Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa
File:                     34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier:          053II39czKoDlFApN81A+GOzp4hI6thaDDCXVCdNib8=
Subject key identifier:   46:18:F2:C9:29:78:B4:30:8F:C4:55:45:C0:76:4D:D6:E5:CF:BF:74
Certificate issuer:       /CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
Certificate serial:       22FEC7AE3204561CF0615D5C3658E06351B291F0
Authority key identifier: DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa
Signing time:             Fri 12 Sep 2025 18:32:19 +0000
ROA not before:           Fri 12 Sep 2025 18:27:19 +0000
ROA not after:            Fri 11 Sep 2026 18:32:19 +0000
asID:                     268746
IP address blocks:        45.171.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fe:c7:ae:32:04:56:1c:f0:61:5d:5c:36:58:e0:63:51:b2:91:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
        Validity
            Not Before: Sep 12 18:27:19 2025 GMT
            Not After : Sep 11 18:32:19 2026 GMT
        Subject: CN=4618F2C92978B4308FC45545C0764DD6E5CFBF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f2:e9:12:67:d9:6a:b1:44:65:92:4f:1b:a7:
                    89:d9:90:ca:a6:09:e6:b9:10:f3:d1:91:dc:b2:f6:
                    16:b7:22:26:04:6e:b9:67:75:c1:12:99:18:ab:41:
                    f8:00:d2:6a:a6:09:05:79:93:df:87:d3:7f:5f:71:
                    2f:1c:b3:ec:f9:c5:25:63:37:55:76:05:ff:6a:4e:
                    60:f7:fd:98:69:a6:48:c8:5a:05:a8:aa:5e:7f:b2:
                    19:79:a2:d5:39:39:d2:84:ae:f4:fe:0a:08:91:53:
                    a0:02:17:e2:ee:eb:d5:16:0d:02:b4:06:de:a7:2a:
                    8a:f1:0b:b9:8e:c5:8a:cf:67:db:53:13:74:9b:cf:
                    e7:f8:fc:3f:6d:dc:37:f7:85:cf:fa:d3:3e:d5:ee:
                    16:a4:62:8a:ff:ad:f2:b5:38:c5:01:28:0e:c8:83:
                    70:90:57:7d:5c:b8:ee:56:3c:08:17:4d:86:17:62:
                    58:50:13:b9:da:1e:67:85:40:76:45:61:3f:3d:9d:
                    77:f2:a0:c0:82:bd:75:8d:6d:64:f7:63:f0:2c:56:
                    42:14:6e:3d:7c:e6:5f:db:94:48:b9:ae:74:da:8f:
                    53:f5:50:75:18:86:bd:2a:0f:b9:70:72:d8:71:15:
                    69:04:0a:9b:79:51:81:d9:72:61:76:8b:99:49:3a:
                    42:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:18:F2:C9:29:78:B4:30:8F:C4:55:45:C0:76:4D:D6:E5:CF:BF:74
            X509v3 Authority Key Identifier:
                keyid:DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ab:2c:69:86:b7:f9:92:d7:d5:82:70:45:e1:e0:a4:2f:64:
         0f:8e:96:bd:50:12:6f:18:a5:8a:f9:59:5c:d6:39:f8:7c:7b:
         a2:ef:1b:02:63:cb:70:12:39:e0:f0:e6:1e:6c:31:52:24:df:
         3e:95:89:61:d5:29:8c:ab:16:b6:1c:ec:7e:94:be:6d:61:1e:
         98:d5:23:39:b0:6a:27:0b:90:7a:b2:6b:a6:f0:2e:da:0a:5d:
         b7:2f:3e:8f:19:ba:f4:61:81:f3:24:fc:25:54:de:5a:e3:e2:
         c3:5e:ad:b7:a4:62:9f:2a:e2:88:c7:1d:f9:77:db:ba:51:86:
         39:96:b9:31:98:45:db:92:c0:da:a5:2a:70:05:fb:b3:d9:96:
         fe:43:8d:ba:c9:bd:37:b5:3b:83:17:94:b1:8d:41:94:e7:34:
         28:80:66:3e:2a:b5:28:e9:a0:4a:c0:e7:b8:7c:bc:4d:b4:f6:
         c4:26:5e:f9:e5:51:6a:f5:ef:3f:e3:0a:7a:18:3e:99:14:f1:
         6d:22:a7:7f:02:f9:8f:91:db:72:fc:3b:3a:f9:59:5d:44:e5:
         88:18:33:ab:88:bc:16:c0:68:e3:2c:af:3a:6a:1b:11:b7:e9:
         e9:5d:ef:a5:8f:8f:0b:73:5f:e9:35:0a:01:4f:85:d6:9b:71:
         d3:de:7f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:57:50 2025 by rpki-client