Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231322e302f32322d3232203d3e203631353837.roa
File:                     34352e3136332e3231322e302f32322d3232203d3e203631353837.roa (raw, json)
Hash identifier:          kIPsKXTVlO/yt2oZb9r+GHOMQkIiUnvE453x7U8f510=
Subject key identifier:   BA:DE:07:87:FD:57:79:F6:56:84:B3:3E:39:C2:7F:80:C2:2F:42:CF
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       13A373A15BD9A206FA072C8D0CC5FD6837CF6334
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231322e302f32322d3232203d3e203631353837.roa
Signing time:             Mon 28 Jul 2025 07:15:12 +0000
ROA not before:           Mon 28 Jul 2025 07:10:12 +0000
ROA not after:            Mon 27 Jul 2026 07:15:12 +0000
asID:                     61587
IP address blocks:        45.163.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 31 Jul 2025 00:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a3:73:a1:5b:d9:a2:06:fa:07:2c:8d:0c:c5:fd:68:37:cf:63:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jul 28 07:10:12 2025 GMT
            Not After : Jul 27 07:15:12 2026 GMT
        Subject: CN=BADE0787FD5779F65684B33E39C27F80C22F42CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:13:22:8a:65:72:b4:fa:04:6d:03:a2:9f:
                    c0:40:a5:37:3f:46:fa:76:72:94:ce:fa:5d:cd:e5:
                    14:e8:03:5e:bd:72:e9:7d:9e:b7:df:d8:8b:c3:b2:
                    a6:c9:b1:a5:52:6e:1d:73:82:d1:87:49:7d:58:b1:
                    57:c3:79:98:3f:78:9c:fd:5d:6f:e9:5c:ac:1e:0d:
                    97:5e:d8:c9:37:94:f6:6d:d3:3b:41:58:1e:fe:e3:
                    c0:b5:d9:07:01:25:ca:11:c7:43:35:3e:45:e5:eb:
                    da:24:e2:6c:85:65:09:b6:9b:78:27:63:f2:8a:0a:
                    bc:d1:13:99:c8:b7:fb:8d:83:51:31:77:d0:3d:63:
                    f3:c6:09:b7:d7:11:b9:6b:50:a6:2f:63:ba:de:68:
                    f4:43:33:d8:1e:2e:1b:13:72:6f:c6:02:c5:23:c2:
                    e6:f3:21:b4:88:c2:86:30:d0:8c:1e:07:82:4a:d7:
                    eb:34:61:af:ea:cb:7a:c1:c5:7d:c8:e9:a1:f7:73:
                    b9:0b:07:9c:ca:42:1c:80:ab:7f:2e:0f:cd:40:ea:
                    1f:bb:0b:73:3e:b8:77:25:58:07:25:9f:79:f3:d2:
                    e1:b9:60:10:bb:37:ce:27:5a:2a:57:4f:3a:42:7f:
                    1c:97:9e:19:aa:3e:c3:ff:33:d8:67:9a:06:25:30:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:07:87:FD:57:79:F6:56:84:B3:3E:39:C2:7F:80:C2:2F:42:CF
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231322e302f32322d3232203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:9b:d1:2d:2f:83:d9:d8:72:88:5b:a4:54:9c:28:48:19:a4:
         09:14:d6:cd:b0:1c:b6:1d:59:f8:d4:c6:54:9e:ee:db:99:f4:
         f1:b6:e7:ff:1b:39:7d:53:fa:e0:16:8e:4d:ea:fc:db:27:fe:
         c8:a5:37:ea:16:1a:7d:e8:c3:1e:b4:fd:cd:a2:d4:22:98:aa:
         3a:9a:e6:39:56:e5:fe:3d:0a:ff:e3:f3:1a:ee:4e:ba:34:f6:
         1b:e2:e8:ab:b6:fb:8c:ed:d5:8e:3f:e5:5e:37:26:29:d3:f7:
         f0:93:d2:6e:df:90:74:33:75:19:57:ae:ce:8f:75:d8:4e:39:
         26:02:8a:91:12:51:b4:3d:cf:a8:f5:63:e6:f1:03:d5:9b:cb:
         e2:cd:75:10:9f:79:22:5a:3c:0a:34:5d:e2:42:cd:8d:3e:11:
         de:3e:0b:5d:9a:d2:5d:9e:1b:82:3d:33:ce:25:1e:94:ca:a3:
         3d:dc:9b:7f:85:b5:94:9c:7a:a2:ae:a1:89:0b:8b:0d:06:aa:
         7c:bf:e5:1d:c8:b9:0f:ce:68:22:60:fc:be:f8:18:a7:fc:70:
         91:25:fe:7a:1e:82:6a:bb:99:ac:8d:32:46:8c:a9:4b:9b:1e:
         56:0c:2a:81:ba:ce:c3:50:36:bb:87:2d:a3:ba:b1:46:35:f1:
         c8:b8:ef:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:04:46 2025 by rpki-client