Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230312e302f32342d3234203d3e20323638383239.roa
File:                     34352e3232392e3230312e302f32342d3234203d3e20323638383239.roa (raw, json)
Hash identifier:          oKMS85D98fy0CYcsJngxfKS+GICxWOTihvvMxmsTlj8=
Subject key identifier:   5C:F9:52:BB:1E:ED:B6:0E:15:F3:99:CA:81:3D:1E:FB:24:F5:5A:1A
Certificate issuer:       /CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
Certificate serial:       1B02497857E50F8B885E9230F1353E416383A2C1
Authority key identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230312e302f32342d3234203d3e20323638383239.roa
Signing time:             Fri 18 Jul 2025 18:09:00 +0000
ROA not before:           Fri 18 Jul 2025 18:04:00 +0000
ROA not after:            Fri 17 Jul 2026 18:09:00 +0000
asID:                     268829
IP address blocks:        45.229.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:02:49:78:57:e5:0f:8b:88:5e:92:30:f1:35:3e:41:63:83:a2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
        Validity
            Not Before: Jul 18 18:04:00 2025 GMT
            Not After : Jul 17 18:09:00 2026 GMT
        Subject: CN=5CF952BB1EEDB60E15F399CA813D1EFB24F55A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:ff:05:e9:51:22:09:5b:e2:b4:a9:98:c2:
                    70:67:2a:1c:ac:82:13:f2:b3:ed:7f:7c:f2:c8:1a:
                    10:99:50:a1:dc:c1:85:e1:ee:f9:c6:36:a6:18:42:
                    b2:1c:cc:29:9a:13:f2:07:0c:59:02:a4:ba:94:93:
                    a4:34:2d:f6:18:3b:b1:21:eb:3c:8e:34:d8:49:dc:
                    cc:23:57:24:d6:9b:00:47:7e:f9:4e:90:79:af:28:
                    aa:fb:2a:e0:14:76:a1:e2:4b:6d:52:36:0a:fa:f2:
                    c4:95:48:64:3d:7e:0f:34:b8:3e:fa:99:a3:c1:c3:
                    df:b5:72:b6:c4:47:83:ec:c2:0e:bf:97:63:49:d2:
                    cd:bb:d1:79:c3:0d:59:6b:46:48:05:98:f7:1a:7a:
                    13:b7:8a:aa:4e:7c:61:20:20:3d:ac:0f:35:20:2e:
                    c9:1d:bc:70:47:c0:9a:5b:45:85:0f:36:de:0e:d3:
                    c9:27:4c:77:af:c4:84:a0:0c:76:e7:09:e8:07:56:
                    8d:a3:19:7d:ea:f2:48:37:3b:0c:b1:bf:ab:70:8b:
                    65:d1:39:e4:e4:d0:11:6b:35:cf:61:89:c2:31:ec:
                    2b:5f:b0:43:14:c8:19:00:a6:f3:66:0b:24:b2:21:
                    9f:d0:d9:5c:07:ce:86:f2:d2:b5:f8:0b:83:8a:51:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F9:52:BB:1E:ED:B6:0E:15:F3:99:CA:81:3D:1E:FB:24:F5:5A:1A
            X509v3 Authority Key Identifier:
                keyid:31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230312e302f32342d3234203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:0c:bb:47:49:2d:ae:30:04:7e:b9:10:a2:69:ce:a8:7e:e3:
         cc:79:c1:e0:00:a8:35:a7:46:3d:ef:02:77:6e:e4:6e:81:17:
         e2:e5:8c:53:da:dc:1b:70:39:41:38:41:11:9f:82:94:53:ab:
         12:b1:df:5a:34:4a:dd:b0:92:c6:bd:97:5f:c2:ff:9c:c0:02:
         76:5b:b0:df:b5:5c:f8:b0:06:64:9d:2b:d9:27:ee:4a:b3:91:
         d2:4f:ed:82:84:db:88:de:66:ac:27:31:34:96:20:53:25:78:
         98:18:97:21:c4:57:f0:dc:c9:d0:3f:f8:be:a2:16:de:d2:ac:
         e5:d8:68:5e:92:48:d7:41:73:4d:73:71:c0:68:ad:b2:8a:3c:
         9e:fa:4c:24:04:14:0b:ce:5c:b7:1e:9a:ce:20:e5:24:44:b5:
         93:f3:5f:ae:c9:d4:14:99:7c:07:9a:e4:55:40:44:0d:3d:66:
         b9:7e:ee:ed:52:db:cb:6a:71:89:c9:b0:24:21:48:a7:49:26:
         f9:11:81:6f:c2:a6:86:98:d5:76:ca:a1:d9:9a:4c:11:75:7d:
         77:8a:8d:2a:80:f7:46:41:7c:52:99:a2:fd:38:40:66:3b:31:
         6f:a3:a7:23:62:9e:33:ab:3a:e7:36:67:46:5a:99:91:f2:d7:
         93:c1:3b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:31:50 2025 by rpki-client