Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139332e302f32342d3234203d3e20323638343831.roa
File:                     34352e3136312e3139332e302f32342d3234203d3e20323638343831.roa (raw, json)
Hash identifier:          APPHoWt1PEEr1rSwOKAXrROMhfaJHLJFzmdUqKvNKgc=
Subject key identifier:   A1:05:18:66:29:FB:6A:FD:D7:18:6B:4C:3B:B3:8F:21:47:AF:6C:4F
Certificate issuer:       /CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
Certificate serial:       6AA394ED189435C0464C34163F4D6D4A251C39B1
Authority key identifier: 85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139332e302f32342d3234203d3e20323638343831.roa
Signing time:             Fri 11 Jul 2025 14:14:27 +0000
ROA not before:           Fri 11 Jul 2025 14:09:27 +0000
ROA not after:            Fri 10 Jul 2026 14:14:27 +0000
asID:                     268481
IP address blocks:        45.161.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl
                          rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 04:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a3:94:ed:18:94:35:c0:46:4c:34:16:3f:4d:6d:4a:25:1c:39:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
        Validity
            Not Before: Jul 11 14:09:27 2025 GMT
            Not After : Jul 10 14:14:27 2026 GMT
        Subject: CN=A105186629FB6AFDD7186B4C3BB38F2147AF6C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:5d:e9:c5:20:ca:2e:1b:1f:a3:76:cb:a3:
                    72:8e:5a:95:69:74:b1:e5:25:66:b6:a3:00:10:08:
                    f1:8b:31:af:82:1d:26:17:5c:66:86:44:dc:f4:a2:
                    5a:d2:86:5b:d2:04:76:a7:92:b3:9c:13:ab:a7:ec:
                    54:e6:6d:b3:00:d2:77:e0:c1:a0:8c:d2:0c:14:85:
                    20:ac:b0:5f:0b:c4:ee:d9:2b:4d:12:6f:f4:4a:b3:
                    49:dd:36:c1:71:09:a0:74:7f:f5:9f:05:71:c7:44:
                    7c:5d:ce:cb:a1:71:39:b1:b7:00:68:ff:75:a8:91:
                    71:49:16:0a:50:08:46:4e:8e:4f:b0:12:1f:dd:db:
                    5e:97:69:36:19:f8:2a:2f:68:c0:55:43:b0:11:b6:
                    c5:79:27:2f:44:f9:5a:8d:51:36:32:a5:e8:89:e5:
                    c9:92:97:32:14:98:c1:dc:a1:93:6f:dd:0c:a3:d0:
                    e7:70:59:ea:0d:72:41:2b:86:04:e9:b7:f5:1d:0b:
                    82:da:1d:f1:bc:19:0f:40:72:75:72:5c:f4:30:44:
                    2c:e5:45:35:97:fa:8f:50:b6:94:e4:b8:4e:83:de:
                    71:d7:48:ae:db:74:ac:88:56:e2:96:d2:6b:fa:db:
                    16:a0:6a:91:d1:b9:74:01:6e:e4:4d:ff:a8:a2:4a:
                    6e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:05:18:66:29:FB:6A:FD:D7:18:6B:4C:3B:B3:8F:21:47:AF:6C:4F
            X509v3 Authority Key Identifier:
                keyid:85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139332e302f32342d3234203d3e20323638343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:7f:e7:c5:ee:76:8b:5a:eb:22:b9:6e:32:97:6b:35:33:b5:
         38:46:db:c7:f1:ba:12:15:2f:b4:85:70:a9:37:7f:0d:e7:53:
         41:85:af:33:f5:bd:cf:40:21:bd:26:2f:a9:0b:7e:16:f5:a3:
         39:ac:13:ed:9e:c6:51:2b:78:ef:ce:34:3e:6c:5a:39:80:f6:
         00:8d:d6:62:50:8e:9a:41:10:0e:ef:8c:81:fb:11:98:d3:9a:
         e5:63:7a:76:b6:e2:1b:fb:36:c6:c9:8f:2f:01:b6:5d:34:73:
         f8:b5:bd:9f:62:b0:8d:9e:52:06:ee:8f:88:72:dd:a6:b3:41:
         f7:e1:2c:de:38:f3:a9:77:c4:58:ac:fd:1b:f9:7d:e6:49:bd:
         57:34:dd:20:42:36:aa:4a:81:d7:1b:08:d0:bd:bf:62:dc:87:
         0b:07:69:d0:31:a9:5e:76:de:4c:b2:89:bd:dd:2c:6b:48:23:
         b7:a3:5e:a6:e1:ca:3e:7b:11:ff:8b:d7:56:7c:4f:a5:cb:18:
         ca:68:9c:91:e1:e4:af:a4:48:97:3b:b6:7b:c3:27:6e:44:28:
         dd:16:ee:a0:8a:de:a9:f9:e6:fd:f4:60:f3:0b:09:a2:e8:24:
         95:e0:1c:63:08:58:a1:2a:2e:0d:9d:dc:26:82:84:4c:09:f4:
         82:dc:d9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:09:15 2025 by rpki-client