Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
File:                     34352e3136312e34382e302f32332d3233203d3e20323638343437.roa (raw, json)
Hash identifier:          q5uCDrA1+FragZzrfoJ1wnMr36zvz5G+EKPfETNeSGk=
Subject key identifier:   01:1B:2E:11:A2:A7:FD:EB:F7:2C:31:36:D4:EB:2B:3B:C3:C2:96:43
Certificate issuer:       /CN=8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31
Certificate serial:       52DBBE9BEA1673E9F53B9C93FF1680CAECB6D936
Authority key identifier: 8B:D6:92:C4:16:F4:48:93:15:B5:DD:0C:CD:F9:6F:DB:7B:A0:EE:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
Signing time:             Thu 24 Jul 2025 13:05:04 +0000
ROA not before:           Thu 24 Jul 2025 13:00:04 +0000
ROA not after:            Thu 23 Jul 2026 13:05:04 +0000
asID:                     268447
IP address blocks:        45.161.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.crl
                          rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 11:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:db:be:9b:ea:16:73:e9:f5:3b:9c:93:ff:16:80:ca:ec:b6:d9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31
        Validity
            Not Before: Jul 24 13:00:04 2025 GMT
            Not After : Jul 23 13:05:04 2026 GMT
        Subject: CN=011B2E11A2A7FDEBF72C3136D4EB2B3BC3C29643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3c:e9:3c:02:e4:56:dd:ae:88:3b:f4:b6:28:
                    e2:6d:9f:78:2d:db:4b:74:86:8c:87:d2:71:fa:00:
                    6e:86:44:34:92:6d:b2:42:19:64:f0:3a:7a:17:c5:
                    6f:a2:5b:c2:73:f1:2f:37:c9:fa:9d:f9:aa:c6:9d:
                    c0:df:be:65:31:47:f8:b9:e0:d9:38:41:91:90:b1:
                    3d:b4:b7:c1:ca:6d:87:e4:f8:92:24:c6:d6:a3:28:
                    da:7c:2c:80:75:63:4f:4a:88:25:5f:57:53:0b:54:
                    0e:15:4a:d9:34:8d:b1:47:38:c8:1d:77:5d:64:45:
                    0a:9f:91:87:c0:3e:c3:bb:98:9c:41:cc:75:b3:27:
                    b8:d6:04:3a:54:25:2e:ae:19:2d:18:a7:15:39:70:
                    a2:fa:ab:92:95:05:86:6b:9e:73:45:bf:9c:69:49:
                    42:b3:dd:d6:7f:01:85:81:31:6c:f1:19:29:52:e5:
                    4d:15:09:0c:fe:15:cc:e6:55:f4:34:35:78:69:04:
                    9a:65:6a:11:b7:15:63:03:d9:d1:7a:06:6a:db:07:
                    4a:94:22:3d:3c:6c:75:90:67:7a:16:12:f7:ae:e5:
                    10:d3:f9:5c:22:f6:b0:a1:a8:45:f7:43:52:c4:85:
                    71:55:a0:97:bb:0a:20:95:6f:3e:bf:08:eb:f5:ec:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1B:2E:11:A2:A7:FD:EB:F7:2C:31:36:D4:EB:2B:3B:C3:C2:96:43
            X509v3 Authority Key Identifier:
                keyid:8B:D6:92:C4:16:F4:48:93:15:B5:DD:0C:CD:F9:6F:DB:7B:A0:EE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:cc:4a:a5:d2:d4:e1:fd:d2:66:e3:ac:de:ec:93:3d:b2:7d:
         d3:be:a5:7f:25:d2:c0:fd:f0:c3:d9:a7:1c:58:af:76:88:1b:
         e5:a2:fa:f8:c2:34:38:a4:1f:f5:31:11:9a:82:b7:f3:86:34:
         de:2d:90:54:7e:57:30:de:0f:3d:6a:b4:9c:53:f5:c4:3b:ac:
         c0:1c:75:5e:ce:c2:c9:96:7f:c3:85:19:38:c3:70:c9:e0:84:
         2f:fd:f7:f4:4f:93:6a:45:0c:03:ff:9d:45:7f:a8:35:ef:79:
         f2:db:f1:5e:83:0f:de:6c:43:5c:67:b6:66:15:fd:fd:25:aa:
         f7:f1:82:13:5f:9e:b1:9d:b9:d2:9f:3d:3c:d4:ee:25:8b:35:
         36:20:71:44:7e:8b:6f:62:f2:d3:d7:6d:f1:3b:63:40:cd:56:
         c0:02:25:28:3c:6a:32:ef:3f:e6:ff:98:96:af:a5:1b:20:ba:
         42:f1:d1:a2:77:a6:3f:a9:c2:91:20:0b:0b:74:56:36:04:cf:
         c1:c6:84:4b:a0:46:d6:b0:58:ef:c4:98:22:81:55:97:a2:41:
         35:2e:59:33:b2:54:a0:24:3f:db:80:4f:fc:de:78:e9:02:d3:
         b8:b9:fc:07:78:77:0b:18:96:ae:95:e9:df:a7:9b:02:c0:05:
         2e:7f:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:11:23 2025 by rpki-client