Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e35312e302f32342d3234203d3e20323638343437.roa
File:                     34352e3136312e35312e302f32342d3234203d3e20323638343437.roa (raw, json)
Hash identifier:          VI177X5Q03yJRDzps/vfvAfamWjK/n5du7C6aHiv1S0=
Subject key identifier:   A8:15:45:CA:6C:A8:80:57:00:1D:29:A0:6D:F4:20:BA:B6:4C:F8:2C
Certificate issuer:       /CN=8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31
Certificate serial:       778C88F5B15A35956244C0270FAD5619311DA12A
Authority key identifier: 8B:D6:92:C4:16:F4:48:93:15:B5:DD:0C:CD:F9:6F:DB:7B:A0:EE:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e35312e302f32342d3234203d3e20323638343437.roa
Signing time:             Thu 24 Jul 2025 13:05:27 +0000
ROA not before:           Thu 24 Jul 2025 13:00:27 +0000
ROA not after:            Thu 23 Jul 2026 13:05:27 +0000
asID:                     268447
IP address blocks:        45.161.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.crl
                          rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 06:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8c:88:f5:b1:5a:35:95:62:44:c0:27:0f:ad:56:19:31:1d:a1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31
        Validity
            Not Before: Jul 24 13:00:27 2025 GMT
            Not After : Jul 23 13:05:27 2026 GMT
        Subject: CN=A81545CA6CA88057001D29A06DF420BAB64CF82C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:59:f7:f1:b4:5d:95:39:38:00:76:79:67:
                    5b:09:03:03:c7:e7:fb:ae:4d:ce:c4:13:cb:05:57:
                    ed:55:7c:d6:4f:00:c1:2d:a6:fd:b6:0e:50:51:8d:
                    bc:0f:07:ef:a2:21:68:8d:9d:d0:ab:a4:c7:a4:2f:
                    91:f4:68:c6:77:d0:2b:d7:0b:ad:b7:59:81:0d:89:
                    ff:d0:90:25:d6:7c:44:a6:a2:69:7a:ee:c2:67:6d:
                    23:3d:68:66:2c:5f:ea:d8:65:88:35:16:2f:45:d7:
                    b7:c8:63:fb:0d:69:eb:af:6b:0a:d9:66:a2:24:9c:
                    10:e7:70:9e:80:df:d4:e9:0e:08:9f:91:27:8f:4b:
                    27:96:05:b5:60:29:c4:89:46:ae:ee:76:57:ec:bb:
                    33:8e:08:99:75:f4:1b:b2:5f:59:ee:13:8e:80:88:
                    dd:5f:53:05:a6:2e:97:9f:a8:59:69:8f:eb:fa:87:
                    23:68:cd:58:ea:63:46:41:96:19:d9:ca:f0:75:28:
                    e2:3f:ca:81:fc:bf:ee:50:4b:98:b4:84:dd:3a:1c:
                    4b:50:d1:91:5f:9c:df:b2:55:ba:eb:6e:52:db:bd:
                    86:d0:c9:44:fe:e1:16:1a:88:49:fd:6f:fb:0f:00:
                    df:e8:2c:86:e4:73:c6:40:db:c9:db:c3:3c:60:8a:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:15:45:CA:6C:A8:80:57:00:1D:29:A0:6D:F4:20:BA:B6:4C:F8:2C
            X509v3 Authority Key Identifier:
                keyid:8B:D6:92:C4:16:F4:48:93:15:B5:DD:0C:CD:F9:6F:DB:7B:A0:EE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD692C416F4489315B5DD0CCDF96FDB7BA0EE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e35312e302f32342d3234203d3e20323638343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e2:d2:66:4e:35:ba:2a:67:93:97:76:5e:64:51:ab:13:ef:
         b7:5a:3b:9c:0f:77:bb:f0:f4:de:8e:9d:0c:95:ba:e8:3e:1e:
         78:50:11:a6:e2:7b:3a:7d:e9:3f:21:5b:b4:1e:76:b2:76:ed:
         66:0b:e9:64:fe:47:d6:90:35:ba:d0:10:9d:68:70:e4:9a:3e:
         40:0d:b8:fe:75:df:94:8d:40:da:97:a6:41:e8:90:7b:8b:b0:
         69:ee:90:21:ea:9d:49:3e:df:68:0f:8b:c2:c0:d5:49:85:ec:
         cc:82:69:98:67:cf:d8:da:42:12:5f:93:70:3b:a4:ad:51:7a:
         ef:50:3a:7f:70:0c:9d:34:38:60:3c:f1:81:e7:e0:9a:b0:c6:
         e1:41:14:5e:02:b8:ab:10:54:84:be:19:65:16:8d:a5:3f:0c:
         ab:09:9f:15:73:7f:1a:04:93:89:32:dd:9a:70:bb:46:6d:b5:
         14:37:28:c4:7e:19:58:8b:46:80:cd:64:f6:56:7f:d7:e9:e7:
         79:b4:d4:5e:5d:72:34:ca:49:8d:0b:e5:ae:3a:62:63:ad:ec:
         09:42:bf:67:b3:a3:9f:45:d2:d0:78:3f:00:8a:f0:5b:89:37:
         68:65:a1:85:8f:e0:da:f5:fe:87:9a:4f:3a:8c:4e:e6:31:f4:
         ce:80:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:01 2025 by rpki-client