Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136332e302f32342d3234203d3e20323637393631.roa
File:                     34352e3136352e3136332e302f32342d3234203d3e20323637393631.roa (raw, json)
Hash identifier:          Z3BVoOi61LyKTYhPsG3cfZcwbfuzW0BU8n5zEqSyYqo=
Subject key identifier:   30:85:E2:08:77:16:9B:EB:EE:33:C1:FA:31:84:D9:CB:BD:81:15:13
Certificate issuer:       /CN=09B7AECB18318973134EAE9276452AE4B68453CF
Certificate serial:       22AA9BDF9C65A55F0D7854DF5A3372A7B5C2D29C
Authority key identifier: 09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136332e302f32342d3234203d3e20323637393631.roa
Signing time:             Mon 26 May 2025 16:07:17 +0000
ROA not before:           Mon 26 May 2025 16:02:17 +0000
ROA not after:            Mon 25 May 2026 16:07:17 +0000
asID:                     267961
IP address blocks:        45.165.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 11:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:aa:9b:df:9c:65:a5:5f:0d:78:54:df:5a:33:72:a7:b5:c2:d2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B7AECB18318973134EAE9276452AE4B68453CF
        Validity
            Not Before: May 26 16:02:17 2025 GMT
            Not After : May 25 16:07:17 2026 GMT
        Subject: CN=3085E20877169BEBEE33C1FA3184D9CBBD811513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:cb:b6:b7:df:ea:fa:f3:ff:60:2f:3b:c2:
                    2b:52:42:6d:a8:fb:01:de:c1:07:bb:94:f0:c3:5b:
                    3c:07:58:42:a5:43:31:67:1b:eb:4f:6a:1b:7a:6b:
                    3c:da:52:05:48:74:1c:72:4f:02:a9:ed:5b:29:7d:
                    69:88:b3:27:6b:75:c0:db:cf:91:6f:96:2a:cc:d3:
                    42:e1:7d:33:a9:a2:8b:c5:8a:7a:ce:5c:0e:d0:c8:
                    76:7f:45:be:e7:22:dd:a3:06:d8:c3:be:09:d1:1b:
                    fd:bb:61:cc:c8:04:55:7e:3a:b1:ae:86:48:b3:06:
                    f8:c4:96:91:3e:45:69:e1:f8:6b:f7:e0:1a:64:6e:
                    22:17:72:23:9b:9a:5f:42:92:bd:66:19:a9:90:66:
                    d9:fa:da:83:37:5c:52:31:9b:88:7f:61:7c:00:15:
                    a0:dd:ca:26:10:ad:b1:b5:e0:05:2c:e7:19:d9:2a:
                    ef:08:23:ee:0c:61:61:2c:02:1e:e0:36:b2:f4:30:
                    93:16:3c:fa:6e:2b:d6:72:21:57:04:45:ec:94:a2:
                    cd:7e:5a:42:6e:30:9e:05:5e:22:13:ea:1e:cb:aa:
                    11:d1:24:9a:a0:8a:d9:84:36:76:35:d6:d8:ca:91:
                    a5:79:1d:85:7f:47:36:14:63:56:75:3c:69:1d:01:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:85:E2:08:77:16:9B:EB:EE:33:C1:FA:31:84:D9:CB:BD:81:15:13
            X509v3 Authority Key Identifier:
                keyid:09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136332e302f32342d3234203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:ce:ff:7e:39:41:d5:74:6f:70:18:a6:9f:a9:5f:c3:01:8d:
         a6:8f:1b:61:ab:f3:db:9a:df:e1:41:60:16:1c:dd:11:5c:7e:
         01:60:0a:27:9c:55:7a:f6:74:ab:5e:01:5a:e7:2a:26:6c:9a:
         07:8a:39:97:77:0b:69:6d:1c:8d:18:92:ea:81:8c:56:7d:c2:
         46:cf:87:a2:9a:39:5c:b8:ee:d7:3e:1f:bf:4b:cc:5a:c8:be:
         cf:bc:f8:d0:3d:8f:a3:cd:21:a5:3f:c9:b7:cd:5c:05:06:75:
         f7:50:78:d3:3d:98:dd:4d:7f:c2:5b:83:d5:08:80:87:ef:d6:
         91:ed:07:d9:c6:0f:bc:64:b5:d6:80:b0:05:dc:21:f2:01:ba:
         7a:4f:ad:bd:14:2f:11:ee:8c:b8:20:63:92:d8:c7:8b:38:4f:
         f0:eb:90:fb:7e:8e:76:52:7b:99:a9:76:f9:f5:dc:42:29:0c:
         47:38:1f:e0:c3:d0:ac:4f:42:f5:f8:01:4c:38:d6:7e:93:cb:
         01:54:31:3f:34:3f:70:00:f4:1a:a9:f2:45:13:a9:0f:73:a8:
         59:19:70:2a:6e:82:51:3b:d9:44:48:51:58:b3:f0:6c:3f:99:
         a7:51:5f:d1:cf:53:04:12:bb:01:8c:71:3a:22:ff:c0:77:84:
         b1:18:ae:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:19:31 2025 by rpki-client