Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139322e302f32342d3234203d3e20323638343831.roa
File:                     34352e3136312e3139322e302f32342d3234203d3e20323638343831.roa (raw, json)
Hash identifier:          fxgbVqTGaE6PQSbAY49EBC2nYUjEsEo8Zqlf35e2WnA=
Subject key identifier:   11:F6:DF:DF:16:2D:21:52:46:AB:C5:8A:E7:64:4E:E3:75:5D:D5:5C
Certificate issuer:       /CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
Certificate serial:       03A8420A289E11EF457D15DCB96516DE1546830B
Authority key identifier: 85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139322e302f32342d3234203d3e20323638343831.roa
Signing time:             Fri 11 Jul 2025 14:14:25 +0000
ROA not before:           Fri 11 Jul 2025 14:09:25 +0000
ROA not after:            Fri 10 Jul 2026 14:14:25 +0000
asID:                     268481
IP address blocks:        45.161.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl
                          rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 23:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a8:42:0a:28:9e:11:ef:45:7d:15:dc:b9:65:16:de:15:46:83:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
        Validity
            Not Before: Jul 11 14:09:25 2025 GMT
            Not After : Jul 10 14:14:25 2026 GMT
        Subject: CN=11F6DFDF162D215246ABC58AE7644EE3755DD55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:d7:25:16:51:23:7f:95:41:d3:77:79:8f:
                    5e:48:02:1d:fa:40:7d:06:c0:35:ba:19:90:1c:9b:
                    2a:e7:d5:17:ea:af:e5:8b:3d:4f:99:88:f0:d9:8e:
                    a6:29:11:de:da:80:cb:fc:74:b8:7c:a7:b2:35:49:
                    4a:e4:3b:8b:79:de:3b:75:23:97:0d:0e:fc:c2:aa:
                    9e:cd:14:39:a1:a5:58:06:1b:87:09:f7:d7:18:96:
                    c1:35:c0:01:e1:6b:7a:bd:25:ec:59:e6:e2:8c:1a:
                    56:7d:50:d9:03:cd:6e:87:6c:dd:ff:1e:47:15:82:
                    aa:9d:d8:65:91:52:52:9f:ae:64:69:fa:c8:9f:4c:
                    bd:ba:ce:99:35:6c:5e:59:86:bc:f9:f9:3c:d5:a5:
                    13:1c:15:d0:90:f1:db:d6:a2:34:96:15:c8:fc:ed:
                    b8:9c:68:b6:ca:a3:88:a4:f4:b5:78:bd:07:d0:eb:
                    5e:84:a2:d1:91:ac:3f:89:6c:96:f7:00:fe:f1:6e:
                    b9:d5:9b:ae:0d:4b:cd:5c:d2:5e:7d:47:e0:9c:32:
                    1f:6d:3a:70:e7:bf:4a:4a:11:f6:0e:c8:3d:85:c4:
                    c4:10:ea:48:21:b2:14:dc:9f:a6:ee:b0:a0:aa:83:
                    6c:22:c9:80:2f:40:26:a6:8c:00:13:76:07:73:aa:
                    0e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F6:DF:DF:16:2D:21:52:46:AB:C5:8A:E7:64:4E:E3:75:5D:D5:5C
            X509v3 Authority Key Identifier:
                keyid:85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139322e302f32342d3234203d3e20323638343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:b8:43:c9:e9:f6:a0:f8:c2:5c:47:aa:49:19:1b:11:ce:99:
         75:4e:84:49:57:cc:88:a6:86:c9:92:fc:5f:25:29:d5:ae:a8:
         da:bc:26:70:ee:b9:6a:3c:b7:01:15:8b:a8:d1:20:96:0c:f8:
         cc:50:43:39:a2:71:d4:ea:40:8b:7d:36:51:15:7b:6b:b1:61:
         50:7f:06:94:e3:45:68:38:3b:af:e2:2a:09:20:28:6c:b3:80:
         4d:60:73:6e:b6:6b:0e:10:14:a2:9f:3f:af:5e:8f:07:21:24:
         93:98:4f:13:bb:3b:22:d6:d4:65:c7:3c:94:40:d3:00:bb:b3:
         43:9c:89:01:31:21:e0:57:b8:05:68:4c:e9:bc:64:95:b6:61:
         24:bc:97:0f:09:42:d3:5e:4c:33:50:ab:88:8f:2b:6b:dc:98:
         8b:8b:c1:2b:ed:8b:75:46:58:e2:bb:02:b8:f0:04:c9:a1:cb:
         4f:08:ee:fc:7a:14:2b:b9:d8:44:90:d5:f4:19:27:d6:d2:d9:
         aa:ae:13:5b:18:f0:07:96:e8:7c:ce:da:e6:22:d1:0e:06:6f:
         0a:fb:11:6b:d5:dd:61:a5:db:a3:90:6f:aa:82:d4:ef:e1:f8:
         7d:7c:af:6a:95:39:a1:85:27:ae:0a:23:21:d9:b5:5e:74:85:
         c5:6b:8a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:14:42 2025 by rpki-client