Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa
File:                     34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa (raw, json)
Hash identifier:          TEneWmx+zgxAmv5+fMyXV+yZzdbd14y+SvCG6xPUhS8=
Subject key identifier:   9A:6B:37:A4:CB:88:1C:3C:52:C5:25:D3:3A:6B:BB:A4:76:42:87:2A
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       399FE574AF19A3CD003526D380BD5CB83F550B76
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa
Signing time:             Sun 20 Jul 2025 12:18:40 +0000
ROA not before:           Sun 20 Jul 2025 12:13:40 +0000
ROA not after:            Sun 19 Jul 2026 12:18:40 +0000
asID:                     268134
IP address blocks:        45.169.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 16:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9f:e5:74:af:19:a3:cd:00:35:26:d3:80:bd:5c:b8:3f:55:0b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Jul 20 12:13:40 2025 GMT
            Not After : Jul 19 12:18:40 2026 GMT
        Subject: CN=9A6B37A4CB881C3C52C525D33A6BBBA47642872A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0d:8e:ba:ee:99:7e:28:bf:aa:90:91:1d:56:
                    e4:5d:dc:50:e2:a8:5c:05:09:c7:4d:8e:97:50:c5:
                    a9:42:5e:cd:58:2c:ae:9f:0a:e4:a1:ed:8c:cc:1a:
                    a4:58:37:ed:09:d2:a0:2e:90:9e:53:d7:d1:0f:c2:
                    23:80:07:9b:0c:86:03:70:37:ea:6b:ec:46:22:98:
                    09:b2:46:ea:67:db:af:04:82:fa:f7:4e:50:ab:03:
                    5e:a4:49:16:83:97:4e:6b:22:03:01:e1:f4:69:1a:
                    a4:c4:8b:5d:36:75:51:f2:45:7f:c9:1f:79:75:d0:
                    7c:f2:48:1a:d1:02:ae:14:71:25:2b:b2:47:ef:eb:
                    d5:29:5b:f5:aa:9f:57:ad:3f:8f:9d:46:1c:e1:b3:
                    3c:b2:4e:80:b5:4d:95:ea:1f:16:d7:5b:2c:b1:6f:
                    c4:16:0f:a6:58:ad:6e:dc:7f:06:c8:48:24:c5:e2:
                    de:13:d8:14:90:67:b8:be:fa:c2:c7:3d:09:60:cd:
                    f6:4a:43:a6:28:f6:c6:8e:cd:1c:38:83:f2:83:d6:
                    af:8f:ca:b7:e0:0e:3c:db:23:e7:20:8a:f2:0a:58:
                    11:99:f8:01:ab:b0:8b:6a:a0:28:5b:30:cf:ba:65:
                    fc:44:98:1d:76:04:5a:31:96:58:df:7f:aa:5d:d9:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6B:37:A4:CB:88:1C:3C:52:C5:25:D3:3A:6B:BB:A4:76:42:87:2A
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:8d:12:19:b2:4f:21:17:65:5a:c0:6c:54:4a:09:f8:dc:85:
         83:1c:0a:66:d8:be:e3:37:2d:93:f1:dc:aa:64:37:80:39:ef:
         64:40:b0:7a:2b:9d:d5:cf:34:a2:ea:29:8c:b4:5b:d2:46:40:
         d9:2f:65:d5:6b:c4:fd:10:27:b7:58:c3:bf:c4:23:fb:0b:33:
         48:e8:99:51:49:e1:a6:b2:c5:d6:11:9b:78:62:9f:e3:8b:b5:
         66:c3:49:c7:f2:ca:ac:2e:4e:8b:bc:77:c2:06:18:9a:ba:1d:
         46:90:0d:5f:b7:8d:08:7a:71:18:bd:33:ea:33:f5:34:42:02:
         b4:b1:e6:1c:fb:4e:d2:c6:1e:e4:eb:33:a5:fa:74:95:b1:28:
         4f:51:54:be:4b:d4:95:89:d4:bd:0c:cb:40:22:00:e7:0b:18:
         40:b8:21:84:51:00:9c:f0:b9:08:07:87:a9:1b:31:da:c7:eb:
         25:de:ef:0c:8b:11:9b:8d:bc:e1:f4:02:d4:38:1f:58:54:a9:
         3b:f4:9c:69:2b:c0:7c:be:58:82:70:89:2d:1f:e7:26:a6:f3:
         7c:a8:a4:ab:28:36:44:ef:08:c1:1e:d2:d5:f7:2c:bd:30:c0:
         63:82:1d:53:87:93:2f:a7:41:fb:f3:95:04:04:66:de:96:2d:
         d6:da:15:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:04:52 2025 by rpki-client