Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137302e302f32342d3234203d3e20323638333431.roa
File:                     34352e3233382e3137302e302f32342d3234203d3e20323638333431.roa (raw, json)
Hash identifier:          +v0Qc0VCc7sQb4EHuoG1xDXMuGFZPNWF0EOf2ATK5Bg=
Subject key identifier:   7C:D5:BB:03:72:CC:E5:79:8B:D5:C9:AB:1E:D2:9A:A1:2E:58:2A:E7
Certificate issuer:       /CN=7A156DCDCD0ACF159FE4705A579B3F0277F6DD64
Certificate serial:       2F9609D0F929162A2B9082FFFCD2FF7FC1168D47
Authority key identifier: 7A:15:6D:CD:CD:0A:CF:15:9F:E4:70:5A:57:9B:3F:02:77:F6:DD:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137302e302f32342d3234203d3e20323638333431.roa
Signing time:             Thu 07 Aug 2025 12:48:52 +0000
ROA not before:           Thu 07 Aug 2025 12:43:52 +0000
ROA not after:            Thu 06 Aug 2026 12:48:52 +0000
asID:                     268341
IP address blocks:        45.238.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.crl
                          rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 07:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:96:09:d0:f9:29:16:2a:2b:90:82:ff:fc:d2:ff:7f:c1:16:8d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A156DCDCD0ACF159FE4705A579B3F0277F6DD64
        Validity
            Not Before: Aug  7 12:43:52 2025 GMT
            Not After : Aug  6 12:48:52 2026 GMT
        Subject: CN=7CD5BB0372CCE5798BD5C9AB1ED29AA12E582AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:03:af:49:df:d5:7d:f9:e2:8f:a0:46:1b:
                    8b:5b:5d:1d:83:e4:47:46:5a:d5:53:e1:75:7a:10:
                    10:b4:06:d2:34:3f:d0:78:0c:1c:73:b3:0c:c5:81:
                    78:69:e0:c1:18:67:fa:57:9e:de:2a:84:84:ef:09:
                    5c:e8:34:b7:8f:d0:52:db:2b:3f:67:cb:60:7a:4d:
                    e3:37:c8:c7:02:ec:e3:81:db:d7:f2:f1:7e:02:33:
                    e3:3b:db:96:2b:26:ee:e5:27:cd:f9:78:78:0d:3b:
                    14:e8:2d:37:f7:cc:dc:16:db:ff:3b:4a:a4:fc:9b:
                    05:da:49:fb:38:af:3f:c0:fb:65:cb:6a:c0:17:6f:
                    90:10:89:67:75:b2:af:27:c8:c8:a1:e8:81:59:60:
                    eb:fc:d1:c1:98:32:a0:c7:f3:27:99:d5:25:0a:db:
                    46:0f:0a:34:94:3a:c8:9e:34:76:7a:aa:42:3e:20:
                    f8:8c:5c:f0:5d:67:98:d9:5f:21:e7:c5:23:8f:5b:
                    a3:51:99:55:ec:ae:8e:6b:4c:b0:75:4a:27:99:1a:
                    00:e0:06:67:bd:1d:33:f6:93:90:43:6f:38:ab:95:
                    48:84:21:79:b4:93:2a:32:4e:f7:99:07:06:69:05:
                    6b:67:ac:1b:69:29:96:82:07:64:5d:4b:dd:75:c5:
                    3f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D5:BB:03:72:CC:E5:79:8B:D5:C9:AB:1E:D2:9A:A1:2E:58:2A:E7
            X509v3 Authority Key Identifier:
                keyid:7A:15:6D:CD:CD:0A:CF:15:9F:E4:70:5A:57:9B:3F:02:77:F6:DD:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137302e302f32342d3234203d3e20323638333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:69:e2:23:62:d2:d0:19:b9:2f:66:78:15:aa:1b:6c:2c:90:
         90:4f:0d:52:19:05:12:9e:c7:04:03:ee:2f:c6:e0:9d:60:d6:
         fc:2b:28:37:dc:72:05:df:b1:ea:6e:e5:04:cf:89:b7:57:a2:
         2b:93:58:64:3d:18:92:bf:e4:6b:1e:57:46:94:b9:73:f7:06:
         02:b4:98:39:1f:91:1c:61:54:a2:29:af:3d:79:c7:6a:fc:49:
         6f:53:27:4e:91:d4:d1:56:3b:4d:46:cf:f6:8d:df:4e:13:d1:
         72:13:11:f8:ec:47:40:44:33:a1:d4:84:a6:6d:a4:b8:74:c1:
         e0:99:22:13:28:88:4c:e3:26:9b:e2:d0:f0:4e:76:72:4b:a6:
         9b:20:6a:7a:ca:29:3e:bc:5c:39:3f:b8:2e:52:54:e6:a5:fa:
         66:61:4c:a4:88:c1:3e:e5:9c:6c:3b:bf:50:6f:14:bc:e7:e4:
         fb:cc:85:af:2f:5e:e5:d6:ea:81:28:bf:b0:3a:bb:c8:ef:d8:
         92:95:c9:97:29:2d:8d:38:d9:5f:05:66:b1:86:d6:8b:70:4c:
         d8:61:83:f3:d7:3c:d2:24:30:e2:aa:75:d2:81:0c:0c:6e:b6:
         84:f6:8c:00:46:88:cf:48:cd:48:d8:2c:bb:40:b3:53:be:fb:
         40:ec:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:55:00 2025 by rpki-client