Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135322e302f32332d3233203d3e20323638303133.roa
File:                     34352e3136372e3135322e302f32332d3233203d3e20323638303133.roa (raw, json)
Hash identifier:          nuDWdL/RWW5qAmFMTTVFxV/HAUAJqWKSbKwx9xYUKnI=
Subject key identifier:   02:81:93:22:7D:21:E7:DA:63:15:27:3D:B8:A3:94:57:E0:A0:AA:4B
Certificate issuer:       /CN=81359337B1BD7DC8E7A661186EEC0BEE389C0BB4
Certificate serial:       16798C2F31B7A43951C7CA87B7821DED175E837D
Authority key identifier: 81:35:93:37:B1:BD:7D:C8:E7:A6:61:18:6E:EC:0B:EE:38:9C:0B:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135322e302f32332d3233203d3e20323638303133.roa
Signing time:             Thu 05 Jun 2025 18:00:28 +0000
ROA not before:           Thu 05 Jun 2025 17:55:28 +0000
ROA not after:            Thu 04 Jun 2026 18:00:28 +0000
asID:                     268013
IP address blocks:        45.167.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.crl
                          rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 13:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:79:8c:2f:31:b7:a4:39:51:c7:ca:87:b7:82:1d:ed:17:5e:83:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81359337B1BD7DC8E7A661186EEC0BEE389C0BB4
        Validity
            Not Before: Jun  5 17:55:28 2025 GMT
            Not After : Jun  4 18:00:28 2026 GMT
        Subject: CN=028193227D21E7DA6315273DB8A39457E0A0AA4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:62:0a:82:f9:d2:42:5b:b3:75:40:18:a7:92:
                    21:04:7d:ab:57:34:57:b9:c2:1c:48:55:a6:d2:22:
                    15:48:7a:f9:1e:03:4f:c0:05:2d:e0:52:6a:32:ef:
                    3e:dc:5e:e5:33:1c:5c:da:50:78:19:64:63:1f:30:
                    26:b9:89:ba:14:3f:83:ee:f6:46:97:a6:c8:61:b7:
                    b3:11:3e:ae:4e:62:3c:35:e4:7c:fa:02:8e:e9:ba:
                    88:51:4e:b5:13:82:c2:4a:5d:f3:01:26:e0:72:cb:
                    b3:67:a6:de:a2:e6:af:37:02:d6:06:4a:38:1b:6a:
                    f5:aa:21:5d:6a:9a:7a:c1:23:d3:61:06:a0:b4:6b:
                    01:ce:c0:9c:81:dd:f4:33:6f:c6:36:c8:c8:3d:f5:
                    3e:a0:21:07:fb:c2:48:67:05:36:ca:4f:9b:e2:36:
                    e2:19:58:49:b9:c8:ee:45:09:68:b7:12:90:86:2a:
                    36:d2:24:8b:0c:a2:db:33:8a:68:80:32:b7:b3:76:
                    52:24:54:a9:f8:59:5b:70:74:e9:5d:67:27:00:e6:
                    5b:0b:d9:21:3b:ec:86:d5:bd:8d:9c:89:d5:f3:b5:
                    ca:af:d4:ca:90:34:44:6c:2e:da:75:59:b6:f9:02:
                    69:0f:11:e1:7e:74:91:1e:f5:d4:6f:46:e3:49:12:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:81:93:22:7D:21:E7:DA:63:15:27:3D:B8:A3:94:57:E0:A0:AA:4B
            X509v3 Authority Key Identifier:
                keyid:81:35:93:37:B1:BD:7D:C8:E7:A6:61:18:6E:EC:0B:EE:38:9C:0B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135322e302f32332d3233203d3e20323638303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:e0:39:91:49:e1:ad:31:40:38:31:72:c8:4c:b2:95:62:5f:
         b2:20:d7:dd:f4:02:08:00:9c:66:6a:26:72:ed:16:b8:57:02:
         10:d2:5b:56:7d:9c:3e:92:24:1f:88:a8:04:c2:e5:02:1d:16:
         1f:f6:d4:32:14:cc:e4:62:d1:75:1f:4a:0f:4b:35:d3:1c:b1:
         91:85:3f:a6:77:ce:7d:e1:e6:3e:23:85:7f:dd:bf:8b:c0:da:
         e1:02:c0:19:f9:49:dd:0f:53:a3:5e:7c:19:19:06:37:64:7e:
         23:77:30:63:85:30:5a:53:7f:ce:e0:ca:40:ca:ac:99:57:59:
         8b:3b:77:2a:3a:c0:7d:dd:08:53:a3:e8:5b:a7:5a:b6:59:2b:
         77:9b:25:0c:e0:07:94:e0:d7:98:88:1d:d8:81:54:ab:86:44:
         ec:a3:8a:fc:69:4c:9c:fa:3d:b3:31:8d:57:6a:91:22:57:96:
         b2:e0:c0:ad:ac:74:ac:06:11:cf:4a:8c:02:3f:83:03:20:0d:
         e7:89:2c:d3:ca:43:bb:e0:3a:5e:33:1d:56:6c:67:25:dd:52:
         71:a1:ac:13:4b:63:cd:b7:6a:19:80:2b:93:58:8a:df:87:7e:
         06:4b:18:75:a1:c5:05:36:cf:c7:40:59:0f:82:48:78:f7:f5:
         5e:41:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:45:28 2025 by rpki-client