Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36382e302f32322d3332203d3e20323639353732.roa
File:                     34352e3138392e36382e302f32322d3332203d3e20323639353732.roa (raw, json)
Hash identifier:          ngoWma8TsSEzSWbq6GfRF4ba2k9dPiM3jeI36G1Dcfo=
Subject key identifier:   A1:9B:31:82:D8:44:F4:20:7A:0E:34:55:14:7D:F6:60:38:53:5C:41
Certificate issuer:       /CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2
Certificate serial:       689F40929586B59776CCA4AFDCC4F2A98D1F963E
Authority key identifier: D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36382e302f32322d3332203d3e20323639353732.roa
Signing time:             Mon 30 Jun 2025 14:28:39 +0000
ROA not before:           Mon 30 Jun 2025 14:23:39 +0000
ROA not after:            Mon 29 Jun 2026 14:28:39 +0000
asID:                     269572
IP address blocks:        45.189.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl
                          rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 16:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9f:40:92:95:86:b5:97:76:cc:a4:af:dc:c4:f2:a9:8d:1f:96:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2
        Validity
            Not Before: Jun 30 14:23:39 2025 GMT
            Not After : Jun 29 14:28:39 2026 GMT
        Subject: CN=A19B3182D844F4207A0E3455147DF66038535C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:3d:ce:9a:a4:1b:f8:e9:8f:ac:d6:f3:03:
                    96:34:ea:7e:41:d2:2a:9d:78:d9:56:f1:9d:c1:8a:
                    02:d4:d8:95:6d:74:c3:13:45:48:fc:76:ca:ee:04:
                    5e:01:f8:70:6c:27:3f:07:7a:86:43:a4:1d:17:8a:
                    19:73:23:87:3c:98:d4:fa:7b:7f:7a:1e:11:38:7b:
                    9f:e3:7a:20:ac:c2:eb:a6:c6:24:31:99:2b:a1:f9:
                    53:ad:ec:87:56:c3:1d:89:7c:b0:11:4d:b8:6f:28:
                    23:3b:68:85:7f:9c:5e:c1:2f:4e:5d:16:4f:8f:5a:
                    36:42:2b:8b:25:65:4c:de:fe:6f:fe:3d:54:24:43:
                    9d:47:70:bf:b0:8e:06:99:7c:d9:9d:ba:b1:2d:db:
                    0c:3f:a8:91:dc:a7:d3:e7:ea:f7:61:62:5e:55:3d:
                    15:05:1f:cd:0e:5f:96:09:6b:35:5f:d6:5d:17:ce:
                    6e:41:7e:f3:ae:b4:f8:e3:ca:1e:4e:0e:0c:4a:56:
                    02:e3:7a:39:4d:fe:01:44:6c:19:03:09:98:83:f3:
                    b7:5b:c0:95:2a:e5:af:27:0a:26:2a:25:4d:83:ca:
                    21:81:90:39:f8:36:49:3e:29:98:ce:41:70:8e:1a:
                    3d:f5:89:10:63:d5:c0:16:8d:5e:29:c2:cf:02:dd:
                    35:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9B:31:82:D8:44:F4:20:7A:0E:34:55:14:7D:F6:60:38:53:5C:41
            X509v3 Authority Key Identifier:
                keyid:D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36382e302f32322d3332203d3e20323639353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:38:1c:4f:c6:44:b0:f0:96:64:ee:67:1a:ca:e7:47:08:80:
         7b:29:01:e3:a8:1c:c1:e4:27:81:f7:51:0e:e7:8e:c1:a1:ea:
         79:12:c0:ca:1a:5c:a0:87:d0:43:85:1d:e6:97:33:20:8f:fd:
         c7:1a:b1:03:78:a0:a1:dc:c9:28:22:f2:22:8a:f3:f3:67:4a:
         05:dd:74:47:33:1b:70:a3:3f:bc:48:f0:9a:b4:76:99:9f:4b:
         3c:69:28:69:c8:06:3f:b1:75:05:dc:f6:8b:77:d9:4a:0a:25:
         1c:00:aa:ef:60:82:a0:d6:88:28:14:b5:a8:ee:f1:c1:36:8c:
         93:b3:0a:98:38:f6:d0:77:6a:ae:6d:70:a9:56:a5:38:a1:79:
         6d:3e:8f:dc:f6:b6:b3:b3:d5:ea:1a:b4:73:dc:34:ae:3b:2f:
         fd:a9:24:7c:f5:44:b3:3a:31:69:0e:39:11:5d:d6:45:be:11:
         74:38:f6:70:a3:e2:98:82:4f:ab:d4:4e:0e:5f:77:59:ba:21:
         52:26:70:1f:c6:b3:07:be:21:80:80:ae:73:43:ad:c0:08:9c:
         92:65:a5:84:d3:05:ba:d1:4f:46:e1:86:42:0d:81:05:26:e7:
         53:5b:8f:e4:1f:bc:3c:e5:e2:58:41:89:65:4c:07:0e:66:0d:
         d4:b3:10:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 13 09:13:31 2025 by rpki-client