Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/34352e3138342e3234302e302f32322d3234203d3e20323637303238.roa
File:                     34352e3138342e3234302e302f32322d3234203d3e20323637303238.roa (raw, json)
Hash identifier:          l+uFKC7giajAJayZ7/jFlecSTaEk3dARcC2iCKbrn6o=
Subject key identifier:   EB:D5:40:22:37:67:00:11:E4:3F:91:32:74:03:FB:E6:52:C1:93:0E
Certificate issuer:       /CN=7651A842E34BF1A427ECE613831D697900FC14F9
Certificate serial:       6CF23AFCF54E934259585C53F7C7BA22F79B15FD
Authority key identifier: 76:51:A8:42:E3:4B:F1:A4:27:EC:E6:13:83:1D:69:79:00:FC:14:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/34352e3138342e3234302e302f32322d3234203d3e20323637303238.roa
Signing time:             Wed 09 Jul 2025 12:44:53 +0000
ROA not before:           Wed 09 Jul 2025 12:39:53 +0000
ROA not after:            Wed 08 Jul 2026 12:44:53 +0000
asID:                     267028
IP address blocks:        45.184.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.crl
                          rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 15:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f2:3a:fc:f5:4e:93:42:59:58:5c:53:f7:c7:ba:22:f7:9b:15:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7651A842E34BF1A427ECE613831D697900FC14F9
        Validity
            Not Before: Jul  9 12:39:53 2025 GMT
            Not After : Jul  8 12:44:53 2026 GMT
        Subject: CN=EBD5402237670011E43F91327403FBE652C1930E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:6d:59:46:b3:72:f0:87:6b:22:50:a0:08:
                    76:8e:84:85:52:ff:29:47:61:93:37:d7:96:62:a7:
                    88:4e:6b:b8:ca:a5:74:83:e1:f4:8b:d2:ce:fb:90:
                    6b:78:aa:06:0e:2f:12:f2:04:00:84:50:e1:2c:13:
                    9f:bd:d7:b0:97:a9:3f:45:9f:df:1b:33:e8:b5:b7:
                    b2:3c:92:87:93:92:4b:cd:4c:d7:fd:bf:32:b7:03:
                    19:23:ef:04:5c:d1:81:5f:5f:17:d1:34:55:4d:75:
                    07:d1:4b:3c:b5:7b:64:d5:36:be:c0:fe:13:f7:d9:
                    bf:7c:7c:48:d9:79:39:27:f6:ae:ef:56:d2:67:65:
                    14:d4:5f:76:c1:8e:2c:45:d2:04:e6:54:c5:6e:1c:
                    76:69:69:f1:ef:32:1f:46:c8:fe:b4:59:4c:00:fb:
                    51:76:a2:9a:ce:6b:c6:17:74:af:4a:7e:95:0c:95:
                    92:83:28:39:cb:00:50:79:c8:9d:b1:17:6f:ff:0a:
                    04:06:eb:b1:14:a0:5c:9a:f0:d9:53:cf:85:35:b3:
                    e8:46:12:6b:90:5e:e3:bd:33:10:8e:ef:b9:f0:93:
                    a5:aa:44:e1:61:2e:d8:a9:f5:b5:e7:e0:0c:52:4e:
                    79:36:a5:4a:eb:2e:0a:6a:47:2d:99:90:c3:8b:bc:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D5:40:22:37:67:00:11:E4:3F:91:32:74:03:FB:E6:52:C1:93:0E
            X509v3 Authority Key Identifier:
                keyid:76:51:A8:42:E3:4B:F1:A4:27:EC:E6:13:83:1D:69:79:00:FC:14:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/34352e3138342e3234302e302f32322d3234203d3e20323637303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:07:7c:97:47:82:15:74:4f:76:e6:ea:ca:9d:a1:9f:84:a2:
         8e:79:7a:d2:0d:03:3b:78:e1:b8:80:ae:3a:b9:a7:f6:8e:58:
         40:ef:da:3a:06:50:02:3c:f2:19:bb:68:ff:f5:8e:a4:ad:8f:
         85:c5:27:04:53:01:af:6e:38:f7:10:1d:fe:40:88:13:fa:ec:
         13:69:a0:e7:60:0c:e0:e9:8d:17:81:21:32:d5:43:7c:87:a5:
         21:39:6d:e8:ff:92:fa:1e:64:c8:3d:cf:70:45:13:c1:b9:2e:
         35:20:f0:ee:13:14:20:34:06:04:30:26:55:de:71:8a:68:7c:
         19:11:14:f6:93:72:41:56:c2:f5:56:ff:e5:4c:bd:bd:3e:34:
         23:a8:08:01:3a:60:2a:bb:1b:a5:04:42:76:ea:28:d9:a5:4d:
         4e:f9:c2:4c:45:98:36:db:5c:f6:d9:04:f3:7b:38:7c:2f:1c:
         28:cb:91:b9:f0:15:c9:4b:cc:69:33:f3:05:b0:6a:73:56:92:
         58:2e:39:eb:f7:56:61:c7:9c:c1:a5:fc:a9:ea:d0:22:50:e0:
         59:32:2f:83:36:56:c4:2c:32:94:d7:16:5c:50:36:35:6e:10:
         f6:69:8d:fd:3b:25:97:14:67:dc:2e:13:e8:3c:a4:69:d3:90:
         5d:6e:6b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:06:33 2025 by rpki-client