Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32332d3233203d3e20323638343434.roa
File:                     34352e3136312e36342e302f32332d3233203d3e20323638343434.roa (raw, json)
Hash identifier:          1YqklDYP/n1RZgRlYx1W7MOZlkN40BrMgtxRYCtmFUc=
Subject key identifier:   32:91:3A:67:C2:39:C4:57:4E:7D:8F:C5:37:1F:7A:52:C6:46:25:BA
Certificate issuer:       /CN=86B2810A6C4EB421987C3396698910082BEA85F9
Certificate serial:       52F06470F87BF5F9153C334ACA26A579314F9E8B
Authority key identifier: 86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32332d3233203d3e20323638343434.roa
Signing time:             Mon 25 Aug 2025 11:54:55 +0000
ROA not before:           Mon 25 Aug 2025 11:49:55 +0000
ROA not after:            Mon 24 Aug 2026 11:54:55 +0000
asID:                     268444
IP address blocks:        45.161.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl
                          rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 11:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f0:64:70:f8:7b:f5:f9:15:3c:33:4a:ca:26:a5:79:31:4f:9e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B2810A6C4EB421987C3396698910082BEA85F9
        Validity
            Not Before: Aug 25 11:49:55 2025 GMT
            Not After : Aug 24 11:54:55 2026 GMT
        Subject: CN=32913A67C239C4574E7D8FC5371F7A52C64625BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0a:ff:68:8f:ee:d0:7c:4d:12:c8:b0:3b:53:
                    99:0c:f5:1f:06:e7:36:a6:fa:0f:4c:81:e0:fc:ce:
                    29:4f:29:0c:f2:8e:f1:f7:81:a0:1a:b8:4a:29:16:
                    02:3e:81:83:31:bd:55:cc:87:e8:da:1b:b1:9d:f3:
                    57:57:c0:38:3f:e4:2e:e5:b2:3a:33:ef:c7:d4:e9:
                    24:8f:94:ae:96:d0:08:c1:a6:8f:1f:b6:97:ef:1d:
                    e0:34:ab:f1:d6:97:fa:3a:fb:9c:4a:2f:04:83:41:
                    41:56:fa:d7:67:d5:62:0f:7e:15:c0:9f:e9:ad:4a:
                    e4:5a:09:58:53:03:2e:95:33:a5:a7:cc:3f:fe:a8:
                    8b:5a:cc:3a:f8:17:1a:c4:81:f8:7b:2c:83:7c:3f:
                    df:4a:8a:6d:d5:48:ff:0c:56:f3:35:81:e4:fd:df:
                    e9:39:d6:24:bc:7d:92:bb:5e:55:4d:90:63:16:9d:
                    08:5d:2a:3a:be:28:ec:d8:88:2d:44:d6:fe:b3:ed:
                    91:be:e7:a6:93:39:05:b9:bf:65:03:00:16:90:28:
                    a8:6d:33:89:9d:73:b5:02:b1:19:43:8d:2c:f4:b9:
                    e0:49:22:88:e6:c0:26:c8:6a:55:30:92:8f:38:3c:
                    bf:5b:d1:89:13:d5:44:2d:1a:dc:49:7e:8c:95:29:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:91:3A:67:C2:39:C4:57:4E:7D:8F:C5:37:1F:7A:52:C6:46:25:BA
            X509v3 Authority Key Identifier:
                keyid:86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32332d3233203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:81:61:a8:c5:5f:65:d4:29:76:97:79:0f:d5:84:e4:99:e5:
         4c:a2:ed:b4:ac:eb:d0:d5:18:49:b9:2e:5a:0f:db:62:85:e6:
         9b:cb:79:52:cd:81:a4:43:bd:44:f9:6e:fd:70:0d:17:f2:73:
         a4:84:85:b9:b8:1f:9b:be:08:83:98:5c:da:8a:dc:e1:a3:38:
         a0:2b:4d:b7:34:47:fb:ef:9a:32:2a:06:09:64:80:3d:52:5d:
         f5:cd:56:19:14:14:23:c2:f1:3e:6c:04:4a:a4:1e:c4:06:5b:
         9f:47:ec:e6:5c:d4:7b:b7:6b:4a:11:a6:08:35:5b:9e:60:b7:
         96:a4:79:11:c6:e7:9e:56:16:fd:d8:e1:4f:ef:e3:3f:7c:cd:
         81:28:18:8f:8e:b4:60:64:e5:8a:63:45:50:c0:b5:6c:2f:af:
         7f:80:af:b2:8e:a0:f5:f1:a0:bd:a0:9e:92:51:cd:77:b5:6a:
         59:ac:d8:d7:4d:9a:d0:5f:6e:55:7c:13:85:20:ec:b8:18:92:
         b1:bb:08:f9:ad:9b:16:6b:90:2d:b1:32:3b:4f:d3:4a:9b:39:
         0e:03:f3:93:70:64:65:c3:aa:c4:49:de:0f:07:61:3b:c9:4d:
         cc:19:02:c2:3d:3f:94:0e:4b:a0:1f:79:f3:39:4f:06:fd:cc:
         33:c7:29:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:05:35 2025 by rpki-client