Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/34352e3137372e3232302e302f32332d3332203d3e20323639303439.roa
File:                     34352e3137372e3232302e302f32332d3332203d3e20323639303439.roa (raw, json)
Hash identifier:          9KWVeWSMdf42KrXXh5zUBE1+n/qURbhAp1MKhhfCItw=
Subject key identifier:   31:64:5C:C3:08:6A:C8:5D:5B:6A:6E:62:DC:00:ED:27:96:B5:FE:82
Certificate issuer:       /CN=258ECE436F837048C74260D70C5C4816AE1FC553
Certificate serial:       392BD4423604D5A8F49F483F8455B6B364FCE445
Authority key identifier: 25:8E:CE:43:6F:83:70:48:C7:42:60:D7:0C:5C:48:16:AE:1F:C5:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258ECE436F837048C74260D70C5C4816AE1FC553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/34352e3137372e3232302e302f32332d3332203d3e20323639303439.roa
Signing time:             Thu 14 Aug 2025 21:09:25 +0000
ROA not before:           Thu 14 Aug 2025 21:04:25 +0000
ROA not after:            Thu 13 Aug 2026 21:09:25 +0000
asID:                     269049
IP address blocks:        45.177.220.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/258ECE436F837048C74260D70C5C4816AE1FC553.crl
                          rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/258ECE436F837048C74260D70C5C4816AE1FC553.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258ECE436F837048C74260D70C5C4816AE1FC553.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Aug 2025 02:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2b:d4:42:36:04:d5:a8:f4:9f:48:3f:84:55:b6:b3:64:fc:e4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258ECE436F837048C74260D70C5C4816AE1FC553
        Validity
            Not Before: Aug 14 21:04:25 2025 GMT
            Not After : Aug 13 21:09:25 2026 GMT
        Subject: CN=31645CC3086AC85D5B6A6E62DC00ED2796B5FE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:f9:2c:79:b0:e6:92:0d:c1:41:0c:76:2f:
                    e1:49:1f:63:40:05:b2:19:d0:08:b5:ff:6e:b6:07:
                    24:90:09:80:ca:74:34:83:6e:bc:c0:ce:2e:72:c3:
                    30:e2:78:76:59:d0:36:95:38:1b:d6:eb:52:ac:b9:
                    a1:8e:88:09:e9:8d:1a:7f:08:55:e8:07:c4:6d:d7:
                    41:5a:53:97:3e:23:3d:3a:99:5e:bf:4c:57:13:0f:
                    ca:b4:f2:ba:50:e7:4d:e1:cb:31:0c:e3:81:82:49:
                    50:9a:49:e3:a0:0e:ca:3c:7a:78:74:85:7e:30:3b:
                    cb:88:bc:45:53:90:af:e2:d3:8e:ab:8b:f7:59:4c:
                    c9:2f:38:6f:7a:15:b8:93:71:48:03:ec:68:ca:d1:
                    39:4f:0d:58:07:14:f2:3e:d3:90:2e:e1:5e:11:40:
                    f4:79:10:f1:3d:3e:f4:68:09:cc:ad:75:19:5d:03:
                    a1:61:2f:08:b6:cb:87:09:83:10:66:40:d0:87:92:
                    2d:50:65:1b:82:d0:17:01:f5:b8:b0:f9:f2:15:3e:
                    27:fc:44:a9:88:5a:ec:30:3f:77:cf:7e:08:23:cb:
                    eb:d1:77:e3:b0:e7:21:49:e0:1b:2f:36:b4:0b:bc:
                    89:8e:7d:cc:8f:05:5c:33:76:b2:8f:2e:01:05:03:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:64:5C:C3:08:6A:C8:5D:5B:6A:6E:62:DC:00:ED:27:96:B5:FE:82
            X509v3 Authority Key Identifier:
                keyid:25:8E:CE:43:6F:83:70:48:C7:42:60:D7:0C:5C:48:16:AE:1F:C5:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/258ECE436F837048C74260D70C5C4816AE1FC553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258ECE436F837048C74260D70C5C4816AE1FC553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/34352e3137372e3232302e302f32332d3332203d3e20323639303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:e1:1b:6d:43:b1:81:e4:89:9e:8d:3c:6e:92:19:de:ad:01:
         78:89:26:08:3b:3f:75:14:ad:06:75:55:02:75:8c:f4:39:ca:
         5e:d2:14:db:6e:d6:73:e6:c7:80:dc:d1:c5:70:6f:a7:57:f4:
         ee:4b:70:5c:34:34:be:0e:25:f1:d0:67:a4:cc:6a:73:67:c7:
         95:22:a1:17:ef:a2:b7:bf:20:ad:8b:55:6a:4b:80:61:8c:48:
         9e:d6:05:e0:6b:fc:d3:a2:8c:94:a3:33:38:1f:bc:7b:8f:58:
         0d:90:8a:d4:b5:3e:ee:71:ce:7d:15:20:9a:ec:bd:7d:9d:f6:
         68:f8:f9:93:eb:42:28:d2:09:58:2e:f7:3b:bc:c8:4d:7d:cb:
         1c:ad:d3:31:e8:25:7b:db:b6:f9:75:3f:7b:3d:f0:1e:b7:26:
         f8:aa:c2:4a:37:ee:ad:6d:5a:a4:34:04:b7:1a:7d:e6:b9:57:
         4b:35:4b:3f:53:ef:40:fd:44:0d:63:ff:4b:5a:8a:21:fc:05:
         90:07:11:da:19:a0:8c:42:2d:79:5c:3f:07:4e:a7:26:2e:9c:
         2e:ca:56:b4:1a:5a:94:03:f4:76:60:a1:0e:74:da:25:fa:a6:
         63:33:98:dd:a5:97:c5:33:f7:51:d1:49:2c:25:cf:72:3d:c5:
         f5:33:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:59:07 2025 by rpki-client