Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/34352e37302e35322e302f32322d3234203d3e20323634313632.roa
File:                     34352e37302e35322e302f32322d3234203d3e20323634313632.roa (raw, json)
Hash identifier:          jDgX7ey1tSeSvn7u4WrWFWIU2pgt/MxdfFgRvLrl1WM=
Subject key identifier:   99:23:17:44:33:C7:61:3A:FE:E4:EE:1F:7C:4D:4D:6C:EC:78:FD:A6
Certificate issuer:       /CN=1EC190957ABC0EC0432EF48C9BCB45C81982D3E7
Certificate serial:       05101AEA7B3CCEF872C8AC470FFE087C7990EC3D
Authority key identifier: 1E:C1:90:95:7A:BC:0E:C0:43:2E:F4:8C:9B:CB:45:C8:19:82:D3:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/34352e37302e35322e302f32322d3234203d3e20323634313632.roa
Signing time:             Wed 02 Jul 2025 13:03:44 +0000
ROA not before:           Wed 02 Jul 2025 12:58:44 +0000
ROA not after:            Wed 01 Jul 2026 13:03:44 +0000
asID:                     264162
IP address blocks:        45.70.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.crl
                          rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 05:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:10:1a:ea:7b:3c:ce:f8:72:c8:ac:47:0f:fe:08:7c:79:90:ec:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC190957ABC0EC0432EF48C9BCB45C81982D3E7
        Validity
            Not Before: Jul  2 12:58:44 2025 GMT
            Not After : Jul  1 13:03:44 2026 GMT
        Subject: CN=9923174433C7613AFEE4EE1F7C4D4D6CEC78FDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:70:4d:14:c4:b7:6a:a0:f0:3c:2b:77:93:
                    55:43:fe:c3:78:18:0d:34:d8:47:55:24:82:59:18:
                    78:0b:93:dc:20:a3:8f:f8:d1:9a:51:ec:66:93:68:
                    1d:db:e5:59:6b:c1:00:14:fd:9d:f1:41:b5:cc:4f:
                    4e:15:2b:9b:5f:f9:02:87:24:ba:73:42:5f:75:c8:
                    e0:aa:13:ec:91:d4:99:98:a9:f8:d7:c2:82:47:21:
                    a0:91:3a:0d:2e:f1:ba:68:55:9c:05:cf:b8:ef:03:
                    a6:d3:0b:db:06:81:ce:ae:ef:ec:ad:ee:b7:bf:bb:
                    dc:cb:e0:6e:be:1e:43:57:0d:aa:7d:2d:4f:76:d8:
                    c9:9c:c5:25:e3:9d:3c:0a:c9:f5:6f:eb:e8:84:64:
                    3f:c6:7a:52:8d:02:27:30:2e:34:db:9f:4c:6b:8f:
                    5b:10:ad:98:b3:7e:fc:6e:76:55:44:a8:a5:5f:55:
                    22:db:cd:b6:ac:6b:f4:c3:90:90:d3:fc:d6:45:78:
                    ec:50:94:1d:45:03:69:47:15:32:59:51:a3:25:90:
                    63:1c:15:96:0c:59:b2:a6:b6:e1:0a:85:b8:d9:e2:
                    70:1d:96:7d:34:c3:f8:35:6c:f9:67:6d:6d:ee:e9:
                    0d:8f:25:39:f2:90:57:db:5b:ee:aa:aa:3f:9c:88:
                    db:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:23:17:44:33:C7:61:3A:FE:E4:EE:1F:7C:4D:4D:6C:EC:78:FD:A6
            X509v3 Authority Key Identifier:
                keyid:1E:C1:90:95:7A:BC:0E:C0:43:2E:F4:8C:9B:CB:45:C8:19:82:D3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/34352e37302e35322e302f32322d3234203d3e20323634313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:a9:37:79:a4:97:5b:ab:c9:55:a9:13:54:84:7e:c0:c9:a1:
         e9:6e:19:c9:28:5e:63:81:6d:cb:28:c2:d5:f3:9b:47:9f:77:
         f0:b3:43:e5:fa:49:2f:20:97:c3:5a:df:dc:73:d1:31:81:2e:
         c9:e0:48:fa:b0:f9:37:dd:a0:ab:ab:29:8d:40:30:c5:6f:07:
         27:3d:bf:3d:ca:0d:58:45:77:f9:73:2f:48:73:35:49:62:c4:
         78:ff:48:ba:64:5d:23:bf:31:3d:ed:90:9a:7e:c7:2d:02:66:
         7a:88:eb:d8:5f:31:72:55:78:61:df:5c:78:dc:ca:e1:5d:fc:
         c1:1c:0d:87:76:88:72:1d:18:1b:ff:9b:7a:cf:fb:19:40:58:
         fb:0d:96:6d:97:66:bc:dc:d1:7c:c1:46:55:45:e4:84:f4:39:
         b7:34:3c:96:4a:38:0d:c9:f4:e2:95:f4:04:b9:0f:b0:21:8e:
         fd:80:c3:4d:8a:a0:8f:bc:29:4d:d2:6e:9f:11:7f:bb:ba:6c:
         be:53:fb:09:75:be:9d:41:4a:18:51:62:82:72:1f:10:35:df:
         e7:3a:71:83:39:71:31:c8:f4:7b:1b:96:6f:a0:5e:3d:7a:aa:
         2c:e4:3a:97:87:92:17:06:18:5f:85:4e:f2:f7:90:dc:d0:ec:
         46:4d:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:05:38 2025 by rpki-client