Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37342e302f32342d3332203d3e203631353931.roa
File:                     34352e3233372e37342e302f32342d3332203d3e203631353931.roa (raw, json)
Hash identifier:          ZKFHQPeu6Tb1SrupWF4stGUn4Vhmss/uugdKG5T65Z0=
Subject key identifier:   78:F1:11:DB:FE:DA:DB:37:36:44:64:9E:BB:44:61:11:CD:B2:32:3E
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       7F2E69ACA56AF5CA3710110B2DAF2FA3F2EDFC9F
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37342e302f32342d3332203d3e203631353931.roa
Signing time:             Mon 14 Jul 2025 21:00:00 +0000
ROA not before:           Mon 14 Jul 2025 20:55:00 +0000
ROA not after:            Mon 13 Jul 2026 21:00:00 +0000
asID:                     61591
IP address blocks:        45.237.74.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2e:69:ac:a5:6a:f5:ca:37:10:11:0b:2d:af:2f:a3:f2:ed:fc:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jul 14 20:55:00 2025 GMT
            Not After : Jul 13 21:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:b8:55:35:d3:3d:6e:5d:50:ba:06:ae:fb:
                    31:c8:ae:32:a7:e3:d8:92:76:aa:f5:74:d1:74:47:
                    40:26:64:7b:7b:62:11:f4:b6:bb:e3:97:39:10:6b:
                    ff:ff:e5:44:df:92:d0:84:91:bb:9b:d2:3e:f8:51:
                    a9:df:31:eb:8c:5b:ce:b3:75:0e:cc:12:51:c8:ca:
                    78:33:70:26:43:95:23:95:eb:dc:39:41:6e:53:0d:
                    99:22:da:4f:69:89:8b:5f:c1:af:15:eb:2f:7c:9f:
                    f2:49:ec:79:a5:20:e7:ce:2e:0a:1f:bd:3f:73:10:
                    33:9a:35:69:d0:68:1c:e2:66:3b:a9:cd:fd:30:29:
                    8e:ad:69:90:a8:95:4e:96:58:75:8c:e4:c3:46:83:
                    d6:15:4b:34:f2:cd:3e:ef:3b:6a:4b:15:c5:44:cd:
                    80:75:44:ce:39:86:75:ab:bd:9b:65:97:3e:eb:62:
                    35:41:ec:06:21:da:1a:f8:68:39:54:8d:90:16:a9:
                    5e:86:4c:df:39:fe:39:b1:09:0e:6d:b2:a9:69:c1:
                    4a:03:9d:0f:03:d7:ef:61:86:c5:d3:56:e3:03:23:
                    f4:28:51:66:03:c2:34:c7:ab:73:88:cb:7c:db:17:
                    38:d7:fd:da:59:5b:ce:a6:f8:35:12:03:1b:95:b1:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F1:11:DB:FE:DA:DB:37:36:44:64:9E:BB:44:61:11:CD:B2:32:3E
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37342e302f32342d3332203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:5b:ba:51:99:08:f3:06:ba:cc:7f:4c:4b:a7:a7:50:bb:45:
         92:61:0e:03:ef:b5:85:0f:5b:d6:1d:2a:15:b4:b6:5c:e4:85:
         cf:3c:b7:2f:f1:4a:b4:11:13:67:77:49:d2:74:26:9e:dd:ff:
         e1:58:1d:71:2a:2d:ca:5a:57:4e:51:e6:6b:a9:78:d9:ea:ba:
         94:23:90:20:5f:4a:02:94:66:44:03:f2:12:b3:b0:b0:c0:e4:
         33:f7:7c:64:dd:2f:6e:ea:68:2e:22:76:71:67:1c:da:7e:87:
         e2:eb:34:23:9c:53:ae:da:6d:65:97:02:1f:7f:03:4c:bd:54:
         64:ce:eb:83:c9:81:b0:a3:24:e3:d4:a3:23:72:cb:e4:be:16:
         48:21:c7:0c:e0:18:92:bb:e9:33:e7:3b:16:aa:e0:fb:4b:d9:
         54:da:b0:a7:9e:e5:47:44:c9:04:8f:91:ad:40:94:20:25:c0:
         48:80:df:e1:37:91:ea:3e:12:fe:06:b2:5a:85:c9:b7:72:6e:
         56:4f:87:1e:02:07:8c:99:02:f5:80:59:71:92:a6:17:55:8e:
         ba:ff:58:f0:62:f1:3a:b1:9f:41:54:39:d8:1d:c4:82:e2:ac:
         6a:b5:4e:ac:c9:4a:0e:7c:13:f1:5e:90:7d:15:c4:4d:32:eb:
         13:0d:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:34:29 2025 by rpki-client