Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35352e302f32342d3234203d3e20323637393931.roa
File:                     34352e3136372e35352e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier:          mlYcEIglb3QFd/RM4I89Tcq+qlcHu58uupxbQEJrHJ4=
Subject key identifier:   24:0B:D0:EA:B3:A8:9B:F5:31:5E:5B:D8:4C:D3:F6:17:96:C5:52:DF
Certificate issuer:       /CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
Certificate serial:       73C4F75986A0395CAF84AEBAD446ABF280D4D16E
Authority key identifier: 18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35352e302f32342d3234203d3e20323637393931.roa
Signing time:             Tue 03 Jun 2025 16:01:48 +0000
ROA not before:           Tue 03 Jun 2025 15:56:48 +0000
ROA not after:            Tue 02 Jun 2026 16:01:48 +0000
asID:                     267991
IP address blocks:        45.167.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 21:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c4:f7:59:86:a0:39:5c:af:84:ae:ba:d4:46:ab:f2:80:d4:d1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
        Validity
            Not Before: Jun  3 15:56:48 2025 GMT
            Not After : Jun  2 16:01:48 2026 GMT
        Subject: CN=240BD0EAB3A89BF5315E5BD84CD3F61796C552DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:44:dc:53:d1:b4:fa:e4:49:39:fe:35:12:
                    fe:6a:96:b2:b3:9b:ed:42:30:1d:18:58:0f:12:f2:
                    41:f5:32:d1:62:1f:5d:bf:ef:f5:93:23:a6:ce:e1:
                    14:2f:89:47:64:ca:80:67:5c:ee:6e:17:e2:e1:1d:
                    bc:45:20:6a:bd:80:ed:c9:00:dd:6d:58:35:d7:63:
                    0c:d2:b0:65:bf:c6:52:a6:37:82:48:62:45:ed:4f:
                    c7:3d:c0:f3:dd:69:47:cd:e5:df:9c:99:cc:24:1a:
                    4f:68:04:52:a3:a5:11:0b:5d:cd:ab:70:44:79:02:
                    c2:bf:87:01:46:fd:12:7b:83:7d:a9:6c:d6:37:2f:
                    5d:a9:ba:91:08:72:5c:ba:12:e0:22:da:66:d3:14:
                    c8:9d:24:ed:22:54:a6:61:4b:5c:08:19:90:ff:9d:
                    a7:b7:a1:d3:de:b0:b4:d0:37:93:6b:30:cc:bf:71:
                    67:fd:17:40:3e:d1:71:40:46:c4:1e:ac:10:a5:f4:
                    20:a5:bd:72:62:87:98:15:7e:20:3d:50:4c:c0:b3:
                    09:f3:35:10:2c:31:40:3e:c7:b9:5c:4f:4d:81:5e:
                    55:b7:d6:48:35:80:e7:d0:4b:75:37:1b:bd:21:29:
                    8f:5a:2f:39:b2:3d:de:37:80:6a:d0:da:71:53:21:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0B:D0:EA:B3:A8:9B:F5:31:5E:5B:D8:4C:D3:F6:17:96:C5:52:DF
            X509v3 Authority Key Identifier:
                keyid:18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35352e302f32342d3234203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:4f:52:ad:f8:fc:dc:80:70:06:e9:5f:7f:19:74:1c:c7:
         55:71:a9:db:a1:b6:d6:6d:b0:b2:86:85:29:d9:eb:91:1d:85:
         8e:33:26:81:20:8b:90:b7:67:89:3a:cf:ef:02:d4:bf:b5:a4:
         ca:75:5b:a4:69:81:c6:44:fc:8e:4f:40:ca:84:17:7f:3c:32:
         de:fa:50:c4:44:ff:05:27:a0:fe:bd:60:75:bc:8d:a6:74:43:
         c2:b8:9f:f8:35:6b:bb:5f:08:75:21:b4:9c:c5:4a:69:00:66:
         d9:18:35:72:bb:85:ac:ed:5f:a7:08:0e:61:2d:8a:1b:be:02:
         8a:71:c9:8d:ab:28:7b:68:d5:01:b1:d3:07:9e:9b:1a:07:0c:
         bc:2e:63:41:5e:62:be:ae:01:e0:c0:f8:c5:ec:56:f2:65:ff:
         7e:ef:0b:87:98:1c:82:31:ec:12:e6:31:4f:47:47:c4:08:c3:
         83:37:40:55:da:35:90:36:c3:dd:06:e9:ab:b3:1f:66:f8:00:
         02:ad:6c:f1:04:80:b2:7c:b8:16:cb:03:e5:6d:47:48:2f:83:
         39:c0:43:de:54:0c:91:38:07:ef:44:02:8c:af:19:bf:d3:08:
         c6:14:62:70:7a:fc:f9:44:66:e5:3f:6e:7d:74:b9:3f:22:ea:
         d4:b0:ae:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:00:24 2025 by rpki-client