Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234352e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234352e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          NV5nBv+pqzX4rrfjbegDeABwRnbebqqKoec9nien3qY=
Subject key identifier:   01:6B:43:00:07:16:78:28:C1:0B:18:45:7A:97:B0:7D:CE:44:03:18
Certificate issuer:       /CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
Certificate serial:       1CF79A1F45F7A1D3CBE739A65ECAF7CF1508B4DD
Authority key identifier: F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234352e302f32342d3234203d3e20323638323936.roa
Signing time:             Fri 18 Jul 2025 20:53:45 +0000
ROA not before:           Fri 18 Jul 2025 20:48:45 +0000
ROA not after:            Fri 17 Jul 2026 20:53:45 +0000
asID:                     268296
IP address blocks:        45.237.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 11:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f7:9a:1f:45:f7:a1:d3:cb:e7:39:a6:5e:ca:f7:cf:15:08:b4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
        Validity
            Not Before: Jul 18 20:48:45 2025 GMT
            Not After : Jul 17 20:53:45 2026 GMT
        Subject: CN=016B430007167828C10B18457A97B07DCE440318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b1:60:a2:07:fa:15:d5:ac:8c:c7:68:e4:0b:
                    2b:67:96:23:17:ba:7a:ba:2c:8a:7a:53:38:b9:5f:
                    31:b3:72:89:90:d5:d0:7d:be:60:2e:dc:96:e0:d1:
                    1f:8b:96:39:48:68:37:fe:18:97:b6:b5:4c:7a:87:
                    36:b3:e7:13:0f:dc:17:b8:2f:17:37:f9:99:2c:1d:
                    5c:f7:71:bb:22:88:34:9d:d4:2b:64:bb:d1:87:d8:
                    dd:fa:35:d6:23:fa:8c:e5:33:34:dc:17:3d:da:82:
                    e7:5a:08:9d:d3:d8:61:4b:a9:0d:eb:6a:9d:ed:7d:
                    2f:e2:f1:1a:08:39:ad:76:da:d7:f7:0b:9f:47:70:
                    aa:7a:74:da:0d:a8:06:79:7d:29:3e:a9:a3:47:62:
                    d7:59:4b:eb:e5:8d:11:ce:4c:8a:18:5a:05:3f:ce:
                    97:8c:97:5c:1f:eb:4e:e8:fa:39:6f:19:60:68:8d:
                    78:d5:76:d2:9d:6a:f2:9f:32:52:82:c0:bc:83:a4:
                    f5:6b:69:5f:20:ce:f1:69:f7:10:1b:c6:dc:0b:27:
                    ce:ae:33:32:5d:c4:2e:4e:1e:c2:33:b2:8d:e1:bf:
                    f6:26:29:fb:1d:ff:42:6a:e8:b9:18:7c:de:eb:18:
                    94:22:01:16:5d:aa:e5:28:13:d6:39:79:c3:aa:ff:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6B:43:00:07:16:78:28:C1:0B:18:45:7A:97:B0:7D:CE:44:03:18
            X509v3 Authority Key Identifier:
                keyid:F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234352e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:a0:b0:ad:c8:27:fa:b3:84:eb:e6:48:6b:f3:55:21:32:
         77:3d:d7:bc:a1:78:e8:53:83:c0:49:09:4f:b8:38:43:69:43:
         7c:11:dc:1f:3d:32:8d:46:d0:b6:bc:2f:33:b0:e9:b2:80:1a:
         7e:e1:3a:72:b3:90:7a:e8:fa:68:a6:f9:ed:15:0d:7c:17:bb:
         18:bc:b5:23:6d:f7:14:56:2e:9f:b2:6e:2b:b5:56:b7:38:27:
         4a:f0:b3:34:c2:c8:54:6d:f0:6f:7e:4a:22:ac:ce:e6:2f:03:
         c2:40:04:9c:b7:94:e4:cb:d2:0d:3c:c5:82:60:a8:33:eb:8c:
         98:d8:02:1d:6e:9a:fe:61:e5:fc:19:cb:79:49:91:d8:d1:5f:
         bf:3f:54:b0:07:4f:94:01:bf:4c:2d:78:e5:1b:fb:f5:0d:f7:
         29:ef:3b:3f:c3:87:e8:75:90:42:16:1c:c6:46:25:2f:3d:e4:
         74:96:93:76:e7:b6:ae:8a:59:85:34:65:b3:44:c8:51:f0:2b:
         0a:74:d2:9d:87:ee:96:1b:b6:74:c1:62:d5:ab:3f:7a:4e:bb:
         bf:07:a1:0c:10:40:31:8a:85:de:81:1b:ca:f0:02:51:5a:6f:
         6e:56:2c:db:cb:93:b9:a8:d2:b9:6c:dd:c5:45:65:e2:e2:68:
         0b:ed:05:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:41:21 2025 by rpki-client