Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/34352e3136302e31362e302f32322d3332203d3e20323638343032.roa
File:                     34352e3136302e31362e302f32322d3332203d3e20323638343032.roa (raw, json)
Hash identifier:          2U8AxXnKDtQRZI1E7ExhC+Kim7BgGctgX38CQ7DgBqE=
Subject key identifier:   79:5D:28:89:76:A1:F8:78:4F:90:09:A0:FB:2B:34:16:BF:97:67:2B
Certificate issuer:       /CN=0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2
Certificate serial:       1D76A71E623BAB97F2805F959B55C05ADDEA899F
Authority key identifier: 0A:DD:4E:F7:2A:DF:2C:FB:B0:0E:C3:44:4E:AB:D9:79:E9:5D:F8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/34352e3136302e31362e302f32322d3332203d3e20323638343032.roa
Signing time:             Thu 12 Jun 2025 18:14:29 +0000
ROA not before:           Thu 12 Jun 2025 18:09:29 +0000
ROA not after:            Thu 11 Jun 2026 18:14:29 +0000
asID:                     268402
IP address blocks:        45.160.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.crl
                          rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 00:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:76:a7:1e:62:3b:ab:97:f2:80:5f:95:9b:55:c0:5a:dd:ea:89:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2
        Validity
            Not Before: Jun 12 18:09:29 2025 GMT
            Not After : Jun 11 18:14:29 2026 GMT
        Subject: CN=795D288976A1F8784F9009A0FB2B3416BF97672B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:1a:1f:e0:b9:9c:16:1a:75:94:25:7e:fe:
                    d9:e0:44:c8:07:65:c5:2a:69:ec:07:79:81:4a:6f:
                    33:c9:0d:44:76:2f:b7:6a:f0:8a:6a:35:a7:ae:4a:
                    eb:71:4a:7e:20:66:32:18:38:cf:2f:64:12:f1:c1:
                    1c:f6:87:90:45:69:cf:0b:4d:07:ac:05:63:26:8c:
                    cb:c0:f6:a8:f5:95:bb:06:65:06:0b:72:00:a4:ca:
                    a5:13:df:d5:48:b9:b7:e2:ed:7d:55:00:e8:f9:83:
                    ab:9d:3a:3a:2f:9b:ca:de:4e:b8:ab:dc:a4:3b:f3:
                    0a:30:f1:2b:6c:b2:36:39:92:2f:e0:c6:87:a9:20:
                    ea:40:ed:38:2e:b5:5f:16:bf:3d:ba:02:98:37:32:
                    bb:20:94:ba:90:6c:6a:2f:fb:8a:69:42:a0:66:2a:
                    be:c7:86:c4:3b:db:82:1c:6a:ac:ea:7f:0b:76:2b:
                    15:5a:51:da:55:10:10:fc:8c:ac:9a:0c:2c:88:e8:
                    fa:4a:97:3d:c4:9d:78:ef:b9:4b:ed:da:ed:59:07:
                    5d:7e:ce:9b:02:ff:76:fa:6c:a8:90:73:d2:55:bb:
                    a1:6b:3a:b4:bb:4f:3c:bb:7b:d5:32:7a:91:80:98:
                    e3:2c:38:5d:c7:13:65:ef:b9:3d:1b:a9:23:e7:65:
                    c8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5D:28:89:76:A1:F8:78:4F:90:09:A0:FB:2B:34:16:BF:97:67:2B
            X509v3 Authority Key Identifier:
                keyid:0A:DD:4E:F7:2A:DF:2C:FB:B0:0E:C3:44:4E:AB:D9:79:E9:5D:F8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/34352e3136302e31362e302f32322d3332203d3e20323638343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:ba:1e:e6:e5:20:6b:18:8c:ee:5e:14:3f:0b:ca:67:a3:f9:
         8a:2f:a6:19:26:d1:44:8f:8a:eb:b0:18:de:04:5c:c3:b3:1f:
         82:c7:9e:ba:d9:76:73:08:7e:69:e5:d2:c2:8a:d1:40:5b:4b:
         a8:48:39:7e:a7:e6:b7:5a:2c:55:61:d3:d6:55:f2:6d:f7:8a:
         e5:1e:b6:45:3e:63:ae:e3:36:ae:cf:46:6e:17:68:f1:dc:d2:
         8a:29:6f:3a:a1:6d:96:a7:fc:72:39:d1:14:f5:ca:43:93:76:
         b4:83:8a:c8:46:65:cc:be:41:ea:99:76:56:cb:87:fa:97:89:
         97:3d:04:90:3f:4a:17:e5:1d:91:52:f2:87:60:9f:4b:e5:18:
         29:da:36:d9:27:be:7b:69:1f:c3:9f:98:c3:52:4b:f3:c4:93:
         12:4e:af:88:76:fe:36:65:c4:55:64:5b:c7:9a:e2:90:4f:e6:
         65:23:3f:9e:5f:92:8b:41:41:a1:b1:92:5a:11:b4:e4:b4:92:
         ca:a9:4c:5b:83:33:2c:91:e1:7e:05:a4:a0:f8:17:56:30:e1:
         82:3d:ad:8f:b8:f6:02:89:04:f7:52:93:d8:3d:03:e7:1f:92:
         4d:3f:25:3e:fe:76:0e:27:92:59:09:fc:1c:c6:24:e9:35:54:
         a2:d5:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:32:26 2025 by rpki-client