Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37332e302f32342d3332203d3e203631353931.roa
File:                     34352e3233372e37332e302f32342d3332203d3e203631353931.roa (raw, json)
Hash identifier:          1tBpTx6iN3f+SlmNctuUTwk6cvpFiJOhrMPo6GNujKA=
Subject key identifier:   90:90:1F:54:7A:7E:91:87:1B:2C:54:D7:5C:5B:95:79:58:75:CE:D2
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       6D05F33C9413F81C7EF4BD9DC4075AC8734DBB63
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37332e302f32342d3332203d3e203631353931.roa
Signing time:             Mon 14 Jul 2025 21:00:00 +0000
ROA not before:           Mon 14 Jul 2025 20:55:00 +0000
ROA not after:            Mon 13 Jul 2026 21:00:00 +0000
asID:                     61591
IP address blocks:        45.237.73.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:05:f3:3c:94:13:f8:1c:7e:f4:bd:9d:c4:07:5a:c8:73:4d:bb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jul 14 20:55:00 2025 GMT
            Not After : Jul 13 21:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:67:d3:ba:d3:ca:ac:da:fc:6b:33:cc:a8:
                    ee:0c:33:4b:8c:4e:41:13:54:92:50:27:ba:d0:85:
                    ff:a0:1a:74:0d:a6:f4:ef:39:33:a8:5f:cf:49:77:
                    aa:d5:7b:43:8c:8a:56:7d:ec:38:b8:84:68:50:9c:
                    8c:8e:fa:5e:e9:1b:f7:0c:0d:42:5b:1e:5a:c4:d0:
                    4b:70:df:23:cb:30:60:8d:2e:c0:ab:03:7c:b1:11:
                    24:76:59:8f:0b:b6:43:44:fa:6a:8a:68:be:3e:82:
                    cd:80:28:89:02:93:b5:8e:9f:08:93:04:ca:f1:4c:
                    ed:49:17:06:40:63:7d:03:0d:df:51:68:46:92:cd:
                    76:5d:f6:94:1a:d9:5b:75:16:b1:2c:32:0c:9c:4c:
                    96:d8:af:f8:95:cd:08:3b:da:b6:be:19:61:cc:0e:
                    90:07:41:76:94:1a:be:ed:eb:25:fa:4c:84:fe:a8:
                    84:85:7e:f5:2f:eb:a2:5e:1c:13:bd:f7:b8:88:2e:
                    56:03:ca:97:ff:fb:d5:62:49:ae:df:a3:cd:2a:cb:
                    70:89:c8:04:a1:7a:10:72:6e:eb:3c:92:ac:0f:e7:
                    84:92:fc:d6:02:8d:64:fa:6c:91:88:92:b2:92:15:
                    8f:90:0f:c0:a3:a3:20:4d:f7:7f:b7:97:d6:82:e6:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:90:1F:54:7A:7E:91:87:1B:2C:54:D7:5C:5B:95:79:58:75:CE:D2
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37332e302f32342d3332203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f4:91:33:0a:53:a4:81:1f:4a:2a:f5:4d:b5:c7:5b:25:df:
         04:ec:51:d5:03:23:38:65:ee:f9:eb:a0:d9:11:19:0f:b4:f4:
         9c:3a:a6:14:3d:88:fe:d1:e2:08:69:56:dd:52:c0:2f:a1:32:
         9a:0d:20:7e:92:cd:62:0c:82:5c:34:ac:99:8e:04:86:fa:cb:
         1a:b8:75:68:eb:30:07:ed:3d:0e:70:64:6a:28:d3:6b:90:66:
         36:85:a4:90:e0:6a:c0:69:48:bd:ae:1f:14:63:71:ae:fd:50:
         b4:2a:49:fe:f1:ad:31:b5:87:28:0b:49:5d:ad:f6:3c:d3:55:
         51:1b:04:84:0a:e4:53:84:98:6d:8b:a8:c5:c5:a0:e6:4f:67:
         da:7a:ae:fb:d8:4b:99:37:2b:86:7a:99:48:c6:9d:d6:37:c1:
         6a:78:24:8f:ab:f0:d8:55:2d:12:1b:6d:b7:74:fc:96:3b:45:
         71:89:24:dc:ee:c7:0b:c9:d4:d1:bd:50:74:1f:e7:4b:05:81:
         f3:48:28:d6:5c:19:ed:85:9f:28:e7:fa:4b:d3:36:23:7c:70:
         d3:e5:b1:1b:01:9b:aa:ac:83:8d:21:ca:a2:36:97:8a:6e:a5:
         90:71:4e:c9:16:d4:a2:42:f4:91:d0:a1:d0:de:60:e7:2d:c7:
         fe:0e:8d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:36:00 2025 by rpki-client