Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36392e302f32342d3234203d3e20323637393932.roa
File:                     34352e3136372e36392e302f32342d3234203d3e20323637393932.roa (raw, json)
Hash identifier:          4fIw/t0WifAbr8TwjAyHaAMJ6sHkTrtPIyfphMNEKk8=
Subject key identifier:   8D:FA:B9:2F:47:0C:F6:03:A3:EC:CC:F9:92:72:93:B8:7B:E5:C6:DF
Certificate issuer:       /CN=7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7
Certificate serial:       1C9B95D102C4522CF078821662E00C0E7F53EF38
Authority key identifier: 78:73:E1:E8:F4:DA:C8:0D:5E:99:B8:19:A8:A4:29:E5:C3:E8:25:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36392e302f32342d3234203d3e20323637393932.roa
Signing time:             Wed 25 Jun 2025 13:43:55 +0000
ROA not before:           Wed 25 Jun 2025 13:38:55 +0000
ROA not after:            Wed 24 Jun 2026 13:43:55 +0000
asID:                     267992
IP address blocks:        45.167.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.crl
                          rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 01:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9b:95:d1:02:c4:52:2c:f0:78:82:16:62:e0:0c:0e:7f:53:ef:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7
        Validity
            Not Before: Jun 25 13:38:55 2025 GMT
            Not After : Jun 24 13:43:55 2026 GMT
        Subject: CN=8DFAB92F470CF603A3ECCCF9927293B87BE5C6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:85:67:8b:f0:5c:bb:b2:09:3d:85:6f:78:
                    18:57:1c:ba:b6:b9:f0:24:29:e1:e2:eb:b4:cc:a3:
                    3f:3f:1f:19:41:f2:69:f7:15:4f:7f:8c:b8:a8:d4:
                    3f:03:fd:ca:f9:ad:d3:79:1a:3b:28:0c:4a:96:e2:
                    3e:91:a4:9a:ea:85:fc:ce:4f:0d:9d:1c:a9:7e:9f:
                    07:14:48:a0:39:16:24:1d:c7:95:9c:28:58:48:01:
                    26:ce:ba:a4:6d:59:3c:b3:ba:5c:c5:9c:10:5e:cd:
                    6f:fc:65:2d:3a:de:98:c5:e7:b7:e7:7d:f1:df:b3:
                    13:8e:95:4d:97:ef:f6:d8:8a:8d:68:b1:64:91:2f:
                    a4:d5:09:16:70:b5:6e:e5:cf:bd:fa:28:2c:bb:3b:
                    e9:a2:5d:2f:4d:05:c3:1a:6c:68:c8:b5:3f:2f:60:
                    7d:b2:c2:ee:8a:30:72:7b:7c:4c:53:91:e9:84:ba:
                    53:3c:12:60:6f:b0:a2:19:b6:be:87:5a:6d:94:a4:
                    35:86:64:ce:66:b3:ed:b7:1c:4c:37:ed:09:54:99:
                    f5:7b:30:b9:2a:44:29:10:90:3f:63:06:d8:d8:69:
                    4b:7a:31:12:91:4d:5d:5f:87:46:24:9b:ec:27:59:
                    ad:f7:84:72:83:85:17:f0:c5:85:80:46:5a:0e:86:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FA:B9:2F:47:0C:F6:03:A3:EC:CC:F9:92:72:93:B8:7B:E5:C6:DF
            X509v3 Authority Key Identifier:
                keyid:78:73:E1:E8:F4:DA:C8:0D:5E:99:B8:19:A8:A4:29:E5:C3:E8:25:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36392e302f32342d3234203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:6e:55:6c:46:07:34:90:b9:70:70:ab:37:3b:aa:08:0a:a9:
         27:fd:b0:f1:61:08:db:ae:8b:0b:cb:50:2c:f8:c0:39:df:88:
         3c:c8:a3:57:9e:38:1c:53:07:e2:87:18:52:52:12:c6:01:d1:
         3c:f1:c5:0a:43:a2:ca:c9:c8:69:ab:23:47:84:a1:6d:e4:a1:
         12:ee:5b:5f:39:7f:48:c6:20:b6:f5:5b:cc:3b:52:69:35:e5:
         ea:61:72:9a:30:4f:9a:25:17:fb:4f:0b:9a:f3:1d:96:93:9e:
         55:97:de:be:8f:d1:a6:03:bd:3f:7a:6d:ed:df:f7:df:b8:40:
         5e:15:f7:d8:d5:fc:c2:04:b2:ad:40:83:97:ae:e0:0f:09:f1:
         2b:3b:53:71:d3:86:70:7a:09:6c:ce:2c:82:27:c5:33:56:24:
         b5:f4:87:04:41:1e:fa:4c:88:2e:c2:0a:65:28:f9:0f:1f:83:
         a5:c7:d9:c1:25:54:b4:0a:10:dd:a0:7c:c3:75:c2:02:09:48:
         28:00:9e:ce:59:b9:dd:30:a0:14:71:f6:3c:0b:86:54:e2:97:
         1a:af:cc:97:17:1f:8b:0d:f6:69:80:f9:f8:b7:a0:f1:ef:08:
         55:17:24:71:2f:ec:c0:30:5b:d5:f9:57:cf:07:0c:4b:24:1a:
         52:18:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 12:08:02 2025 by rpki-client