Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32332d3233203d3e20323638353133.roa
File:                     34352e3136312e3231342e302f32332d3233203d3e20323638353133.roa (raw, json)
Hash identifier:          G7wQUhvhHpijhQs42Ii1L4We2ULgAoI84qVGh0IQBjs=
Subject key identifier:   A1:A0:16:F9:21:E9:16:A9:5B:6F:87:1C:74:9A:03:07:46:5C:46:10
Certificate issuer:       /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
Certificate serial:       04C865D840E5A0C37976AFC32B39D470AF380976
Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32332d3233203d3e20323638353133.roa
Signing time:             Fri 25 Jul 2025 02:48:44 +0000
ROA not before:           Fri 25 Jul 2025 02:43:44 +0000
ROA not after:            Fri 24 Jul 2026 02:48:44 +0000
asID:                     268513
IP address blocks:        45.161.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 22:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c8:65:d8:40:e5:a0:c3:79:76:af:c3:2b:39:d4:70:af:38:09:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Validity
            Not Before: Jul 25 02:43:44 2025 GMT
            Not After : Jul 24 02:48:44 2026 GMT
        Subject: CN=A1A016F921E916A95B6F871C749A0307465C4610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:f0:32:b3:29:53:c5:3f:62:c5:c5:51:c2:
                    1c:ed:ee:48:25:59:ba:56:5c:1f:08:81:e0:27:7e:
                    54:11:47:94:04:fa:56:f5:38:97:1f:ff:86:d0:b4:
                    a6:46:0b:2d:b3:b7:04:6d:63:bc:02:9b:a7:48:71:
                    a7:3a:f8:ae:1c:d4:72:1b:3f:f4:1a:31:cf:e8:c0:
                    12:cd:60:5c:9b:37:33:d1:31:de:e0:b9:17:1f:0c:
                    3a:de:7f:00:5f:e2:8b:74:f7:07:a8:33:20:76:a8:
                    d5:9a:0f:01:ff:dd:1c:a7:15:a4:14:c0:ab:ae:46:
                    a6:99:30:ed:38:d5:54:8a:05:d0:c0:2c:3e:d9:8b:
                    6b:34:c9:d6:a8:57:ad:09:07:19:da:18:d1:a1:2e:
                    5c:eb:eb:9b:67:f4:01:1f:59:72:a7:3d:d2:d2:1e:
                    6a:b0:cf:87:73:d6:c9:cd:72:45:be:6d:65:df:42:
                    b1:af:86:b8:41:4b:58:c4:5c:65:c5:25:69:e0:1f:
                    40:78:d8:d5:5f:9d:b5:e0:bc:14:82:42:44:b0:bf:
                    c5:c8:4b:6b:94:4c:68:12:b5:ef:87:02:48:f7:5b:
                    7a:79:e9:71:59:e2:a3:07:33:f7:b6:b5:47:8c:4f:
                    82:ef:a6:ef:51:0c:9a:78:91:fa:21:16:32:e9:82:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A0:16:F9:21:E9:16:A9:5B:6F:87:1C:74:9A:03:07:46:5C:46:10
            X509v3 Authority Key Identifier:
                keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/34352e3136312e3231342e302f32332d3233203d3e20323638353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:9f:9f:e7:a9:1f:41:5c:75:60:0f:03:b8:0e:2f:c9:b7:2f:
         1c:c4:35:bc:2c:ee:9d:3b:e5:62:5f:0f:4a:74:51:62:2e:ad:
         6d:d0:6b:29:7a:62:2e:65:cf:0e:ad:b6:ad:58:f7:84:69:d6:
         07:7b:4b:87:01:c3:a5:58:98:12:a0:bc:6a:00:ea:fd:92:b0:
         1c:0d:8c:c6:76:55:e1:ed:c1:ce:35:0d:6d:98:f1:46:a2:a0:
         7a:2d:22:c7:8f:75:dc:6a:bf:78:1f:e0:d5:47:01:47:cf:03:
         50:e9:00:f5:1a:59:cd:ec:37:ed:74:e6:4e:39:74:d2:e5:54:
         ed:d8:b8:9b:92:cd:83:f5:89:45:83:47:93:5f:b0:34:32:a4:
         dc:07:de:38:f9:40:f9:ef:f3:0c:46:02:0a:ab:42:fc:ee:ad:
         ad:32:b0:b9:c3:49:f2:a9:30:7e:a0:aa:12:9c:4d:67:08:a0:
         a2:bc:12:83:3e:c1:66:f4:30:8f:f7:a3:3a:f8:3e:da:03:7d:
         b7:45:a9:95:2b:e0:85:e5:ea:17:46:e4:a2:31:d5:c4:6d:a8:
         39:10:ea:23:70:40:9c:01:60:76:e6:66:e5:42:d8:0c:be:0f:
         6a:ad:59:f6:50:86:9d:e4:e3:e7:35:99:a8:23:98:90:e1:b0:
         6d:36:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:36:15 2025 by rpki-client