Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34342e302f32322d3332203d3e20323639303737.roa
File:                     34352e3137392e34342e302f32322d3332203d3e20323639303737.roa (raw, json)
Hash identifier:          yI952IxGcVkZnhY4JbeSZIN38f9VmtMj6uRsNFPWkvU=
Subject key identifier:   05:B6:0B:88:55:B4:EC:F4:C6:2A:B3:50:4D:3E:1A:4E:A2:C9:2B:77
Certificate issuer:       /CN=A513E0E6DF2D0D0083E23203D95E86F9C8D340DF
Certificate serial:       7B92093FD17EB6FFC5A723CC73464F8E625784F2
Authority key identifier: A5:13:E0:E6:DF:2D:0D:00:83:E2:32:03:D9:5E:86:F9:C8:D3:40:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34342e302f32322d3332203d3e20323639303737.roa
Signing time:             Wed 16 Jul 2025 17:06:24 +0000
ROA not before:           Wed 16 Jul 2025 17:01:24 +0000
ROA not after:            Wed 15 Jul 2026 17:06:24 +0000
asID:                     269077
IP address blocks:        45.179.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.crl
                          rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 11:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:92:09:3f:d1:7e:b6:ff:c5:a7:23:cc:73:46:4f:8e:62:57:84:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A513E0E6DF2D0D0083E23203D95E86F9C8D340DF
        Validity
            Not Before: Jul 16 17:01:24 2025 GMT
            Not After : Jul 15 17:06:24 2026 GMT
        Subject: CN=05B60B8855B4ECF4C62AB3504D3E1A4EA2C92B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1e:39:91:a1:70:c5:59:44:e2:12:26:4c:33:
                    de:95:9a:40:51:8d:d7:a3:c5:0a:77:97:e4:19:8f:
                    d8:6c:62:71:55:9d:2a:81:d6:d1:ec:b1:1b:3e:cf:
                    2f:20:43:22:42:71:29:c6:b8:c1:4b:fe:c3:85:fb:
                    1d:16:1c:0b:33:d1:5c:2b:0a:3d:f6:9b:04:d6:0a:
                    f3:52:95:2e:0a:fa:82:0a:aa:b1:91:d6:a7:69:b1:
                    2c:57:24:12:46:96:5c:c5:8c:e8:65:f1:ed:eb:95:
                    60:36:8e:67:b8:5b:4f:d4:d6:fc:ff:20:8f:52:c3:
                    c6:fb:9e:1e:0a:5f:c8:8d:58:37:a0:2a:9d:31:a5:
                    86:55:41:25:32:f1:9f:31:5d:4d:8f:3d:8e:f6:d7:
                    e3:a3:fe:94:df:4e:52:5c:09:25:4c:0b:e6:fb:d2:
                    8c:65:53:eb:25:81:81:0b:9f:8b:13:54:10:35:67:
                    09:ea:3c:68:d2:93:8e:9c:91:ad:92:a9:bf:00:b3:
                    30:9d:2d:93:ce:a3:11:d5:6f:58:0c:81:c1:c2:37:
                    7d:c5:7f:71:48:18:c1:35:47:c7:9e:c6:5c:67:15:
                    2e:19:c7:7e:0e:8d:95:b9:aa:b3:32:8a:64:2a:9b:
                    4b:69:5e:fc:f5:d8:10:a2:61:8b:9b:ab:06:ce:28:
                    81:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B6:0B:88:55:B4:EC:F4:C6:2A:B3:50:4D:3E:1A:4E:A2:C9:2B:77
            X509v3 Authority Key Identifier:
                keyid:A5:13:E0:E6:DF:2D:0D:00:83:E2:32:03:D9:5E:86:F9:C8:D3:40:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A513E0E6DF2D0D0083E23203D95E86F9C8D340DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34342e302f32322d3332203d3e20323639303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:3f:52:7b:98:07:e6:fa:45:4f:7f:11:b8:9e:3d:e6:24:7c:
         7c:6c:5f:35:20:6d:0c:28:7a:fc:96:45:93:81:82:d8:f3:8a:
         f6:9f:e6:e1:1c:61:ab:69:d7:05:33:b0:f3:42:cf:98:8d:b6:
         97:cb:87:7f:52:ea:33:3b:37:60:54:34:ff:1b:92:df:2f:65:
         19:db:ec:84:bc:7a:62:77:39:2b:14:d6:54:6c:1d:32:7f:5d:
         c3:66:44:66:f8:5c:86:a4:10:8c:df:74:72:d2:ba:7b:dd:eb:
         53:e7:1f:66:df:a8:63:d2:1e:53:bf:86:79:1d:ca:98:18:5f:
         05:03:85:eb:75:af:33:e1:93:c7:0e:34:a4:c5:6e:09:30:43:
         ac:dd:66:9e:e7:9d:08:4e:1b:b8:6f:0d:15:68:b3:7f:c3:ca:
         c5:73:b4:d5:b0:a4:5f:39:22:47:1f:51:64:66:c6:e7:0f:37:
         86:54:5e:15:77:54:88:89:06:8a:c8:20:a8:92:65:96:f5:cb:
         e8:a2:0c:b0:80:7f:4a:38:99:b6:e3:0b:bd:a2:6f:b8:08:0a:
         78:fe:ad:04:50:97:80:d9:92:00:ee:15:6e:28:1d:1c:5b:bf:
         62:77:d3:7f:76:53:45:50:fe:88:da:bd:6f:3e:09:4e:8d:95:
         c9:43:3a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:09:57 2025 by rpki-client