Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/34352e372e32302e302f32322d3234203d3e203532383932.roa
File:                     34352e372e32302e302f32322d3234203d3e203532383932.roa (raw, json)
Hash identifier:          uuNPMai8ndRuVx6IUex5iCAghpCldvzcb3y7pne/o20=
Subject key identifier:   DF:66:49:DF:6F:E4:33:30:CA:91:06:61:3E:09:B5:AD:16:87:E9:47
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       33B69A4E98EE052F919E8D91D4467628DF0DF7AA
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/34352e372e32302e302f32322d3234203d3e203532383932.roa
Signing time:             Thu 19 Jun 2025 19:01:36 +0000
ROA not before:           Thu 19 Jun 2025 18:56:36 +0000
ROA not after:            Thu 18 Jun 2026 19:01:36 +0000
asID:                     52892
IP address blocks:        45.7.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 07:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b6:9a:4e:98:ee:05:2f:91:9e:8d:91:d4:46:76:28:df:0d:f7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: Jun 19 18:56:36 2025 GMT
            Not After : Jun 18 19:01:36 2026 GMT
        Subject: CN=DF6649DF6FE43330CA9106613E09B5AD1687E947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e9:6f:a5:be:e6:8e:a8:8e:5d:29:7b:34:db:
                    c8:f4:8c:d3:0e:5e:20:ef:5d:c8:8c:a9:22:f2:f0:
                    9c:d3:2f:5e:6e:8c:0b:2a:72:da:45:7b:30:4f:1f:
                    38:73:a4:c7:52:ba:e1:39:e2:2e:80:4a:c5:d5:af:
                    31:fb:d2:74:ce:ed:fe:11:f2:84:71:08:24:2e:7c:
                    a4:49:79:e1:74:5f:f2:bf:61:44:fd:2d:7f:8e:77:
                    18:05:fc:c7:80:b5:72:0b:db:7e:49:e9:54:f4:af:
                    f8:7d:a9:6c:58:63:7f:d1:1a:de:8d:b3:24:16:4d:
                    56:f5:2b:74:26:b4:a5:25:cd:4e:72:be:1f:db:bf:
                    86:d9:dc:2c:5c:0e:cc:4e:58:32:54:70:63:45:0d:
                    7c:50:4e:dd:98:a8:3c:81:19:9c:33:08:40:68:74:
                    9b:11:26:22:71:b4:ce:87:a6:37:cc:3b:60:c1:d2:
                    b1:af:94:f7:16:93:b8:14:79:85:ee:0e:3e:63:ee:
                    75:1f:2a:23:d2:b9:84:8e:0d:9a:e8:be:5d:53:18:
                    ad:be:b6:72:c4:2b:6c:0c:b5:be:87:b7:f9:2b:43:
                    e2:38:0d:c9:6c:c8:61:bd:87:3f:d6:59:3f:1f:3d:
                    46:73:d7:2d:a8:78:75:87:fb:5c:5f:47:ad:2a:c6:
                    6a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:66:49:DF:6F:E4:33:30:CA:91:06:61:3E:09:B5:AD:16:87:E9:47
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/34352e372e32302e302f32322d3234203d3e203532383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:39:41:be:28:39:73:1d:8f:70:15:eb:14:c9:5d:c8:b0:3f:
         70:e9:e3:7a:8e:ba:b2:7d:e7:58:14:f5:74:14:b0:fd:64:ec:
         4f:66:bf:2c:62:a9:13:50:56:95:75:2a:b1:7d:43:4c:93:97:
         88:29:65:ea:f3:b4:d5:d7:6f:cb:88:fb:77:9c:ae:09:76:d3:
         40:d8:53:72:0a:73:ea:f9:71:ab:69:86:3a:c0:45:6b:29:72:
         2a:ff:37:f5:ac:83:b0:a9:db:26:26:99:35:49:41:6e:ca:c1:
         bb:34:54:d7:99:c8:31:58:f3:2a:2a:15:89:b6:4e:ca:4f:7d:
         94:c2:04:fb:2b:ad:68:84:f4:0a:fe:bf:31:c5:b1:0a:b7:54:
         59:c6:90:ab:25:33:c3:44:61:24:70:d9:ec:f8:2a:3b:03:e6:
         58:bd:ae:39:f9:f2:49:b2:68:1a:36:23:17:52:c1:6d:75:d4:
         d8:9a:1c:7e:ce:f1:8e:d0:4a:37:d1:a9:ea:71:9f:ba:57:2c:
         29:97:c1:2f:a1:cf:9d:4b:b4:b3:cc:32:b9:33:cc:1d:da:76:
         e2:73:8e:f6:5e:67:df:10:4e:86:9e:dd:ab:8f:b6:0e:8b:91:
         01:f8:42:2e:36:cf:6f:97:c6:e0:ed:05:13:7f:66:30:c3:1c:
         58:51:f4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:30:02 2025 by rpki-client