Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139342e302f32342d3234203d3e20323638343831.roa
File:                     34352e3136312e3139342e302f32342d3234203d3e20323638343831.roa (raw, json)
Hash identifier:          b7/L8kytvPV08hFldF5+XXBDNm8y3aePTutKjuhju0U=
Subject key identifier:   E9:F1:10:FF:29:5A:FF:3A:64:B0:8E:77:44:A8:1D:8F:FB:F2:30:89
Certificate issuer:       /CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
Certificate serial:       07F148B71B5DB3A08EEA5DA21238CC4122AD66EF
Authority key identifier: 85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139342e302f32342d3234203d3e20323638343831.roa
Signing time:             Fri 11 Jul 2025 14:14:30 +0000
ROA not before:           Fri 11 Jul 2025 14:09:30 +0000
ROA not after:            Fri 10 Jul 2026 14:14:30 +0000
asID:                     268481
IP address blocks:        45.161.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl
                          rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 04:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f1:48:b7:1b:5d:b3:a0:8e:ea:5d:a2:12:38:cc:41:22:ad:66:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
        Validity
            Not Before: Jul 11 14:09:30 2025 GMT
            Not After : Jul 10 14:14:30 2026 GMT
        Subject: CN=E9F110FF295AFF3A64B08E7744A81D8FFBF23089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:a7:c0:e2:ae:f3:af:89:3a:2d:15:a2:3c:
                    0f:e4:36:b2:e5:8e:72:44:1d:b9:b5:c2:6e:4f:b3:
                    a5:aa:2d:f4:1f:fe:29:12:32:38:60:a4:8e:24:0b:
                    9f:6d:59:f0:0f:46:66:31:6f:f2:15:41:dd:06:cd:
                    e6:d1:07:77:6b:a4:7b:47:90:ec:a8:b9:5c:08:73:
                    e5:3f:3e:fd:9a:f4:65:bf:2e:c6:a6:a5:98:38:85:
                    6b:5c:b3:35:f4:39:46:0b:fd:52:f5:10:63:5d:15:
                    f3:b9:d5:f6:90:d0:5e:ad:16:69:73:b3:5c:ef:bf:
                    df:db:85:76:22:0f:b3:d0:02:25:1f:e5:68:df:7b:
                    a2:3d:a2:e6:5f:71:aa:3e:ee:75:f6:6a:7f:16:63:
                    3b:9c:9e:04:46:b4:7f:1b:00:cd:b4:ec:34:56:e3:
                    8c:79:ba:53:72:e3:d6:90:99:30:1d:f1:5e:1c:e0:
                    17:05:fd:03:fa:ab:13:e0:69:b2:00:e3:a0:18:fa:
                    c8:94:68:61:bb:4f:d1:7f:61:52:34:45:b4:32:6e:
                    23:1f:3f:1a:9f:73:c1:5c:fe:09:02:0b:da:b0:78:
                    5e:23:c9:22:0f:41:8a:ba:bf:c8:2f:6d:c7:a0:0b:
                    e0:66:93:b5:bb:8f:22:a9:63:80:ea:07:a2:43:99:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F1:10:FF:29:5A:FF:3A:64:B0:8E:77:44:A8:1D:8F:FB:F2:30:89
            X509v3 Authority Key Identifier:
                keyid:85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/34352e3136312e3139342e302f32342d3234203d3e20323638343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:7a:ab:7d:22:70:b2:5d:8d:7b:fe:72:9d:b0:17:60:be:2d:
         cc:36:63:d2:80:a9:0f:e7:98:0b:04:f4:8f:5f:85:5a:6b:94:
         e7:2a:3d:ae:33:3a:3e:92:76:bd:de:d0:ac:8d:c7:b5:c3:3d:
         dd:05:bc:7f:31:a3:d2:43:2a:c2:89:fa:0e:7c:20:d5:7e:63:
         65:34:14:55:8b:a1:d6:5c:6c:0b:23:b1:6a:69:93:4f:63:ff:
         81:3b:eb:92:54:c5:15:84:20:2c:fd:33:74:67:56:43:a4:8b:
         e9:6b:fd:85:88:e8:ab:70:0e:a1:46:de:2c:41:f1:31:22:c3:
         53:bd:02:87:bc:c7:48:97:ed:cb:a1:50:00:b0:06:99:5b:88:
         f2:2b:db:b3:67:af:a0:99:7e:9e:c4:01:cf:9a:7e:9c:89:25:
         9f:69:81:be:d9:5f:46:fa:f7:0d:5c:66:b2:f4:98:e4:01:e8:
         ba:e5:75:25:81:15:94:ef:67:ae:58:1b:43:d1:99:54:11:6e:
         f8:ac:e1:f6:d8:e4:6d:60:7d:d0:7b:36:36:f5:96:5f:b7:50:
         83:0c:92:f9:19:69:c6:ff:75:70:bf:20:42:a9:88:4f:67:a8:
         c4:7a:28:fe:0a:8f:27:eb:49:5b:57:ab:2c:f8:48:bf:b4:26:
         1e:92:df:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:08:54 2025 by rpki-client