Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131322e302f32322d3332203d3e20323632343934.roa
File:                     34352e3137392e3131322e302f32322d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          eUmjGzItI2AOHX8dLUv4kY0EW3JjPhyVO3eF8AJS/Hc=
Subject key identifier:   F9:02:62:D3:FB:97:97:1E:62:25:2A:CC:A0:F5:F7:3C:90:CB:DD:FC
Certificate issuer:       /CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
Certificate serial:       6CFCFDCB91F9FC90194C960E7784DDE67E98EB68
Authority key identifier: A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131322e302f32322d3332203d3e20323632343934.roa
Signing time:             Mon 04 Aug 2025 20:22:03 +0000
ROA not before:           Mon 04 Aug 2025 20:17:03 +0000
ROA not after:            Mon 03 Aug 2026 20:22:03 +0000
asID:                     262494
IP address blocks:        45.179.112.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 20:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fc:fd:cb:91:f9:fc:90:19:4c:96:0e:77:84:dd:e6:7e:98:eb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
        Validity
            Not Before: Aug  4 20:17:03 2025 GMT
            Not After : Aug  3 20:22:03 2026 GMT
        Subject: CN=F90262D3FB97971E62252ACCA0F5F73C90CBDDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:59:c8:5b:87:fc:85:e7:26:3e:fe:f3:bb:ab:
                    57:27:30:9a:07:5f:13:14:f1:7b:7d:5b:9c:84:f6:
                    55:d5:d8:ce:d6:6a:51:d0:94:a7:4a:72:38:fd:f6:
                    df:d8:74:24:17:97:2a:c0:c7:bc:59:13:df:4b:c5:
                    74:18:87:d4:81:ff:4e:9b:f3:23:42:f3:a5:74:82:
                    4e:eb:c0:c6:d3:be:7c:df:4d:8c:8d:d6:c0:9b:2a:
                    be:18:c3:8b:76:dc:f2:91:f0:71:2c:36:2f:e7:37:
                    8f:11:1b:8a:76:90:9d:6e:c3:fa:3c:bf:de:45:67:
                    59:47:cb:f9:b9:33:5d:e7:08:f7:eb:a5:d2:f6:46:
                    41:92:4e:71:cf:4f:1b:43:54:11:a3:da:46:8e:24:
                    9a:ad:f1:73:90:c3:a1:bc:5d:17:3d:93:c7:f9:42:
                    4e:f0:d7:e5:0c:34:93:ee:af:0e:5d:72:66:f3:7b:
                    4c:d0:70:e9:ba:78:9f:0c:23:e5:4d:3c:9b:1e:5a:
                    08:55:7c:ee:a4:8a:c0:f3:f0:b5:ae:94:bb:c4:44:
                    fa:d9:9f:23:d9:5a:07:a7:50:04:a2:49:1f:69:7d:
                    d2:64:c8:2f:71:9a:da:0a:c0:b6:09:aa:ff:8f:33:
                    bc:65:15:78:f3:12:3a:a4:5d:50:d0:cf:c1:c1:1b:
                    50:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:02:62:D3:FB:97:97:1E:62:25:2A:CC:A0:F5:F7:3C:90:CB:DD:FC
            X509v3 Authority Key Identifier:
                keyid:A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131322e302f32322d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:5e:24:87:47:e2:95:9b:80:a2:1d:20:2d:7c:84:98:bf:3e:
         ba:c6:ad:2e:31:16:41:64:00:84:3d:a4:2c:5d:85:89:cf:ea:
         b3:f1:10:61:46:fb:94:12:21:08:88:6d:d7:69:6a:18:4b:a4:
         f7:82:23:70:72:05:51:42:f2:df:d4:36:97:47:12:7b:cf:9b:
         5a:b8:34:d4:28:f0:2c:81:f6:bd:0d:8e:08:af:09:24:10:33:
         bf:99:ed:ce:25:96:bc:39:f1:75:1c:7f:99:8f:a8:4f:47:2b:
         41:75:df:e3:79:be:f0:31:c4:ae:f7:cc:98:49:53:f1:d7:e6:
         2f:cb:dd:1a:6b:dc:31:ca:94:2b:40:e0:a6:03:e6:bc:54:fd:
         3b:fb:82:a6:b7:ad:d2:ae:b9:17:6d:c5:94:8b:ee:19:cf:30:
         ac:f1:ee:cf:d6:b0:09:15:de:38:5a:0d:43:78:ef:84:31:e8:
         5f:ac:38:e5:29:97:a6:ac:a5:4c:2f:07:d2:20:7b:39:0f:7c:
         0c:a1:99:b3:3e:d8:76:1c:0c:6a:25:94:2d:94:73:84:69:17:
         21:24:26:19:0b:e8:98:9d:73:b6:65:67:7f:2a:87:2b:cb:3a:
         2f:5c:41:98:be:60:90:a4:7a:18:d4:45:8e:1d:be:6b:d8:3e:
         1f:53:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:03:45 2025 by rpki-client