Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/34352e3139302e342e302f32342d3332203d3e20323639363136.roa
File:                     34352e3139302e342e302f32342d3332203d3e20323639363136.roa (raw, json)
Hash identifier:          ReZFsjAsVJj+7hBxc1HvYUO/yjfpBFliW3jpOAFwygA=
Subject key identifier:   1C:4E:F6:90:0A:E1:24:7F:2C:38:45:23:92:E5:87:35:0D:79:C0:C0
Certificate issuer:       /CN=E7D355D61F0E519D364119968134CBF512AC1B57
Certificate serial:       39DA170DED14356821B0DCA2965A222D835EEC9D
Authority key identifier: E7:D3:55:D6:1F:0E:51:9D:36:41:19:96:81:34:CB:F5:12:AC:1B:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D355D61F0E519D364119968134CBF512AC1B57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/34352e3139302e342e302f32342d3332203d3e20323639363136.roa
Signing time:             Fri 04 Jul 2025 11:58:02 +0000
ROA not before:           Fri 04 Jul 2025 11:53:02 +0000
ROA not after:            Fri 03 Jul 2026 11:58:02 +0000
asID:                     269616
IP address blocks:        45.190.4.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/E7D355D61F0E519D364119968134CBF512AC1B57.crl
                          rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/E7D355D61F0E519D364119968134CBF512AC1B57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D355D61F0E519D364119968134CBF512AC1B57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 01:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:da:17:0d:ed:14:35:68:21:b0:dc:a2:96:5a:22:2d:83:5e:ec:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D355D61F0E519D364119968134CBF512AC1B57
        Validity
            Not Before: Jul  4 11:53:02 2025 GMT
            Not After : Jul  3 11:58:02 2026 GMT
        Subject: CN=1C4EF6900AE1247F2C38452392E587350D79C0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:52:cf:b9:fa:af:ba:2a:14:d3:b7:cf:3d:
                    7a:88:81:07:99:a4:7e:1a:8c:0a:ef:0c:ef:92:00:
                    64:be:b6:33:47:c3:09:0b:ce:69:ec:2c:d0:48:8d:
                    4d:da:cd:89:ce:82:89:a6:90:c1:c6:66:05:50:c1:
                    f5:5a:12:26:a1:82:2f:d2:f6:3b:42:9f:88:09:72:
                    b9:44:62:37:df:76:be:a0:1e:06:cf:18:24:c2:dc:
                    55:eb:5c:70:1e:6b:94:c7:52:89:f0:3d:94:9d:8d:
                    b1:4d:b9:c7:24:fd:5c:26:b9:58:c8:3d:f5:58:77:
                    9a:a8:c0:7e:c5:31:a1:b9:69:de:a5:5b:ca:68:ad:
                    c3:26:03:c8:3f:03:19:35:33:1c:46:8e:16:aa:af:
                    8d:7b:1d:77:36:3e:0b:54:3c:96:ba:57:a2:87:84:
                    4f:67:3a:6b:88:eb:67:58:35:da:89:cd:88:75:6c:
                    8f:9a:3b:49:1b:46:82:8b:07:06:ac:10:7b:a4:01:
                    0c:9b:cc:d6:6e:8a:58:c4:32:9c:f4:b1:26:2d:8d:
                    35:11:12:8d:01:d3:ef:86:61:7e:dc:4d:0d:68:72:
                    c0:bc:00:cc:6b:0a:a7:30:40:b9:43:b3:57:0e:f5:
                    73:93:f8:59:a5:81:69:27:61:4b:b9:47:0e:42:fd:
                    4b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4E:F6:90:0A:E1:24:7F:2C:38:45:23:92:E5:87:35:0D:79:C0:C0
            X509v3 Authority Key Identifier:
                keyid:E7:D3:55:D6:1F:0E:51:9D:36:41:19:96:81:34:CB:F5:12:AC:1B:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/E7D355D61F0E519D364119968134CBF512AC1B57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D355D61F0E519D364119968134CBF512AC1B57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/34352e3139302e342e302f32342d3332203d3e20323639363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:fe:4a:3e:94:40:f8:d6:34:a4:87:8b:fd:b2:0b:da:5a:ef:
         42:39:a7:90:be:0f:63:9f:17:69:5b:6c:1b:b7:b4:ab:b2:b1:
         11:af:5f:b4:d9:42:46:de:44:d6:06:b4:11:79:d5:83:2b:d5:
         7f:38:64:4b:85:e7:e0:88:bc:78:0d:a5:96:2a:77:40:9b:e1:
         38:dc:a3:3a:c8:20:c9:d2:55:17:dc:3c:5e:4c:e9:c4:68:dd:
         6e:3a:e5:30:1b:b2:01:c5:8f:d3:b6:c7:8a:4a:b9:f7:ac:6a:
         8d:d8:a5:52:c6:83:61:5f:68:ef:c0:44:66:16:26:2d:33:14:
         9d:f8:b1:6d:82:0c:d7:4d:c2:dd:e0:cd:df:1c:f6:cc:45:f2:
         e9:da:b7:fb:cb:a3:b4:17:a0:02:df:51:16:81:75:6c:6c:67:
         12:ed:cf:9c:4e:ef:44:b9:22:15:ca:34:d6:31:d2:1e:28:a2:
         39:36:d8:25:66:0b:4d:4b:e2:23:df:6e:32:ae:eb:26:7a:d0:
         9a:43:54:f6:29:e1:75:e2:b3:8f:d7:52:03:b7:d2:9f:dd:0c:
         4c:73:29:a5:9a:68:41:eb:3e:c1:e9:70:64:7e:3f:57:b4:51:
         60:58:9a:02:cc:67:fe:e1:30:7a:21:a4:2e:23:0b:b6:84:e6:
         18:7b:0c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:58:21 2025 by rpki-client