Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36312e302f32342d3234203d3e20323639313730.roa
File:                     34352e3138312e36312e302f32342d3234203d3e20323639313730.roa (raw, json)
Hash identifier:          q8k6xA83euUkXs0Ca2bmdbe639/0DbngXdXv9QgLr8s=
Subject key identifier:   2E:F0:6D:85:9D:CD:4F:25:91:0C:38:12:FF:4B:EC:0E:BB:DC:AE:A2
Certificate issuer:       /CN=3D580FBC905909266C331DDA6416C18006A24750
Certificate serial:       704B6A47352572BEF31307997BDA9DD61FAA9C1F
Authority key identifier: 3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36312e302f32342d3234203d3e20323639313730.roa
Signing time:             Tue 02 Sep 2025 17:28:14 +0000
ROA not before:           Tue 02 Sep 2025 17:23:14 +0000
ROA not after:            Tue 01 Sep 2026 17:28:14 +0000
asID:                     269170
IP address blocks:        45.181.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl
                          rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4b:6a:47:35:25:72:be:f3:13:07:99:7b:da:9d:d6:1f:aa:9c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D580FBC905909266C331DDA6416C18006A24750
        Validity
            Not Before: Sep  2 17:23:14 2025 GMT
            Not After : Sep  1 17:28:14 2026 GMT
        Subject: CN=2EF06D859DCD4F25910C3812FF4BEC0EBBDCAEA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fa:da:48:d4:73:dc:23:91:22:6b:1b:74:5d:
                    3b:74:6a:b8:55:c1:3c:5c:5d:b5:14:af:1a:c8:ab:
                    66:3c:ee:4d:bf:88:46:15:2c:a2:d8:e6:87:8f:04:
                    d0:87:0b:57:3c:d3:4e:77:fb:99:78:bf:66:2c:ab:
                    db:7e:0c:aa:81:7a:c0:04:ee:96:8d:ef:9e:12:ab:
                    ff:a1:d0:72:60:65:32:8c:d9:fc:84:b4:75:ae:ab:
                    94:27:04:59:52:9d:e1:27:0c:3c:ca:43:21:40:2a:
                    32:3c:e4:f8:e0:d9:2b:57:3d:81:05:bf:a3:f1:f2:
                    cd:43:89:54:24:a6:83:b7:10:e4:11:18:95:6b:6b:
                    75:f5:48:1d:0e:b2:fe:7f:8b:f1:4d:67:20:90:44:
                    9f:68:09:a6:bd:f5:ee:f6:0b:af:c7:50:14:ce:d0:
                    bc:b5:c2:a4:17:48:86:f5:d2:ed:58:59:7a:cc:50:
                    22:44:72:61:c8:47:f3:75:ab:ba:94:63:b0:b1:7c:
                    2b:41:c7:a3:74:cf:9b:64:9d:e3:ce:0a:2b:b6:b6:
                    04:2e:24:2e:4c:ba:95:c6:df:b8:a6:bd:a4:bc:8f:
                    ca:57:20:41:c3:57:d1:c9:cf:6c:f5:40:2e:08:73:
                    c0:65:69:d1:4f:2f:0e:5f:37:d7:4c:c4:83:13:3f:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F0:6D:85:9D:CD:4F:25:91:0C:38:12:FF:4B:EC:0E:BB:DC:AE:A2
            X509v3 Authority Key Identifier:
                keyid:3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36312e302f32342d3234203d3e20323639313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:8f:bf:eb:07:ea:fa:2b:49:ff:10:cf:88:07:86:7c:9d:
         02:49:cc:18:79:ad:34:a4:48:34:08:34:99:3f:1a:38:56:5b:
         79:98:d2:41:b0:da:8a:6e:dc:b7:cf:4c:e2:42:f5:49:6e:43:
         27:f1:62:4d:96:50:11:95:02:c7:fa:20:ce:35:e9:c4:f7:19:
         73:20:97:63:b8:27:14:7f:8d:a7:ae:c2:d6:a5:27:6d:20:01:
         ce:5f:5d:de:fa:b1:33:46:0b:6f:ae:09:3e:ba:f6:a4:f9:94:
         69:f3:3d:6a:6a:01:fa:de:20:36:ba:85:d5:ac:f1:be:a9:98:
         b1:0e:46:fa:45:61:e5:43:9e:82:dd:ee:48:91:05:9e:f6:12:
         8e:8c:8a:0e:e2:9f:9f:36:89:80:4b:d4:69:f8:f6:ae:31:14:
         87:f0:15:c2:29:d0:d3:e2:74:b5:a6:06:e4:ad:b4:40:d1:63:
         78:47:78:af:22:03:cb:28:15:5f:42:ab:01:cc:e9:39:36:25:
         e5:59:ee:b7:b8:5d:ba:ea:7c:f9:33:4f:02:a0:3f:49:c5:80:
         c8:4f:71:7e:06:e1:09:ec:ea:f7:26:c9:89:cb:3a:e0:1e:05:
         9c:13:3b:a2:15:3b:f1:53:81:3f:5f:b4:76:07:2d:96:ba:17:
         96:76:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:19:07 2025 by rpki-client