Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
File:                     34352e3136382e39342e302f32342d3234203d3e20323733333932.roa (raw, json)
Hash identifier:          FWS3B1yJj4kySgRzJb8rDcyACIoFBAKMslIb57YJh8I=
Subject key identifier:   86:AA:7F:33:86:CE:1B:09:CB:DA:A2:B1:27:8D:E5:F2:7B:52:C7:C1
Certificate issuer:       /CN=A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F
Certificate serial:       41F5393B9A5EE8CE1ACF183CA7ED8F1D48AA244F
Authority key identifier: A1:76:0A:7E:E0:C2:DE:FB:3E:45:D1:8E:0E:E3:65:B4:CC:94:1E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
Signing time:             Thu 19 Jun 2025 04:32:45 +0000
ROA not before:           Thu 19 Jun 2025 04:27:45 +0000
ROA not after:            Thu 18 Jun 2026 04:32:45 +0000
asID:                     273392
IP address blocks:        45.168.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.crl
                          rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 05:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f5:39:3b:9a:5e:e8:ce:1a:cf:18:3c:a7:ed:8f:1d:48:aa:24:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F
        Validity
            Not Before: Jun 19 04:27:45 2025 GMT
            Not After : Jun 18 04:32:45 2026 GMT
        Subject: CN=86AA7F3386CE1B09CBDAA2B1278DE5F27B52C7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2a:bf:71:eb:99:eb:10:3d:e9:0b:a4:95:4b:
                    7c:31:4b:03:a3:5a:8c:b9:00:bc:fc:ba:59:22:fd:
                    21:13:89:72:84:1b:8a:f8:01:d9:5d:a7:94:3d:1b:
                    72:28:4d:e7:e2:92:a6:82:4a:f3:8d:2d:7e:28:6b:
                    3a:5d:b4:47:95:f0:14:9b:4d:16:61:d2:39:3b:6d:
                    e4:1e:c3:62:8e:4a:30:0d:1d:06:81:58:d3:22:a1:
                    1f:5d:32:f7:7c:0c:1e:2a:80:55:c3:9e:f5:1f:72:
                    83:e1:54:4e:c2:f0:1a:70:20:57:46:80:7d:6a:65:
                    8e:fd:0f:fa:e6:fa:f4:0f:54:1f:e9:3c:ac:11:c8:
                    8e:0d:b6:9d:fa:ad:65:7b:ef:ee:e3:35:db:6f:80:
                    de:66:a6:db:e2:2b:08:4c:01:f2:bc:21:58:e7:27:
                    5b:c6:ed:d0:67:9b:67:ac:df:38:a3:46:fe:89:3d:
                    6d:a9:e5:b7:ab:4a:51:41:7c:1c:e3:2c:24:0e:ae:
                    c2:85:c6:7b:84:8c:8a:7b:92:6c:05:8a:04:36:03:
                    bf:0f:df:e4:2d:11:3c:19:eb:aa:37:00:17:15:fb:
                    00:6c:fd:2d:12:0c:ef:9f:6e:11:d0:b2:6f:ee:f1:
                    6f:8b:5e:39:80:d9:ca:42:63:ec:4b:89:bc:87:4d:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AA:7F:33:86:CE:1B:09:CB:DA:A2:B1:27:8D:E5:F2:7B:52:C7:C1
            X509v3 Authority Key Identifier:
                keyid:A1:76:0A:7E:E0:C2:DE:FB:3E:45:D1:8E:0E:E3:65:B4:CC:94:1E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:ec:64:cc:02:23:e4:08:b0:0a:56:06:c0:50:e5:29:eb:a5:
         12:69:65:55:37:1f:70:f5:45:ba:db:e7:4b:77:30:4d:bf:a4:
         2f:88:a5:5c:68:51:4c:69:3d:5f:31:bc:0c:26:97:2f:36:7e:
         a1:6d:26:5b:34:0d:f7:8e:2c:16:56:19:77:e1:5a:11:1f:ab:
         9c:f6:16:d0:8c:d5:d9:5b:53:e5:35:de:b2:99:86:69:fa:d1:
         ff:c7:44:e4:cc:05:8e:95:91:c3:90:e5:63:c6:ac:ac:f2:b4:
         45:46:56:5f:7e:9b:54:0e:08:ce:e5:f4:c9:83:16:d6:f0:a5:
         ce:ff:55:47:03:97:38:50:33:f9:d4:6e:12:0f:d9:d0:34:2e:
         3d:ee:f8:6f:84:1a:01:ab:31:c9:6e:96:49:7c:19:bb:5f:dd:
         a2:27:5b:2c:c7:e1:2d:79:48:17:69:64:59:fe:87:d2:2a:0d:
         45:df:bf:8f:67:a4:a2:7c:14:5c:53:46:e4:92:85:ea:76:f3:
         f8:97:0d:b0:6f:89:5b:b3:62:39:b6:37:b0:57:36:67:9a:3d:
         ee:15:e9:2e:ca:34:02:f7:d0:10:25:da:ae:e4:6c:b1:da:38:
         e8:71:7d:70:e7:b8:3c:9f:59:c5:d6:01:94:2a:21:45:c3:92:
         6a:69:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:40:50 2025 by rpki-client