Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37362e302f32342d3234203d3e20323638383031.roa
File:                     34352e3137332e37362e302f32342d3234203d3e20323638383031.roa (raw, json)
Hash identifier:          Bjx1OB32eiZW91+jSNX6Bd+5WqWfezM1nKcrfRMxFHQ=
Subject key identifier:   D4:B8:44:85:F4:69:D4:2C:1E:DA:89:AC:5D:34:EB:63:CA:03:2E:FF
Certificate issuer:       /CN=95275964CD9C4F9994AC4DB3B2756C130AAE0CDA
Certificate serial:       106406458E492191D8F8347B728734BDE13F792C
Authority key identifier: 95:27:59:64:CD:9C:4F:99:94:AC:4D:B3:B2:75:6C:13:0A:AE:0C:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37362e302f32342d3234203d3e20323638383031.roa
Signing time:             Tue 10 Jun 2025 13:35:27 +0000
ROA not before:           Tue 10 Jun 2025 13:30:27 +0000
ROA not after:            Tue 09 Jun 2026 13:35:27 +0000
asID:                     268801
IP address blocks:        45.173.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.crl
                          rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 22:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:64:06:45:8e:49:21:91:d8:f8:34:7b:72:87:34:bd:e1:3f:79:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95275964CD9C4F9994AC4DB3B2756C130AAE0CDA
        Validity
            Not Before: Jun 10 13:30:27 2025 GMT
            Not After : Jun  9 13:35:27 2026 GMT
        Subject: CN=D4B84485F469D42C1EDA89AC5D34EB63CA032EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:76:33:b5:5f:a9:d1:ad:f1:cd:bf:eb:de:
                    41:21:44:5f:f4:ea:6e:20:5e:ef:97:a8:80:e1:67:
                    a2:d2:c6:fe:8c:80:65:fa:32:30:0d:ec:2f:9e:a8:
                    84:0f:92:e7:1f:b6:a1:95:44:6d:64:8d:d0:eb:e8:
                    3d:5e:d2:70:5e:97:2e:4c:35:fb:56:66:35:ae:b8:
                    6c:6e:95:9a:63:ae:5b:95:11:33:75:ac:1e:30:8d:
                    bf:b9:d1:1e:e6:c4:be:52:91:ef:3c:ff:e9:d3:64:
                    d8:b7:fe:a4:2b:9b:3f:79:71:4b:6b:44:9e:93:0f:
                    c3:4b:b8:46:94:11:62:bc:9a:5c:1d:79:a7:7c:86:
                    6d:0e:3f:c1:52:e7:64:14:75:1c:b5:b8:f7:6e:41:
                    e5:83:96:26:bc:5b:c9:9c:35:b2:47:14:56:d3:cf:
                    01:5e:1c:c0:32:e4:2e:cd:0f:71:99:a4:97:42:8f:
                    7d:19:1c:4c:38:32:b6:a2:bd:1a:44:78:e4:10:85:
                    97:a4:26:ca:24:98:96:0c:42:fa:21:a8:ca:44:d4:
                    a8:ff:60:3c:b1:8c:29:2c:a3:5f:02:d9:6d:11:36:
                    6f:cd:d7:4f:ec:9b:43:e7:50:5a:d0:20:24:fe:dc:
                    5d:01:af:5f:27:bf:26:2e:4b:02:b8:9f:0a:d9:df:
                    ba:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B8:44:85:F4:69:D4:2C:1E:DA:89:AC:5D:34:EB:63:CA:03:2E:FF
            X509v3 Authority Key Identifier:
                keyid:95:27:59:64:CD:9C:4F:99:94:AC:4D:B3:B2:75:6C:13:0A:AE:0C:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37362e302f32342d3234203d3e20323638383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7c:49:e6:bd:98:e2:c9:ca:d7:20:ea:70:fd:20:1f:35:3e:
         61:6c:fe:5c:59:82:d2:66:97:cf:bd:12:4a:98:e3:34:34:1e:
         bd:ca:82:cb:51:e2:98:dd:41:13:e0:b4:4b:ab:6e:f8:da:61:
         47:2c:11:99:64:26:9f:57:14:06:8f:09:35:6a:db:77:f0:1c:
         a1:d7:59:6d:db:4c:58:2d:06:47:5c:1e:d1:bc:b1:50:33:cb:
         d7:27:53:6b:53:ad:c7:5c:ec:a7:fe:78:39:9a:a5:fb:ef:a7:
         9c:b8:92:ee:8e:52:36:38:86:6c:49:22:3d:3f:75:ab:da:e5:
         e3:4a:ad:fc:43:16:9f:70:eb:01:7e:0e:fa:d5:2b:5a:3b:d8:
         47:3f:9f:40:16:d0:62:14:45:ec:7a:42:c3:7a:7b:53:5d:94:
         89:3b:58:60:f1:58:8b:ff:91:9e:f2:d5:a1:87:41:73:30:9f:
         05:bd:65:5e:e9:a2:34:77:62:40:b1:36:59:78:86:b4:4c:b9:
         40:1d:c0:9d:b3:df:0d:20:b6:b1:ad:dd:d5:58:88:10:8b:e5:
         56:a7:e3:24:5d:0e:c7:f5:11:1b:27:25:42:ba:1e:91:1c:63:
         9a:32:54:2d:f5:f5:a6:0b:e6:b1:b6:f3:08:f4:3b:ac:d6:84:
         3f:94:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:49:51 2025 by rpki-client