Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa
File:                     34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa (raw, json)
Hash identifier:          TrNSb6JVKCc+9bQ7UojIyLyzz96umhcodF+onpiNfZM=
Subject key identifier:   8E:F3:BF:D5:15:B9:7C:F0:90:64:DA:02:7D:36:E8:5D:68:A5:0E:B5
Certificate issuer:       /CN=6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE
Certificate serial:       26EFA780B2CF75DE2B4B897191BCD5B3B56804B1
Authority key identifier: 6E:4B:B7:F0:B7:10:1A:40:8E:EA:A0:2B:18:DF:90:4F:30:D4:AB:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa
Signing time:             Mon 18 Aug 2025 19:05:47 +0000
ROA not before:           Mon 18 Aug 2025 19:00:47 +0000
ROA not after:            Mon 17 Aug 2026 19:05:47 +0000
asID:                     269329
IP address blocks:        45.184.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.crl
                          rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 21:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ef:a7:80:b2:cf:75:de:2b:4b:89:71:91:bc:d5:b3:b5:68:04:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE
        Validity
            Not Before: Aug 18 19:00:47 2025 GMT
            Not After : Aug 17 19:05:47 2026 GMT
        Subject: CN=8EF3BFD515B97CF09064DA027D36E85D68A50EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:e2:ef:66:78:a6:d3:54:39:47:04:ca:74:
                    77:38:68:de:ef:04:e5:27:64:95:aa:c4:20:83:c9:
                    1e:8b:b8:7b:13:f9:5d:99:f3:f2:d3:a1:23:42:bd:
                    9c:96:34:b8:cb:93:75:50:b8:28:39:ad:34:bc:3f:
                    52:40:7b:d8:9c:3c:96:91:d9:2f:3c:72:a6:a8:c4:
                    b9:51:58:5d:22:40:ed:2b:09:02:77:de:a9:84:07:
                    95:ad:0a:49:45:f3:f6:9f:24:05:1b:4e:2f:e9:39:
                    b9:bb:c2:de:ad:d9:10:fb:0b:57:53:a9:dc:06:0c:
                    0b:d2:cb:af:aa:90:75:0f:6e:bf:f0:e9:f4:e9:c2:
                    8b:56:32:a0:f0:74:f7:91:91:33:ca:0a:d7:8c:a3:
                    fa:ee:90:7d:24:7e:81:58:9f:39:45:7c:37:09:9e:
                    6a:93:87:49:31:46:50:2f:b8:00:91:61:b8:8f:4b:
                    2a:3c:f7:ed:e6:43:cc:3a:b2:cc:37:b6:45:1d:b0:
                    d5:d0:4a:3b:0d:8c:05:41:f8:b8:39:01:09:28:fe:
                    e0:10:22:ed:36:56:33:bd:7f:ed:4a:a8:ab:86:ff:
                    6d:e7:19:aa:4f:29:b8:15:27:85:68:52:98:93:6e:
                    86:0c:89:60:09:11:d7:93:c2:26:e6:62:19:06:0e:
                    96:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F3:BF:D5:15:B9:7C:F0:90:64:DA:02:7D:36:E8:5D:68:A5:0E:B5
            X509v3 Authority Key Identifier:
                keyid:6E:4B:B7:F0:B7:10:1A:40:8E:EA:A0:2B:18:DF:90:4F:30:D4:AB:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:74:cd:b1:1b:9f:c8:87:2a:1d:a3:29:a4:f4:34:77:37:4a:
         49:1a:b3:9c:7d:83:57:d0:f7:68:5a:0a:bc:46:e0:6a:77:36:
         3a:7e:ef:6b:6f:a7:55:52:40:ba:8a:f4:4d:6b:ae:ed:a6:93:
         87:13:84:b3:08:ee:d5:3a:37:dd:d9:05:d1:99:71:24:aa:9a:
         d3:fa:93:11:33:8f:6c:bf:a3:91:8b:21:bd:11:d5:82:d7:cb:
         79:c7:74:5a:17:29:95:91:28:92:b0:3d:53:90:7a:9d:b4:33:
         ee:fe:de:9b:d3:60:94:72:04:56:a8:38:ee:16:88:57:b8:21:
         2a:98:5c:c4:1d:18:69:11:37:9b:94:5c:08:28:7f:2f:2e:57:
         68:1d:ce:ec:11:5d:96:ed:6d:c4:0c:04:63:ec:f5:3c:c0:de:
         db:57:3a:42:24:7f:c4:bb:92:34:34:e3:66:44:c9:e4:5a:9c:
         7e:0d:5c:dc:1b:42:79:01:95:1e:65:ba:74:43:dd:51:42:d3:
         a9:43:d1:24:e7:ca:a4:1c:95:b9:ac:a6:05:aa:ca:5e:52:7d:
         27:93:9b:3b:aa:2e:04:e8:78:c0:4e:72:1c:03:ed:9b:81:5e:
         1c:56:4b:d3:cc:d8:20:31:b3:0a:47:96:3a:61:c5:36:b5:f9:
         04:e2:45:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:24:24 2025 by rpki-client