Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135332e302f32342d3234203d3e20323638303133.roa
File:                     34352e3136372e3135332e302f32342d3234203d3e20323638303133.roa (raw, json)
Hash identifier:          JR7bAo4qoyzsKRsArRCLeXQTnmjakMASAvZBs3D2pwU=
Subject key identifier:   4B:81:B0:A7:5E:76:5F:76:1B:99:D0:37:40:8F:76:E9:51:29:12:9E
Certificate issuer:       /CN=81359337B1BD7DC8E7A661186EEC0BEE389C0BB4
Certificate serial:       02E977FCF2339BB1A0E5866A05799B2AD926EF54
Authority key identifier: 81:35:93:37:B1:BD:7D:C8:E7:A6:61:18:6E:EC:0B:EE:38:9C:0B:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135332e302f32342d3234203d3e20323638303133.roa
Signing time:             Thu 05 Jun 2025 18:00:29 +0000
ROA not before:           Thu 05 Jun 2025 17:55:29 +0000
ROA not after:            Thu 04 Jun 2026 18:00:29 +0000
asID:                     268013
IP address blocks:        45.167.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.crl
                          rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 13:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e9:77:fc:f2:33:9b:b1:a0:e5:86:6a:05:79:9b:2a:d9:26:ef:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81359337B1BD7DC8E7A661186EEC0BEE389C0BB4
        Validity
            Not Before: Jun  5 17:55:29 2025 GMT
            Not After : Jun  4 18:00:29 2026 GMT
        Subject: CN=4B81B0A75E765F761B99D037408F76E95129129E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b4:de:15:1c:59:b6:b3:ff:42:f1:9e:62:93:
                    6e:e8:48:67:46:d1:f7:c3:fe:9d:48:2b:6b:6f:1b:
                    6a:73:a6:ef:9d:e9:ed:b7:ef:2a:2b:70:3d:c9:f5:
                    00:41:0e:0b:91:e8:d8:a6:13:5b:a3:38:ec:eb:bd:
                    fc:25:96:61:4f:fe:fb:bb:17:87:cd:55:a1:92:b8:
                    7a:ae:f7:c9:f1:e0:0f:57:50:55:37:67:6f:68:fa:
                    3b:0b:96:47:23:06:90:9c:07:fc:26:cc:03:2b:79:
                    38:f0:10:18:d0:d3:de:76:9f:1e:a3:4e:88:b7:02:
                    27:53:de:ac:8e:96:e8:86:95:71:e0:96:d7:b3:8a:
                    08:fd:5e:ef:82:53:72:a8:82:3f:20:49:13:c6:36:
                    1b:37:ce:cc:06:b0:7a:e7:bd:26:e3:a1:70:69:e2:
                    e3:93:8a:bb:6c:74:ef:26:ac:92:1b:43:6f:49:25:
                    4f:50:01:13:58:65:9a:3a:27:33:14:dd:c7:1c:99:
                    c4:68:d2:ae:2f:b8:26:50:ba:97:6a:06:8c:48:30:
                    86:7f:d9:5e:5e:0a:4c:80:46:6f:0e:5c:47:2b:6c:
                    c0:66:4d:6f:9e:61:81:0f:06:3c:ff:52:32:56:4f:
                    50:9e:54:11:90:5d:ce:ed:11:df:ff:43:3c:f4:6e:
                    bc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:81:B0:A7:5E:76:5F:76:1B:99:D0:37:40:8F:76:E9:51:29:12:9E
            X509v3 Authority Key Identifier:
                keyid:81:35:93:37:B1:BD:7D:C8:E7:A6:61:18:6E:EC:0B:EE:38:9C:0B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81359337B1BD7DC8E7A661186EEC0BEE389C0BB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135332e302f32342d3234203d3e20323638303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:08:8f:30:9a:51:56:f4:52:a2:62:23:b0:fb:e8:9e:a4:2f:
         a5:c7:86:a0:5b:e0:e7:98:63:72:f2:73:7f:62:fd:ed:c4:34:
         92:84:3a:e3:69:15:ba:47:67:65:2d:dc:5b:4f:22:75:1d:f4:
         cd:46:9e:12:f6:ea:b9:4a:51:a5:30:aa:0e:84:27:a7:19:b7:
         7c:d7:65:85:db:76:ad:62:0b:e6:d6:7c:9f:3c:89:ae:50:bf:
         7f:c2:a5:f5:05:67:32:46:53:e1:0b:50:ae:b8:55:9b:06:11:
         0d:b3:d2:15:56:24:51:11:12:f8:0e:66:75:bc:23:76:7a:e7:
         d3:18:1e:79:bc:db:e4:ad:97:11:03:e5:c7:ee:be:57:44:c6:
         13:8a:67:b3:2f:c5:17:81:96:30:78:06:d8:7e:28:5a:98:b1:
         6f:21:f5:c7:7a:d8:6c:dd:b7:52:e4:54:8f:25:d9:74:e0:ce:
         02:a2:9f:01:22:58:ca:e9:f9:2e:34:db:bf:34:94:04:b5:e6:
         bc:67:f0:d2:34:84:52:16:34:22:14:db:88:35:36:a9:08:6f:
         81:51:29:46:af:f2:ce:db:6a:7c:2c:7f:e2:d3:d2:19:bd:d0:
         57:8f:03:10:57:bc:d8:27:d3:a8:bb:6b:30:d8:e2:6f:b4:40:
         e0:2f:4e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:32:17 2025 by rpki-client