Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e35312e302f32342d3234203d3e20323637393532.roa
File:                     34352e3136362e35312e302f32342d3234203d3e20323637393532.roa (raw, json)
Hash identifier:          z/ZfiJUmKoyMIx0RQp4AqQRGY4/fcDAN2Nnrb/lDboc=
Subject key identifier:   36:93:53:57:E7:08:6B:AB:2B:DF:E8:1F:4B:AC:E1:5A:F0:EE:47:AB
Certificate issuer:       /CN=2124AAA7D0FC397516525A2092F690A62F40A18E
Certificate serial:       6959D859C9CBC0A2460AC3FDA1D7F31D61BDEB9B
Authority key identifier: 21:24:AA:A7:D0:FC:39:75:16:52:5A:20:92:F6:90:A6:2F:40:A1:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AAA7D0FC397516525A2092F690A62F40A18E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e35312e302f32342d3234203d3e20323637393532.roa
Signing time:             Thu 11 Sep 2025 20:49:17 +0000
ROA not before:           Thu 11 Sep 2025 20:44:17 +0000
ROA not after:            Thu 10 Sep 2026 20:49:17 +0000
asID:                     267952
IP address blocks:        45.166.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.crl
                          rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AAA7D0FC397516525A2092F690A62F40A18E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:59:d8:59:c9:cb:c0:a2:46:0a:c3:fd:a1:d7:f3:1d:61:bd:eb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2124AAA7D0FC397516525A2092F690A62F40A18E
        Validity
            Not Before: Sep 11 20:44:17 2025 GMT
            Not After : Sep 10 20:49:17 2026 GMT
        Subject: CN=36935357E7086BAB2BDFE81F4BACE15AF0EE47AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:28:a7:61:b0:94:67:43:87:d8:57:74:8c:
                    be:57:0b:f5:69:ba:84:5c:a6:3d:8b:13:97:e5:ff:
                    19:76:a2:4f:a8:7e:84:a0:63:44:99:0c:1a:58:cd:
                    f6:4e:ec:49:5e:80:06:7e:9a:e3:4f:34:16:55:a4:
                    06:b5:fa:28:f3:2c:c5:20:73:d6:f4:03:db:92:fb:
                    c0:f8:20:a2:c0:95:ee:2f:12:d9:e1:86:3b:7b:e1:
                    12:cd:71:f6:96:d9:5c:3b:3b:09:ce:15:f6:65:4a:
                    22:04:13:37:af:cb:97:3c:fa:2e:e0:ad:c1:74:a9:
                    b5:0e:a6:b1:b3:bd:53:02:83:f9:6e:d3:04:7a:13:
                    f2:05:69:6a:58:50:e7:1d:77:07:3f:04:05:aa:0a:
                    52:78:a7:fe:79:2f:50:3d:98:0a:2a:ea:98:41:07:
                    ac:e2:ba:2e:8c:6b:69:21:17:bb:1f:f2:43:1a:39:
                    ae:55:b9:51:20:74:c7:b8:b9:59:fc:2e:5a:f5:e1:
                    3c:84:44:64:62:6a:14:36:7e:c8:71:aa:da:63:12:
                    a5:60:d4:2e:d5:8c:5d:92:74:b0:59:ee:ef:a6:57:
                    bb:cb:c5:03:64:36:52:6f:89:63:80:b9:82:c7:59:
                    86:b8:8a:83:98:aa:ea:73:0e:41:46:26:66:09:91:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:93:53:57:E7:08:6B:AB:2B:DF:E8:1F:4B:AC:E1:5A:F0:EE:47:AB
            X509v3 Authority Key Identifier:
                keyid:21:24:AA:A7:D0:FC:39:75:16:52:5A:20:92:F6:90:A6:2F:40:A1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AAA7D0FC397516525A2092F690A62F40A18E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e35312e302f32342d3234203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:03:04:be:e1:04:56:d1:1a:cf:4e:65:a0:e6:07:f3:cb:3f:
         15:52:fa:dd:40:c4:9b:77:e3:45:06:ac:f0:0a:79:f6:97:fb:
         16:8a:5b:49:20:15:bd:42:83:de:e5:01:6b:ef:e3:20:f8:cf:
         d4:ae:a0:d4:08:44:8f:9c:d2:d6:56:43:39:84:33:72:f2:3d:
         40:7b:4d:b5:8b:3f:dc:db:88:0a:34:92:31:08:b2:c3:c9:b7:
         98:12:53:91:00:57:bf:2f:71:65:e2:ea:14:0b:d1:d2:b8:bc:
         8e:81:fd:21:a4:ce:b4:e2:44:96:06:eb:ba:96:0c:2b:f0:b9:
         1a:fc:b5:1c:e7:04:3d:67:20:44:df:6f:3c:11:62:78:74:b4:
         38:76:af:53:d0:a8:73:17:03:bf:30:e3:4e:e9:fd:39:1e:d8:
         cd:74:76:66:f0:4b:a6:40:27:cb:e2:a7:c2:30:40:a1:6a:58:
         59:1a:f1:73:92:4b:df:db:81:b4:a6:eb:ca:46:a5:1f:a7:fc:
         c2:61:f7:82:76:8e:02:00:4e:49:f4:62:95:50:04:3d:3e:70:
         3e:c2:8f:1a:aa:47:d3:a2:90:76:12:c6:be:40:26:75:26:80:
         db:14:40:6a:3e:54:81:dc:42:ed:c5:67:65:ac:5d:33:22:a2:
         f7:20:a7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:22:49 2025 by rpki-client