Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/34352e3138362e3131342e302f32342d3234203d3e20323639343139.roa
File:                     34352e3138362e3131342e302f32342d3234203d3e20323639343139.roa (raw, json)
Hash identifier:          PtMDYH9W5O3vNiy9+hjtaL6QX2I/96yECopeeQz6CFI=
Subject key identifier:   38:64:54:D6:33:9C:AC:0A:DC:B5:C0:EA:08:04:D4:98:34:3F:13:6F
Certificate issuer:       /CN=0A2DD6959EA574B23A0487BA534C699E4AC421C5
Certificate serial:       5C9399D761F83C32DF9FA2833A330C7E2D773029
Authority key identifier: 0A:2D:D6:95:9E:A5:74:B2:3A:04:87:BA:53:4C:69:9E:4A:C4:21:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DD6959EA574B23A0487BA534C699E4AC421C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/34352e3138362e3131342e302f32342d3234203d3e20323639343139.roa
Signing time:             Wed 09 Jul 2025 18:41:45 +0000
ROA not before:           Wed 09 Jul 2025 18:36:45 +0000
ROA not after:            Wed 08 Jul 2026 18:41:45 +0000
asID:                     269419
IP address blocks:        45.186.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/0A2DD6959EA574B23A0487BA534C699E4AC421C5.crl
                          rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/0A2DD6959EA574B23A0487BA534C699E4AC421C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DD6959EA574B23A0487BA534C699E4AC421C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:93:99:d7:61:f8:3c:32:df:9f:a2:83:3a:33:0c:7e:2d:77:30:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DD6959EA574B23A0487BA534C699E4AC421C5
        Validity
            Not Before: Jul  9 18:36:45 2025 GMT
            Not After : Jul  8 18:41:45 2026 GMT
        Subject: CN=386454D6339CAC0ADCB5C0EA0804D498343F136F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:28:ca:81:c5:c5:ce:9d:64:8e:f8:f6:59:
                    92:42:75:0b:97:55:7d:2d:c8:bb:8f:0b:33:46:c6:
                    1d:c6:e5:e5:38:bd:5f:7f:86:a9:ec:55:f1:c6:8a:
                    46:66:cd:90:27:6e:9d:6c:ca:72:3b:e2:35:33:20:
                    81:36:eb:af:76:80:4d:ab:01:2d:dc:dd:f9:ea:f8:
                    9e:18:c6:ae:d1:0e:6a:55:aa:c8:0d:ea:c8:9b:50:
                    21:77:3f:dd:84:55:3f:d2:3d:44:21:59:71:90:13:
                    e6:ba:70:ad:ad:72:26:09:7f:08:74:bf:2f:7e:99:
                    99:a5:15:c4:de:c2:9c:7b:24:af:d5:fa:25:87:9f:
                    40:c2:de:ca:7f:8c:3b:da:1b:55:7e:53:f2:e5:ea:
                    3a:d1:50:f5:1e:4f:66:6f:a0:55:2c:b6:75:d4:e9:
                    f7:fe:c2:b7:2d:c2:14:68:9a:89:46:33:27:c6:0a:
                    0d:d8:48:6b:21:9a:6a:c6:61:a0:00:bb:87:59:0c:
                    f1:4f:b0:a8:56:b9:4e:01:90:57:af:af:1c:79:a5:
                    57:09:13:87:5c:e2:56:25:ce:e4:6c:77:96:f5:af:
                    44:ef:0b:69:12:fc:41:9d:f8:85:c5:59:7b:6a:72:
                    8c:fa:5b:22:7a:07:4d:6e:73:4b:1e:18:0c:45:cb:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:64:54:D6:33:9C:AC:0A:DC:B5:C0:EA:08:04:D4:98:34:3F:13:6F
            X509v3 Authority Key Identifier:
                keyid:0A:2D:D6:95:9E:A5:74:B2:3A:04:87:BA:53:4C:69:9E:4A:C4:21:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/0A2DD6959EA574B23A0487BA534C699E4AC421C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DD6959EA574B23A0487BA534C699E4AC421C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/34352e3138362e3131342e302f32342d3234203d3e20323639343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:92:f6:70:8d:29:c6:02:92:8c:99:2a:a8:c3:01:c9:2a:34:
         23:04:e7:66:87:bf:33:25:3d:a3:8b:da:85:24:86:e4:aa:6a:
         9d:65:37:bd:0a:85:96:98:59:08:4d:53:6b:56:37:41:e4:20:
         2d:cf:cd:01:bf:53:b4:93:44:a8:89:05:dc:b5:ee:04:1a:ba:
         96:1d:7c:dd:b0:cb:fa:61:29:f7:46:26:e2:94:26:86:c4:97:
         a6:a1:ae:04:e2:e8:63:3b:47:43:07:93:c0:98:9a:a8:7f:d0:
         e7:a3:60:91:38:02:db:e4:07:4f:40:e4:ef:a2:db:6c:67:a0:
         3b:8e:c4:e2:2a:30:4d:2e:10:e3:92:e8:5a:1d:ad:f5:9f:6f:
         4d:61:d3:16:e6:4e:01:dc:dc:dc:45:7a:28:fe:eb:b4:2e:dc:
         68:61:a8:3a:0d:02:03:85:87:5f:60:20:ab:ca:f8:b7:ee:99:
         1d:7c:8a:da:73:64:27:1f:b3:6f:ae:b9:89:65:a3:29:65:1f:
         d7:b6:3b:1a:c1:fa:06:13:34:b9:58:7d:98:e7:5b:bc:30:8a:
         07:b0:57:f6:e7:64:96:e2:a9:18:10:93:82:dc:41:8f:77:50:
         ab:72:42:f8:70:47:13:5a:c8:62:42:29:45:d6:96:5d:1e:17:
         6d:d3:0e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:54:28 2025 by rpki-client