Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136332e302f32342d3234203d3e20323636313936.roa
File:                     34352e362e3136332e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          u6HwnVI+yaR7pLgQ6BfaNcwSryYr0O9F9TlkVRCPKRA=
Subject key identifier:   D3:53:20:9B:94:80:2E:62:4D:D5:32:5F:AC:DF:2C:A9:5F:F8:EF:58
Certificate issuer:       /CN=1619150682CDACD2E5DF559462D63AB555DA4E7A
Certificate serial:       47D15DCA820AF3F71EBA2C73C0231056B83E6BA9
Authority key identifier: 16:19:15:06:82:CD:AC:D2:E5:DF:55:94:62:D6:3A:B5:55:DA:4E:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136332e302f32342d3234203d3e20323636313936.roa
Signing time:             Tue 26 Aug 2025 19:23:05 +0000
ROA not before:           Tue 26 Aug 2025 19:18:05 +0000
ROA not after:            Tue 25 Aug 2026 19:23:05 +0000
asID:                     266196
IP address blocks:        45.6.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d1:5d:ca:82:0a:f3:f7:1e:ba:2c:73:c0:23:10:56:b8:3e:6b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1619150682CDACD2E5DF559462D63AB555DA4E7A
        Validity
            Not Before: Aug 26 19:18:05 2025 GMT
            Not After : Aug 25 19:23:05 2026 GMT
        Subject: CN=D353209B94802E624DD5325FACDF2CA95FF8EF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:63:1f:c6:93:e5:85:69:65:a1:47:24:e5:
                    d2:87:e5:47:ed:84:72:f4:0a:9f:07:37:1a:c8:13:
                    e0:bd:bb:c2:9a:d7:76:3b:52:4a:db:bd:47:70:40:
                    11:b9:82:26:81:0e:2f:06:98:28:0d:dd:05:b5:34:
                    e2:63:49:8d:48:45:2d:33:5c:9e:99:f0:a1:dd:e6:
                    fe:e5:ec:9e:d7:8c:9a:bf:17:3b:0f:64:c0:a6:28:
                    a4:99:7c:ed:9c:13:2f:54:6e:a5:45:16:99:1f:db:
                    43:f2:18:a4:71:d8:3d:e4:73:0e:15:f4:40:7b:e0:
                    db:f8:0f:b3:98:16:dc:a9:3e:c0:6e:21:bc:85:6e:
                    b2:9f:e6:d1:69:35:10:74:1a:3b:14:13:ff:e6:c2:
                    a8:1b:d3:77:28:d7:c0:a9:0f:7d:65:94:7b:38:e7:
                    59:26:84:1a:e1:ad:23:fc:3e:a1:e1:80:6e:85:b2:
                    91:ee:5c:41:09:3e:05:d6:1a:85:7d:6c:34:2b:04:
                    b7:a6:08:3d:ad:e9:a1:0f:b1:ab:db:f9:35:25:c2:
                    50:87:ab:75:1a:48:fa:e6:6b:56:04:a5:77:00:7b:
                    82:0d:a0:9c:fe:34:a7:7b:96:6b:22:65:a8:3b:8c:
                    1f:4d:7e:08:f7:d3:69:0c:2e:41:53:63:f5:a4:a0:
                    ac:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:53:20:9B:94:80:2E:62:4D:D5:32:5F:AC:DF:2C:A9:5F:F8:EF:58
            X509v3 Authority Key Identifier:
                keyid:16:19:15:06:82:CD:AC:D2:E5:DF:55:94:62:D6:3A:B5:55:DA:4E:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136332e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b8:c2:eb:70:5c:b2:28:b3:cc:05:32:23:43:da:42:4c:e3:
         06:aa:f2:74:be:cb:75:0a:17:23:d8:d5:7f:cb:01:a5:f1:26:
         1f:e8:5f:f5:72:48:01:fa:e7:2d:cd:42:c6:29:66:af:07:85:
         f5:63:b5:22:be:67:98:e2:c2:35:14:64:c8:6a:ee:5e:ea:4e:
         a9:de:10:77:cd:0a:dc:78:8f:dd:0b:ab:b3:0f:5e:e7:63:37:
         23:ad:a5:0d:31:fc:4b:aa:e8:16:0f:44:7c:d2:38:ba:8a:0c:
         0b:13:e7:0b:96:48:1c:a2:ab:f1:c5:b9:54:56:a5:49:67:59:
         7d:89:20:fc:56:71:6b:2e:e8:40:96:a2:d6:76:b6:6d:1a:7b:
         eb:62:30:39:e9:8f:f4:b8:10:0b:6a:9d:96:a7:68:00:c3:05:
         ce:6f:a4:d7:a8:69:f0:67:e7:19:c1:65:a6:7d:dc:d7:3a:6c:
         f0:05:ef:0b:01:25:71:0e:64:89:a6:f0:b8:99:72:38:27:34:
         05:fd:e9:d8:37:50:0c:1a:6b:a4:fb:33:ee:46:8f:3b:a7:92:
         fa:10:b4:bb:54:d8:7e:d2:d9:d6:22:de:57:ee:5b:61:3c:d9:
         dc:b6:5e:3f:59:c1:68:84:2b:14:c5:9b:2a:35:f1:2e:4f:ad:
         c7:f9:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:11:22 2025 by rpki-client