 2026 12:36:26 +0000
asID:                     268904
IP address blocks:        45.175.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.crl
                          rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 07:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cc:27:f8:fb:3b:03:45:a8:47:be:27:6c:01:ff:43:38:12:2e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C7BA1E3942705B2F09644F9699345322A65D7B
        Validity
            Not Before: Jun 17 12:31:26 2025 GMT
            Not After : Jun 16 12:36:26 2026 GMT
        Subject: CN=F4ABE9195DEA269E6BCFCCB047F0CA995D1FDB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:dd:98:c9:90:ca:a5:26:e4:f9:8a:48:cc:
                    67:20:53:cb:08:0a:c2:c5:01:25:bc:80:08:61:d2:
                    c3:3c:97:9a:ad:47:e4:af:b9:f6:9a:3d:bc:1b:cf:
                    a0:f2:b1:d8:b4:18:05:c9:3b:48:42:fe:d9:f7:f7:
                    6f:1e:ac:7d:aa:40:b1:f9:81:51:4b:48:03:b7:68:
                    d4:b5:5c:e0:a3:bc:0d:ab:1b:c0:a0:cf:0a:82:30:
                    16:17:16:ec:fb:6f:c0:1e:b4:3f:51:e8:53:40:82:
                    5f:55:2b:37:04:53:5a:5e:1a:61:8f:50:0a:c3:ac:
                    f2:0c:23:05:2d:94:6e:20:82:ef:ed:c9:9d:1d:ef:
                    6e:e7:7c:8b:ea:93:36:f2:f2:3c:e5:ba:e1:af:a1:
                    8b:77:fe:7a:74:1e:39:f7:c9:80:33:2b:60:da:a1:
                    3c:1d:2b:5b:57:1e:d0:6d:86:17:de:b0:1f:c3:5d:
                    b0:2d:6c:1a:fd:bf:df:94:8a:a4:f5:35:73:cb:30:
                    98:0c:6a:c4:95:2a:a5:0f:da:07:1b:f0:9a:a2:63:
                    f4:05:dd:e4:aa:a1:da:e7:80:bd:08:68:b8:47:fd:
                    07:1a:2a:03:49:c2:76:91:7b:56:3b:a8:21:88:e2:
                    9e:5c:d3:77:53:8d:e8:9f:62:2d:84:06:3a:d1:94:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AB:E9:19:5D:EA:26:9E:6B:CF:CC:B0:47:F0:CA:99:5D:1F:DB:61
            X509v3 Authority Key Identifier:
                keyid:51:C7:BA:1E:39:42:70:5B:2F:09:64:4F:96:99:34:53:22:A6:5D:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138372e302f32342d3234203d3e20323638393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:f5:3a:1a:92:5e:30:59:6e:88:43:0c:e9:21:f6:12:74:a1:
         a5:d0:04:c8:bb:b1:d1:1f:b6:c1:23:7e:6d:94:f7:a6:b8:57:
         98:d7:16:07:6c:1d:e3:ee:81:54:39:bf:cc:5b:31:72:0b:df:
         51:73:3f:e1:91:96:22:c9:a5:86:2a:fa:7e:98:6b:87:8e:d1:
         43:08:36:bc:03:3e:c2:d6:36:76:8d:37:e7:16:f0:0b:4e:2a:
         07:84:77:b0:8d:24:78:d7:90:b5:b6:bd:8e:21:73:3d:fe:f0:
         5e:26:d8:e3:2b:5f:00:db:96:16:0b:4f:41:97:21:7b:62:40:
         d4:23:57:cd:25:af:76:69:d4:5e:e6:21:72:55:0d:7e:54:51:
         e8:f3:6e:e2:fb:34:91:f0:de:1b:bc:1c:7e:3f:e0:ef:58:cb:
         e1:ae:a6:9d:e2:56:c1:bc:11:35:33:d6:85:a7:45:dc:b4:77:
         58:5e:c0:10:b6:36:85:68:81:b8:8a:e2:44:b2:49:2e:9b:1b:
         24:24:53:51:82:4e:f7:81:3f:ce:90:3f:14:a7:3a:8b:d6:aa:
         36:2a:f2:38:f7:19:1d:c9:e3:4e:d2:89:15:0f:4b:04:4a:42:
         f4:85:62:ec:60:1b:f5:22:5c:ca:e6:84:d4:83:a2:b7:b9:16:
         01:aa:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:04:06 2025 by rpki-client