Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/34352e3233302e35322e302f32322d3332203d3e20323637313730.roa
File:                     34352e3233302e35322e302f32322d3332203d3e20323637313730.roa (raw, json)
Hash identifier:          9GQf99ENyazByAV1CQvQWRDnSHZepIJf6yy0wKzlj24=
Subject key identifier:   62:1A:D2:29:82:06:6B:4E:55:7D:F4:81:62:84:C3:16:FD:9C:B3:95
Certificate issuer:       /CN=2494434634BFFD100A79E77C627D336FE9CE12E8
Certificate serial:       09570206F64907B88E77C99AEF7C7D707417603E
Authority key identifier: 24:94:43:46:34:BF:FD:10:0A:79:E7:7C:62:7D:33:6F:E9:CE:12:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2494434634BFFD100A79E77C627D336FE9CE12E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/34352e3233302e35322e302f32322d3332203d3e20323637313730.roa
Signing time:             Thu 03 Jul 2025 20:55:45 +0000
ROA not before:           Thu 03 Jul 2025 20:50:45 +0000
ROA not after:            Thu 02 Jul 2026 20:55:45 +0000
asID:                     267170
IP address blocks:        45.230.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/2494434634BFFD100A79E77C627D336FE9CE12E8.crl
                          rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/2494434634BFFD100A79E77C627D336FE9CE12E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2494434634BFFD100A79E77C627D336FE9CE12E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 09:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:57:02:06:f6:49:07:b8:8e:77:c9:9a:ef:7c:7d:70:74:17:60:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2494434634BFFD100A79E77C627D336FE9CE12E8
        Validity
            Not Before: Jul  3 20:50:45 2025 GMT
            Not After : Jul  2 20:55:45 2026 GMT
        Subject: CN=621AD22982066B4E557DF4816284C316FD9CB395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:a4:79:d3:6f:1b:c6:e3:5f:b2:41:5f:96:
                    42:8b:d1:f4:98:2c:18:06:a8:bc:8b:d4:c7:70:b4:
                    a6:04:7a:cf:c9:6b:23:66:b8:4e:ff:56:d6:10:2b:
                    e6:b1:3d:0d:ce:2b:fc:ea:f2:0a:69:85:0e:7d:bb:
                    9e:01:70:29:6a:29:33:15:5f:d7:e9:f8:17:eb:23:
                    9b:96:02:a5:d1:82:37:f7:a2:f6:3b:c8:37:01:96:
                    f5:1d:b4:da:82:a2:ac:a2:42:da:14:43:b9:99:70:
                    f6:d1:bb:46:3a:71:13:41:80:ba:ac:b0:09:e7:23:
                    8d:56:63:ca:e5:7d:05:10:89:2c:89:61:24:d1:0e:
                    19:9c:61:54:95:07:4b:8b:fc:c9:86:9c:5d:f6:72:
                    fd:4b:a6:21:8a:26:70:1b:bc:62:d0:24:3c:99:f7:
                    47:7e:5f:b6:04:49:b5:9d:a4:38:d3:aa:ca:28:24:
                    1a:1e:17:a8:ff:0b:dc:d8:80:14:58:74:bf:02:90:
                    25:6d:91:bb:32:bf:a2:f1:4e:73:a1:9f:92:61:98:
                    c3:f3:a9:45:81:b1:d3:19:44:3f:41:25:8a:f4:67:
                    0f:95:94:06:95:8e:b4:16:1c:4b:f2:be:6a:36:99:
                    a2:1c:1d:b9:97:a2:26:6d:a7:9a:b9:d4:03:04:34:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1A:D2:29:82:06:6B:4E:55:7D:F4:81:62:84:C3:16:FD:9C:B3:95
            X509v3 Authority Key Identifier:
                keyid:24:94:43:46:34:BF:FD:10:0A:79:E7:7C:62:7D:33:6F:E9:CE:12:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/2494434634BFFD100A79E77C627D336FE9CE12E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2494434634BFFD100A79E77C627D336FE9CE12E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/34352e3233302e35322e302f32322d3332203d3e20323637313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:a2:62:89:26:44:b3:b2:b3:df:67:1c:82:67:90:2a:36:6a:
         2c:8e:c8:46:1a:ce:ee:45:bf:ce:99:12:52:5f:69:0a:df:ec:
         13:bf:24:3f:b9:21:30:1f:cb:ac:25:c4:5b:6f:26:07:89:85:
         10:67:51:db:24:ab:8b:ec:79:30:d0:c2:7e:4b:92:85:d3:2e:
         6a:d8:2b:af:b7:b3:d2:60:ed:69:cf:b7:8e:78:2a:93:3c:5d:
         71:90:37:0f:3d:55:e0:02:a5:31:38:82:4e:ae:49:3d:3c:79:
         a6:c1:90:78:60:c9:4d:f0:0e:10:d3:d4:a2:41:e0:07:76:0d:
         70:07:b5:3e:a5:d6:fb:b8:3d:53:16:5f:8e:d7:d3:af:e2:0f:
         6f:b7:e9:7a:7b:9d:15:4d:9e:07:5c:6e:78:ef:12:c7:64:f8:
         0b:f3:32:6f:02:35:13:49:27:98:ed:e3:db:33:fd:90:83:d5:
         01:15:2c:f5:0d:32:e5:71:5b:a7:c4:11:6d:b1:3a:da:3d:b5:
         af:ee:5d:21:69:cf:93:a0:fd:7e:77:49:13:98:f9:f2:44:7e:
         9a:78:b5:72:9e:64:61:8d:aa:af:b0:a0:8b:20:d7:86:10:43:
         e4:41:98:a6:61:1f:22:63:67:ca:24:1c:7e:29:8c:dc:ad:b3:
         89:b6:69:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 16:53:50 2025 by rpki-client