Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/34352e362e3234312e302f32342d3234203d3e20323634333836.roa
File:                     34352e362e3234312e302f32342d3234203d3e20323634333836.roa (raw, json)
Hash identifier:          WHSbq0/+FZFnkOmGhfmYLcPGIMlX1Meoxz9qVJFO1Os=
Subject key identifier:   E1:56:39:28:BA:FA:58:D8:69:74:B0:D3:59:3D:ED:74:9A:6A:F1:CD
Certificate issuer:       /CN=CC038C42F33B3D558931769A27D97E3412751117
Certificate serial:       0EBB96A476333D6DDB8B6930397F96AB734EA7E9
Authority key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/34352e362e3234312e302f32342d3234203d3e20323634333836.roa
Signing time:             Wed 09 Jul 2025 15:52:47 +0000
ROA not before:           Wed 09 Jul 2025 15:47:47 +0000
ROA not after:            Wed 08 Jul 2026 15:52:47 +0000
asID:                     264386
IP address blocks:        45.6.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 08:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bb:96:a4:76:33:3d:6d:db:8b:69:30:39:7f:96:ab:73:4e:a7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC038C42F33B3D558931769A27D97E3412751117
        Validity
            Not Before: Jul  9 15:47:47 2025 GMT
            Not After : Jul  8 15:52:47 2026 GMT
        Subject: CN=E1563928BAFA58D86974B0D3593DED749A6AF1CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:08:f6:e5:38:94:2a:dc:9b:8e:70:34:09:
                    ab:9a:85:e7:05:e1:f9:0c:7f:61:d7:56:fd:17:92:
                    c2:dd:94:95:ce:e0:e1:aa:cf:d0:00:c9:66:3e:4f:
                    2d:25:14:e0:56:a5:20:a8:cc:16:b4:a0:61:b3:0a:
                    86:0c:59:4c:e8:28:fe:ea:38:d7:94:37:ac:6c:27:
                    f7:d8:b8:1d:a8:8e:bf:36:9e:f7:ec:46:14:a7:f6:
                    03:cc:41:72:c6:91:df:36:8c:3e:8a:be:d0:9a:38:
                    b4:17:7a:0c:60:9e:9e:b5:dd:0b:74:a7:e0:1a:6a:
                    34:7b:7c:6b:03:c5:31:a7:4e:1c:fe:5a:c6:69:aa:
                    bb:4d:f9:8e:8a:d0:ab:1b:15:9b:ee:63:50:6d:b9:
                    f7:bb:5a:66:5f:73:4c:8d:43:6d:7e:7b:89:46:e4:
                    8f:a9:11:27:f8:69:2b:0e:17:73:72:40:19:63:24:
                    9e:4b:f1:7f:8f:ef:f6:54:c8:03:7e:2c:21:91:44:
                    8f:d1:99:ca:c6:09:e1:ea:2d:fb:62:8d:b0:4c:a7:
                    2c:bf:37:c1:d0:8e:5f:f6:49:93:73:6d:81:7f:15:
                    57:cc:d2:ad:34:74:5d:39:04:b6:5a:c5:83:d7:1d:
                    0f:6f:b6:ae:35:dd:6e:d3:c0:9b:1b:ff:90:07:7a:
                    3a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:56:39:28:BA:FA:58:D8:69:74:B0:D3:59:3D:ED:74:9A:6A:F1:CD
            X509v3 Authority Key Identifier:
                keyid:CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/34352e362e3234312e302f32342d3234203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:d6:fe:50:47:a1:b9:0c:a9:1f:cc:6c:09:a4:48:cb:08:d3:
         ad:98:d4:00:0d:da:7a:f3:85:a7:44:2f:74:bd:11:64:a3:0f:
         d7:69:42:54:2d:50:28:f5:b3:6b:c0:e7:31:1d:8d:07:00:50:
         af:86:5a:f0:5f:b9:0b:99:c1:86:7b:24:d5:30:5f:e6:1e:37:
         85:bd:ba:00:06:47:9d:75:5c:13:88:60:d5:0c:af:12:a0:67:
         51:c5:4d:f4:f5:7e:9d:37:1f:d3:c8:31:0c:f2:28:0a:b1:ca:
         ee:4a:41:cb:e7:aa:77:19:f4:de:e2:16:aa:e8:30:bb:8b:3c:
         e2:c3:83:a5:90:1e:6f:03:2e:d7:2a:e3:69:3e:bf:48:37:21:
         bd:e8:6e:cb:08:6c:2c:73:fd:0d:58:38:20:e0:9b:f7:bd:b5:
         a4:94:02:5c:7f:39:d7:ba:4a:90:6b:f2:c9:6d:dc:34:26:43:
         c4:9e:83:72:2b:b9:b3:e9:83:e1:5b:ba:dd:a2:4b:34:3d:84:
         9f:3c:4a:cb:12:4c:c9:7c:01:61:8b:ae:cc:86:34:60:a8:ab:
         90:97:ef:34:df:61:64:66:6c:e9:8d:f3:cd:0b:db:d4:e7:0d:
         6c:15:33:9b:9f:4d:aa:68:60:5e:f4:27:bc:88:df:a9:aa:f7:
         d8:05:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:15:52 2025 by rpki-client