Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32322d3234203d3e20323639343334.roa
File:                     34352e3138362e3138382e302f32322d3234203d3e20323639343334.roa (raw, json)
Hash identifier:          HrgP6PsOdYVulAGh+rG+TGRzw3Oy2g5ynm/IKg6CML4=
Subject key identifier:   2B:E5:A6:A5:93:02:B7:67:E5:38:58:E3:8F:FE:60:8C:A1:02:58:CF
Certificate issuer:       /CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Certificate serial:       0A6BFF9A3B77C37163B8DFFB069A47B4025754BC
Authority key identifier: F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32322d3234203d3e20323639343334.roa
Signing time:             Fri 04 Jul 2025 02:19:08 +0000
ROA not before:           Fri 04 Jul 2025 02:14:08 +0000
ROA not after:            Fri 03 Jul 2026 02:19:08 +0000
asID:                     269434
IP address blocks:        45.186.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl
                          rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 06:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6b:ff:9a:3b:77:c3:71:63:b8:df:fb:06:9a:47:b4:02:57:54:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
        Validity
            Not Before: Jul  4 02:14:08 2025 GMT
            Not After : Jul  3 02:19:08 2026 GMT
        Subject: CN=2BE5A6A59302B767E53858E38FFE608CA10258CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a9:62:86:0f:fe:dc:b2:80:cb:f5:d9:4f:27:
                    7f:cf:f4:1c:51:01:1f:31:ba:b7:b2:1a:95:28:27:
                    f6:74:aa:8e:de:1a:48:94:3f:c6:ee:67:23:65:4b:
                    3b:ff:30:6b:3b:00:b7:0d:2c:e4:d5:55:20:09:3b:
                    f3:62:03:9e:85:e8:fb:02:81:da:83:74:82:53:fd:
                    40:ed:55:83:6e:9f:ca:3c:50:fe:55:97:61:48:57:
                    07:cf:30:28:83:8b:92:a0:ef:a3:b1:9b:67:44:a1:
                    c6:30:16:62:46:82:1a:c0:bb:44:14:55:bd:86:29:
                    58:d7:fb:d2:2e:a2:9d:2e:ec:f2:d2:fb:8b:60:8d:
                    24:6e:26:55:c7:88:ed:66:df:0e:f9:5b:08:d9:fe:
                    54:ec:f9:23:03:a0:51:14:d7:a5:00:4a:44:08:e8:
                    66:ce:5e:00:ce:11:88:23:f7:f6:38:6f:55:16:24:
                    49:79:5b:2a:da:8f:5b:b7:6b:8e:3d:e0:24:0d:59:
                    8e:71:97:27:fe:c8:ae:d5:97:79:f8:47:04:a2:7b:
                    00:22:e6:e0:6e:49:cc:c3:71:80:3a:e3:73:84:f5:
                    05:ab:f3:15:8d:d5:26:ca:a9:a7:22:54:d9:29:76:
                    24:d5:3b:6c:0d:d6:32:cd:84:d8:13:c5:02:30:2b:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E5:A6:A5:93:02:B7:67:E5:38:58:E3:8F:FE:60:8C:A1:02:58:CF
            X509v3 Authority Key Identifier:
                keyid:F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32322d3234203d3e20323639343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:4a:56:b1:e4:93:a2:42:5e:94:a2:d5:04:bc:f8:86:69:70:
         7c:61:4c:e6:6f:61:11:1b:6d:8b:a8:44:fd:a9:9f:0a:ec:b0:
         a6:e5:76:a0:88:58:cc:2d:36:28:cb:00:f8:6b:37:24:6a:87:
         66:17:ce:11:1e:d4:51:b9:76:d9:d5:4e:fe:8d:2e:39:cd:14:
         7a:5f:bd:db:0f:19:bf:f0:6f:3d:61:93:c1:bf:79:16:de:46:
         81:a5:b5:84:9f:6f:44:10:73:70:fc:26:64:13:ee:05:8f:98:
         34:3c:c0:26:0d:a3:aa:ee:f9:6d:d8:33:9d:62:84:f9:9e:dc:
         e7:ac:ae:22:9a:a2:a5:08:dd:71:0f:dc:b4:92:9b:a5:3a:95:
         40:a3:14:35:ac:1f:19:59:20:0a:51:82:5f:c2:17:54:f7:43:
         45:99:9f:85:ec:75:d2:f6:f8:3d:be:b5:85:d8:f6:1e:b8:b7:
         dc:27:44:8a:4a:a4:05:46:3e:65:27:7a:21:e6:53:0f:8f:2f:
         14:b5:bf:9b:62:ec:31:1b:8f:5d:7a:bd:eb:b3:23:9c:5a:ef:
         f8:81:ae:26:06:ce:9f:4a:e0:ec:98:e7:f6:9e:33:0d:24:5d:
         f3:4e:34:69:79:73:c4:ab:08:78:ad:11:2f:20:4d:f2:f2:69:
         eb:23:b6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:56:55 2025 by rpki-client