Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231342e302f32332d3233203d3e203631353837.roa
File:                     34352e3136332e3231342e302f32332d3233203d3e203631353837.roa (raw, json)
Hash identifier:          lX7TaTofsEZn+0pfW1fe+yV2NuCRYImHu6H6pUOUsjk=
Subject key identifier:   96:DA:C4:CF:EF:D0:E0:DD:7C:D0:17:17:FF:0C:15:80:36:79:D3:66
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       728DD80FD0EA86C8AA77772F0EBE95E98097E72F
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231342e302f32332d3233203d3e203631353837.roa
Signing time:             Mon 28 Jul 2025 07:17:16 +0000
ROA not before:           Mon 28 Jul 2025 07:12:16 +0000
ROA not after:            Mon 27 Jul 2026 07:17:16 +0000
asID:                     61587
IP address blocks:        45.163.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 31 Jul 2025 00:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8d:d8:0f:d0:ea:86:c8:aa:77:77:2f:0e:be:95:e9:80:97:e7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jul 28 07:12:16 2025 GMT
            Not After : Jul 27 07:17:16 2026 GMT
        Subject: CN=96DAC4CFEFD0E0DD7CD01717FF0C15803679D366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:c9:56:eb:29:ae:63:1b:59:23:5d:80:35:
                    7b:8f:bb:26:28:ff:6c:5b:09:0b:ac:01:87:12:21:
                    59:e3:e0:5e:36:c3:b7:da:12:08:6b:c4:2c:11:3c:
                    14:e2:39:8b:f8:ac:8c:a8:c2:0a:47:08:86:f9:bc:
                    0a:44:82:20:8b:fb:2d:f7:35:aa:af:7d:dd:e8:29:
                    a5:5a:82:01:e3:e4:51:ac:15:ad:bf:0d:a8:87:d8:
                    80:df:32:4b:26:45:d2:5a:4e:26:1a:57:9e:17:a0:
                    87:ab:bc:f6:65:aa:b0:09:58:51:36:f6:98:37:5f:
                    96:64:fa:ab:56:6b:e6:33:c9:80:df:5f:ad:6c:fb:
                    b7:ec:d5:17:68:f1:f6:7b:ac:dd:95:64:4a:6b:d6:
                    1b:82:b9:e2:e3:5d:b1:f4:06:5f:49:a5:34:18:37:
                    ff:c1:5f:52:40:10:cb:b8:ee:1b:09:cb:ff:86:d9:
                    3c:3c:05:29:2e:7c:8e:f2:16:25:29:b8:99:c4:04:
                    0e:0e:13:7a:c3:d9:ea:0e:1c:ef:5d:a3:73:ff:63:
                    7e:d3:36:e2:4f:dc:51:05:30:ed:f4:e9:85:6d:35:
                    ab:77:96:31:7a:92:f9:55:77:33:4b:84:e6:38:b6:
                    47:bb:07:f5:d0:82:5a:b6:f6:17:4c:c7:ec:7f:bf:
                    e9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DA:C4:CF:EF:D0:E0:DD:7C:D0:17:17:FF:0C:15:80:36:79:D3:66
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231342e302f32332d3233203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:d5:b9:60:91:24:fe:99:45:8a:e7:e8:65:ce:18:ff:1c:83:
         54:4c:cf:d1:a3:89:fc:a7:87:d2:90:75:5e:3a:33:06:56:ba:
         17:b8:4d:42:4c:71:14:a5:ff:54:7d:ca:a5:73:04:12:45:7e:
         4c:a9:67:e9:d1:63:a7:c0:81:9a:bf:9c:09:20:92:72:bd:78:
         13:9b:dd:b6:7c:05:1b:db:2b:43:4f:e4:af:e9:7a:05:c8:43:
         05:f1:01:46:ef:57:7c:0b:3e:d0:7f:ec:a9:20:aa:f1:ae:b7:
         6a:5b:c5:71:95:c5:bc:d9:7c:bc:8e:d6:12:62:c3:13:5c:27:
         ee:21:31:a2:97:9b:04:6c:33:ba:c7:16:c5:68:91:8d:fa:85:
         5a:26:c4:7f:9f:ca:d0:24:3e:9f:b0:35:ee:c3:ec:98:ee:a3:
         57:bf:1b:ff:46:e4:1d:e9:61:15:6b:8e:ef:cc:15:75:f3:bd:
         cd:98:87:b8:3c:10:09:94:4e:03:e3:14:7d:6c:71:a4:b9:de:
         c4:1d:30:cb:b4:43:a4:46:90:57:dc:62:f2:ff:45:33:7c:0d:
         e8:2c:e7:cf:48:80:12:79:83:e7:1f:a8:c6:82:ed:15:35:bb:
         39:db:2b:5c:78:0b:45:43:a4:1d:df:c8:44:5b:88:b7:2e:5f:
         b2:9c:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:06:04 2025 by rpki-client