Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/34352e3138302e35362e302f32322d3332203d3e20323639313331.roa
File:                     34352e3138302e35362e302f32322d3332203d3e20323639313331.roa (raw, json)
Hash identifier:          If21jOcvMUFkh16cxpcGthCoNkKvfyC5oUDpgsyZRvQ=
Subject key identifier:   43:0B:35:CB:FD:A6:B0:55:15:00:6E:54:60:E1:AB:FE:CE:D5:25:94
Certificate issuer:       /CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520
Certificate serial:       619DF7B723F20B83610F52F3D85B0E7EF104C422
Authority key identifier: 29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/34352e3138302e35362e302f32322d3332203d3e20323639313331.roa
Signing time:             Thu 06 Mar 2025 01:01:24 +0000
ROA not before:           Thu 06 Mar 2025 00:56:24 +0000
ROA not after:            Thu 05 Mar 2026 01:01:24 +0000
asID:                     269131
IP address blocks:        45.180.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl
                          rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 22:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9d:f7:b7:23:f2:0b:83:61:0f:52:f3:d8:5b:0e:7e:f1:04:c4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520
        Validity
            Not Before: Mar  6 00:56:24 2025 GMT
            Not After : Mar  5 01:01:24 2026 GMT
        Subject: CN=430B35CBFDA6B05515006E5460E1ABFECED52594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:38:8b:e4:34:47:bd:ce:f5:37:aa:f7:b6:
                    41:05:7c:5c:b6:bd:73:55:24:8d:ef:df:1a:2e:65:
                    2e:42:1b:84:e2:ff:86:1c:ba:31:76:2c:8f:6e:5a:
                    6a:60:5e:7d:de:ee:27:78:1f:bc:86:8c:b1:6c:18:
                    e1:f4:19:82:d0:a9:3f:8a:08:f4:43:0d:5a:5a:7a:
                    6b:fe:99:94:70:3b:40:b5:5a:39:d0:fe:44:91:69:
                    a4:5c:0a:ec:8b:b0:d5:fd:0e:15:2e:1b:f9:a8:21:
                    18:59:78:1c:be:45:e6:d4:4c:34:80:15:1d:24:bc:
                    2b:30:d7:69:52:12:76:dc:96:25:9b:8b:75:3b:87:
                    a9:81:a0:81:31:bd:71:2c:47:6e:cd:6e:a2:1f:31:
                    8a:93:54:e5:c6:8f:e5:40:25:a2:f7:b3:ec:31:83:
                    22:22:4b:60:fe:74:9f:83:34:97:d0:f6:4b:e5:39:
                    a0:0a:4c:2a:56:41:35:9b:74:04:57:56:73:3b:db:
                    d1:a1:de:2e:b2:82:cb:96:4d:9e:49:6e:a4:db:13:
                    33:f4:6b:64:59:97:cd:e1:58:1f:1c:b3:d9:56:a2:
                    8f:19:3c:cf:aa:ee:e9:5c:37:fe:2a:70:59:26:5c:
                    99:a4:a0:2d:0a:d7:c6:b0:a4:c0:ce:5a:45:5d:6a:
                    1c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0B:35:CB:FD:A6:B0:55:15:00:6E:54:60:E1:AB:FE:CE:D5:25:94
            X509v3 Authority Key Identifier:
                keyid:29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/34352e3138302e35362e302f32322d3332203d3e20323639313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:7a:85:3f:99:5d:ea:7e:1a:2e:73:a0:d3:f2:ca:c1:10:f2:
         67:17:53:03:e0:1f:a3:88:4d:c4:59:91:1c:59:79:1d:ab:e4:
         ea:be:fd:a1:c1:c0:6a:ad:63:73:08:d9:17:e9:33:23:de:06:
         46:43:a6:de:03:44:d8:6d:16:73:66:f8:6d:a3:fc:9d:7d:0f:
         40:a6:38:3a:61:58:14:4c:c4:27:03:0e:85:2c:22:0d:c0:dc:
         b0:d0:2a:c7:16:90:26:7a:39:0e:f0:2e:85:12:61:c5:d0:98:
         b6:cd:b0:0a:73:43:98:8d:3a:8d:e0:6c:b2:d6:8e:20:32:82:
         28:13:14:24:65:e8:bf:84:f3:76:84:06:c6:eb:e1:1a:cf:2c:
         9e:55:f5:4d:d7:39:09:39:fa:e7:97:ef:69:3a:fa:33:72:df:
         7f:da:17:06:5e:d1:39:cf:e3:f9:4a:99:90:94:3e:87:09:f0:
         d9:27:09:a0:1b:c0:91:ab:17:10:a4:ea:bb:e2:3e:9d:56:dc:
         fb:b0:b9:20:7a:2f:ac:56:0e:c9:ea:28:de:de:d2:51:db:0e:
         a7:7e:cf:16:f2:cb:26:f2:74:9d:af:5d:47:c2:a3:5f:b0:45:
         a2:22:f3:7b:dd:4f:32:46:6c:12:f5:24:64:c3:4b:be:4e:a3:
         4d:aa:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 21:34:48 2025 by rpki-client