Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/34352e3137332e32342e302f32322d3234203d3e20323638373838.roa
File:                     34352e3137332e32342e302f32322d3234203d3e20323638373838.roa (raw, json)
Hash identifier:          iadk4lX1raPtLZkv1Z+/KP8nKU0IiQl/33zAQoqUcX8=
Subject key identifier:   AD:F8:D2:CD:11:09:FA:9E:BA:F4:96:97:58:AD:AA:CA:76:C1:B8:51
Certificate issuer:       /CN=24B3423445CE5D36280D8F72151340DCBE34B7BB
Certificate serial:       534D8899AC5C8F70BAF9AE7422AB1B945EAE013D
Authority key identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/34352e3137332e32342e302f32322d3234203d3e20323638373838.roa
Signing time:             Fri 08 Aug 2025 20:49:21 +0000
ROA not before:           Fri 08 Aug 2025 20:44:21 +0000
ROA not after:            Fri 07 Aug 2026 20:49:21 +0000
asID:                     268788
IP address blocks:        45.173.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl
                          rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4d:88:99:ac:5c:8f:70:ba:f9:ae:74:22:ab:1b:94:5e:ae:01:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB
        Validity
            Not Before: Aug  8 20:44:21 2025 GMT
            Not After : Aug  7 20:49:21 2026 GMT
        Subject: CN=ADF8D2CD1109FA9EBAF4969758ADAACA76C1B851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:6a:73:76:bd:24:e7:06:eb:4f:0c:57:e6:
                    4c:50:03:5f:73:e8:5e:0a:05:84:07:76:a2:3b:52:
                    24:c0:6b:a5:72:87:45:74:02:91:a1:09:d0:82:78:
                    9a:57:59:fe:82:90:6d:6e:be:a1:94:8c:7a:f7:d5:
                    10:e2:93:e2:82:e4:28:ca:c0:97:16:b4:f1:de:9f:
                    f0:6c:09:c1:bf:25:e2:76:c4:71:b1:68:f9:66:41:
                    f3:c7:23:5a:02:2d:c8:14:23:16:39:73:cc:81:4a:
                    91:ff:5f:ab:fa:b2:e7:e8:26:2a:56:7e:ed:93:4b:
                    8b:dd:00:b2:fd:2f:88:83:d2:f3:80:2d:a6:9d:3d:
                    1d:5a:c4:8c:cb:6d:70:20:9c:19:c7:9f:b8:18:73:
                    8b:d3:99:10:06:4b:d1:c4:e1:86:bd:12:47:b5:7a:
                    e9:25:52:84:e3:9c:f2:9a:3a:27:ab:5c:a9:f3:7b:
                    79:e8:71:95:ce:a3:f7:74:33:7a:79:96:0f:03:e6:
                    49:80:90:c9:5d:99:43:e6:5a:b3:bd:61:98:f5:6f:
                    49:6c:52:dc:c3:f2:a8:54:8f:68:4e:e6:0c:e4:ed:
                    d1:0a:ed:e0:34:43:a0:a7:96:3d:ce:a8:77:ae:9b:
                    14:8c:ee:f3:0b:d4:03:f2:40:c7:b5:b7:3c:e3:0c:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F8:D2:CD:11:09:FA:9E:BA:F4:96:97:58:AD:AA:CA:76:C1:B8:51
            X509v3 Authority Key Identifier:
                keyid:24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/34352e3137332e32342e302f32322d3234203d3e20323638373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:39:54:71:eb:5f:58:77:7a:7b:62:9f:e2:ae:70:49:ec:b8:
         61:48:d5:44:04:de:d4:ff:4e:be:e3:a9:d6:8d:4a:0d:55:bf:
         29:55:d3:2b:c2:e6:21:71:d7:b1:51:92:02:93:1b:81:ab:fe:
         45:01:5f:91:a5:32:22:2f:9b:27:0c:84:9a:1a:1f:b6:c8:75:
         ba:cd:e0:8e:d9:3d:d3:f3:24:a2:1c:68:c6:fe:b8:e2:76:59:
         ce:c7:9e:05:1c:42:28:e5:c9:dd:95:c6:5b:f7:38:70:8d:05:
         77:3d:e7:5c:ac:06:24:b5:15:ad:ba:60:ef:a4:62:79:f7:c5:
         13:8c:c3:33:4a:02:84:eb:b8:c0:19:d5:a3:51:05:67:ca:33:
         b2:79:1b:35:c0:0c:bf:0e:d9:0c:4e:5c:c5:12:8b:f6:c5:7b:
         a9:84:62:62:d4:9a:41:02:25:7f:48:8e:20:35:6b:63:c5:1a:
         6f:9d:4c:c5:22:57:dc:d4:d5:e6:67:ed:c2:01:ac:b3:00:ed:
         23:c8:da:84:5f:ba:6e:f4:86:5d:22:73:d0:5f:10:12:b4:1c:
         e0:9e:21:f2:a8:9b:79:a8:cc:f8:e7:52:f2:be:fa:0a:5b:34:
         d1:14:8b:4a:7b:00:d1:7f:21:e5:c8:97:b5:49:d0:11:a9:50:
         3c:35:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:46:35 2025 by rpki-client