Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          EFWZFscvqDXc6MWCgS5UfK679mYSxj4n5jUPXQEHO4A=
Subject key identifier:   02:CA:1C:C9:3D:7C:7F:5C:9B:D4:A2:C2:F4:20:E3:F2:86:55:88:EB
Certificate issuer:       /CN=83846E182B5864F5550CA4AE8052E6D6E1F3AC6C
Certificate serial:       26ECB1F985A7AFD7E524483EBAE383D6012D146E
Authority key identifier: 83:84:6E:18:2B:58:64:F5:55:0C:A4:AE:80:52:E6:D6:E1:F3:AC:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa
Signing time:             Tue 03 Jun 2025 17:27:20 +0000
ROA not before:           Tue 03 Jun 2025 17:22:20 +0000
ROA not after:            Tue 02 Jun 2026 17:27:20 +0000
asID:                     267035
IP address blocks:        45.227.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.crl
                          rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 11:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ec:b1:f9:85:a7:af:d7:e5:24:48:3e:ba:e3:83:d6:01:2d:14:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83846E182B5864F5550CA4AE8052E6D6E1F3AC6C
        Validity
            Not Before: Jun  3 17:22:20 2025 GMT
            Not After : Jun  2 17:27:20 2026 GMT
        Subject: CN=02CA1CC93D7C7F5C9BD4A2C2F420E3F2865588EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:21:89:ce:c4:22:4b:85:64:a8:95:b9:71:
                    09:23:f3:75:69:ba:ff:d2:13:cd:40:85:9a:5c:32:
                    9a:f4:ca:47:39:5d:e2:db:8e:85:99:de:fe:39:8f:
                    44:ce:e8:29:b6:8e:af:d4:07:bc:eb:b7:f1:8a:0e:
                    42:72:c7:e6:3a:37:fe:13:18:67:89:99:e0:6b:4d:
                    52:03:a5:4f:0e:4a:59:fa:74:1d:ff:54:30:de:2d:
                    6d:c5:8a:81:d4:94:93:11:2d:30:fa:6e:d6:03:dd:
                    4d:65:2b:e9:3b:a1:59:e3:71:0a:a3:9f:28:b2:1b:
                    5b:b8:f9:ee:66:c2:9f:13:52:53:36:82:6d:3f:a0:
                    76:03:22:48:2f:1b:cc:27:27:00:da:90:e5:f4:da:
                    69:0f:16:04:6c:88:5d:7d:5a:f1:4e:02:1a:88:f1:
                    2f:8b:1d:dc:b9:61:60:0e:bd:48:9e:0a:86:0e:30:
                    e7:8d:f5:d0:ee:c5:61:bb:c6:5b:95:00:42:17:10:
                    70:ae:15:6d:57:55:9c:a8:1c:3b:02:87:ae:57:8a:
                    58:ed:1c:e9:cb:3d:97:07:56:3a:92:72:f0:60:c8:
                    e2:fc:6e:45:a9:35:b5:90:8d:c1:ef:cd:c5:74:d5:
                    66:58:fe:2a:16:e2:47:b7:7c:81:af:74:30:71:34:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CA:1C:C9:3D:7C:7F:5C:9B:D4:A2:C2:F4:20:E3:F2:86:55:88:EB
            X509v3 Authority Key Identifier:
                keyid:83:84:6E:18:2B:58:64:F5:55:0C:A4:AE:80:52:E6:D6:E1:F3:AC:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:32:8d:65:1b:3a:c6:b9:de:2d:65:03:a9:fe:a5:4c:da:eb:
         ce:a0:4e:3d:29:1e:59:6b:d2:2d:92:94:78:38:5b:83:20:a3:
         43:2f:50:cf:ff:b1:5c:7e:d4:e8:a3:db:58:0d:18:95:d9:4c:
         84:d4:cb:92:63:48:fa:70:4b:7b:a8:66:0e:d9:03:59:24:d3:
         a7:d8:e4:7e:69:53:24:28:81:47:94:50:0a:75:bf:5b:c0:b8:
         ee:89:ab:10:60:71:92:fc:74:ab:98:67:c3:82:66:29:c2:d4:
         e1:c8:fd:d4:55:b8:69:6f:1c:e3:7e:0d:20:bd:5b:ef:9a:af:
         79:33:53:76:0c:2c:c2:c1:7e:af:f3:bf:68:88:1c:52:7f:d7:
         47:3a:97:7a:11:29:24:34:9e:63:e2:4e:02:a6:10:0d:d2:19:
         ce:e8:af:37:01:d0:f2:ab:70:78:46:1c:84:bd:2f:c4:60:48:
         33:1d:c5:f0:9e:36:40:17:9c:57:8b:a0:99:f3:d1:72:50:7f:
         d2:7a:a2:a1:ac:7a:05:c7:93:47:96:de:40:d9:26:3e:7a:0d:
         66:0d:07:1a:15:c5:14:c3:cc:99:68:76:2a:c9:00:71:d7:20:
         0a:70:d2:19:6a:db:9b:d0:98:c2:43:75:a7:3b:df:1b:40:7d:
         a1:a8:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:05:29 2025 by rpki-client