Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/34352e3136362e32342e302f32342d3234203d3e20323637393530.roa
File:                     34352e3136362e32342e302f32342d3234203d3e20323637393530.roa (raw, json)
Hash identifier:          wfq+pWE+1rVePZyWIjB5fYWbXK7PKFSPh9/SY4jvGWY=
Subject key identifier:   D9:B3:8B:85:99:AE:71:1B:E5:C4:15:32:D2:0A:22:EB:84:04:A3:76
Certificate issuer:       /CN=DBCD6820E048E145381B6BF0329F650ED78C7452
Certificate serial:       1944F442CA4B5784E7635FB0003D0417BB5F3379
Authority key identifier: DB:CD:68:20:E0:48:E1:45:38:1B:6B:F0:32:9F:65:0E:D7:8C:74:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCD6820E048E145381B6BF0329F650ED78C7452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/34352e3136362e32342e302f32342d3234203d3e20323637393530.roa
Signing time:             Thu 28 Aug 2025 13:44:22 +0000
ROA not before:           Thu 28 Aug 2025 13:39:22 +0000
ROA not after:            Thu 27 Aug 2026 13:44:22 +0000
asID:                     267950
IP address blocks:        45.166.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/DBCD6820E048E145381B6BF0329F650ED78C7452.crl
                          rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/DBCD6820E048E145381B6BF0329F650ED78C7452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCD6820E048E145381B6BF0329F650ED78C7452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:44:f4:42:ca:4b:57:84:e7:63:5f:b0:00:3d:04:17:bb:5f:33:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBCD6820E048E145381B6BF0329F650ED78C7452
        Validity
            Not Before: Aug 28 13:39:22 2025 GMT
            Not After : Aug 27 13:44:22 2026 GMT
        Subject: CN=D9B38B8599AE711BE5C41532D20A22EB8404A376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:db:8d:ef:2e:19:87:bf:6b:d5:38:5f:cb:
                    b5:59:e5:4a:e8:1c:a2:5a:40:5f:bb:8c:82:de:eb:
                    b9:a9:a2:b6:23:11:7b:c4:92:2f:2a:fc:a8:10:db:
                    e3:b4:d7:4c:c2:13:c4:44:f2:87:23:e5:89:c8:b9:
                    d5:ff:99:b6:e1:1b:ce:4f:37:59:e0:40:1a:76:cf:
                    c4:71:b3:44:87:7e:ab:09:8e:dd:5e:c1:77:68:53:
                    2f:e3:4a:50:72:b2:6d:c3:60:a9:aa:98:62:b7:6d:
                    17:53:ff:8e:69:16:48:ca:a8:57:7a:30:80:83:91:
                    2a:d1:08:c5:b4:9d:2d:24:02:b9:60:5e:40:bb:61:
                    54:38:5a:06:96:58:d0:d7:86:a7:70:95:e4:f8:d1:
                    89:22:28:86:60:7d:3f:6e:6a:0e:12:0c:fb:6b:c9:
                    e9:df:a1:06:83:0f:30:9b:89:41:b4:e6:14:d2:2d:
                    26:46:b4:35:c6:9d:be:c3:19:34:b8:f5:bf:83:6d:
                    b9:75:4e:23:7e:03:08:45:75:db:cc:ad:39:1c:b0:
                    ab:05:6a:47:52:28:15:7c:59:fb:ed:8a:fe:f6:de:
                    2a:68:89:6b:b0:4a:bd:7e:0a:c8:56:0a:29:67:1c:
                    2c:fe:22:81:b1:bb:2c:65:80:29:4b:3a:5f:bc:30:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B3:8B:85:99:AE:71:1B:E5:C4:15:32:D2:0A:22:EB:84:04:A3:76
            X509v3 Authority Key Identifier:
                keyid:DB:CD:68:20:E0:48:E1:45:38:1B:6B:F0:32:9F:65:0E:D7:8C:74:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/DBCD6820E048E145381B6BF0329F650ED78C7452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCD6820E048E145381B6BF0329F650ED78C7452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/34352e3136362e32342e302f32342d3234203d3e20323637393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:46:25:2d:6b:4f:6d:ea:0b:45:c2:62:fa:03:19:4f:51:d6:
         b5:7f:66:fa:a4:52:a0:00:6b:fa:fc:82:98:4e:c9:14:94:b1:
         9e:68:5e:ea:f4:3d:50:81:16:e9:39:4c:99:c0:f3:62:a5:3b:
         82:ab:ab:83:48:d9:ff:1f:70:a7:38:e4:5e:ae:90:86:85:94:
         34:f6:7c:7a:c5:be:ea:07:57:d7:66:d8:58:5b:ff:62:12:32:
         50:54:8e:ec:a5:b1:44:03:eb:ac:1c:3c:44:99:79:d3:8f:e7:
         e0:e2:55:c0:a1:c0:56:9d:11:d5:ad:b9:ca:2e:59:a5:5c:61:
         ee:b0:ec:c8:87:ed:f5:7b:bc:08:1d:8c:1a:59:cd:2c:a1:a0:
         13:87:f0:76:69:58:b0:4c:0e:5f:32:4e:b0:41:77:a4:25:7f:
         c3:19:89:47:62:55:ea:c3:cf:97:c5:58:dd:3b:f2:db:87:b1:
         4c:5d:72:41:a8:e9:8a:a2:85:04:d3:8f:27:a7:1d:f1:65:94:
         1d:28:99:3d:2d:09:49:9b:3e:9d:55:11:22:72:57:18:14:92:
         6f:0b:3a:77:b0:f0:3b:12:aa:69:54:bd:f2:d1:e3:f6:6d:d6:
         1f:5f:49:4d:8b:18:65:e1:0e:8d:6b:1e:0b:7a:e9:c1:a9:80:
         4a:8c:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:48:33 2025 by rpki-client