Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232332e302f32342d3234203d3e20323638383239.roa
File:                     34352e3137332e3232332e302f32342d3234203d3e20323638383239.roa (raw, json)
Hash identifier:          WzJEePi6Y8OyeOgvGuhLXNSGu/G+pW5uedjFLyE105I=
Subject key identifier:   B9:17:D9:FE:86:18:F8:50:CD:3F:DC:84:D5:71:E2:C5:2A:AA:C1:F7
Certificate issuer:       /CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
Certificate serial:       49C9FA49E7C620EAFFC49696D1433C021896D582
Authority key identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232332e302f32342d3234203d3e20323638383239.roa
Signing time:             Fri 18 Jul 2025 18:08:44 +0000
ROA not before:           Fri 18 Jul 2025 18:03:44 +0000
ROA not after:            Fri 17 Jul 2026 18:08:44 +0000
asID:                     268829
IP address blocks:        45.173.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c9:fa:49:e7:c6:20:ea:ff:c4:96:96:d1:43:3c:02:18:96:d5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
        Validity
            Not Before: Jul 18 18:03:44 2025 GMT
            Not After : Jul 17 18:08:44 2026 GMT
        Subject: CN=B917D9FE8618F850CD3FDC84D571E2C52AAAC1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:50:9f:28:f7:1b:71:52:ba:22:50:a6:56:f5:
                    d0:8f:44:24:74:51:08:ef:aa:7c:92:1c:14:8a:16:
                    ca:93:c4:13:4a:53:70:83:6a:d3:a8:ec:60:51:63:
                    01:62:58:f7:93:30:b5:b3:61:24:42:ae:40:e2:3f:
                    b9:fb:2e:e4:e7:2a:75:9c:d9:18:06:8e:77:8f:fe:
                    e2:a6:05:9c:4e:0d:86:29:30:e4:3d:82:69:79:4b:
                    6d:11:6c:46:75:e5:22:76:7c:ce:71:94:10:52:41:
                    ec:9c:59:3a:2e:b1:fb:ff:23:8e:4e:ea:9c:f9:0c:
                    68:c0:ac:89:fa:d5:f5:63:e7:99:7c:76:cc:ec:f4:
                    ca:2d:9b:b1:cb:a2:07:3d:1c:69:bc:a8:70:8f:25:
                    86:e0:e6:1d:d7:e8:0e:f4:44:b6:c0:83:66:b3:c6:
                    3e:de:8f:40:63:c0:40:87:fb:24:2b:a7:37:8b:f0:
                    b6:b1:61:6e:7d:f2:6f:1d:6d:75:d0:3a:e3:ac:18:
                    dc:8a:86:4a:ec:e7:b4:b0:85:42:cb:45:41:8a:86:
                    11:20:3b:63:3f:4a:75:4b:42:b5:45:ef:45:59:27:
                    c6:56:ae:9c:1f:6d:f8:bb:83:9f:6c:e5:a6:df:61:
                    75:04:b6:56:50:fa:54:95:8b:98:eb:9b:89:ad:e8:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:17:D9:FE:86:18:F8:50:CD:3F:DC:84:D5:71:E2:C5:2A:AA:C1:F7
            X509v3 Authority Key Identifier:
                keyid:31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232332e302f32342d3234203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:9a:82:59:87:c0:0e:a0:f3:7f:74:68:96:ea:3e:b3:1d:c1:
         ca:52:79:f4:da:d4:ed:8e:94:8f:06:c3:7d:3f:e1:11:e2:c6:
         1c:df:40:12:70:e6:a5:c5:48:44:4e:87:ae:de:b6:9e:93:0d:
         25:1d:5c:58:1d:53:80:ac:a6:7d:03:39:f6:32:cc:29:ee:3f:
         88:4a:f6:c0:49:8f:10:af:f5:2c:f4:be:0a:cc:7d:96:f7:27:
         50:31:ec:f0:68:8d:a6:4a:04:ea:0f:6b:18:53:d4:3f:9f:90:
         37:54:12:72:95:47:c0:86:91:9e:17:ed:5b:20:86:ba:ef:f7:
         4a:b7:9f:bb:3b:67:46:ff:bd:aa:01:f3:0a:0c:b8:3c:09:23:
         40:e1:c1:82:38:b0:70:cc:9e:e1:ce:65:58:b3:76:ad:a0:98:
         70:6a:7f:e5:29:fc:59:e5:96:10:37:50:83:22:ea:74:b5:56:
         e4:4f:79:b0:89:12:21:cd:15:f5:97:82:d5:6e:1b:0b:48:77:
         64:f6:62:d8:39:ee:d4:24:a3:5f:c1:de:9f:97:38:ab:20:13:
         0e:e9:f9:be:ca:38:a4:fb:4b:62:f9:22:a8:75:d5:ad:40:d0:
         69:b1:93:46:f8:76:c4:be:ee:2f:59:cf:a4:70:17:22:0b:7b:
         6e:ad:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:32:52 2025 by rpki-client