Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137342e302f32332d3233203d3e20323638353536.roa
File:                     34352e3136332e3137342e302f32332d3233203d3e20323638353536.roa (raw, json)
Hash identifier:          l6gckloBA2hdRlBI7rpBfT+0sJe3BlteIGXdmivJByY=
Subject key identifier:   4D:68:E0:55:73:C5:C0:EF:98:4D:88:91:48:CC:E1:4D:BF:56:BD:9A
Certificate issuer:       /CN=78FAEDBB051194630540EEEFB7EB5EDD6D083EE5
Certificate serial:       6ABDEA8F9B79C9D94A3B22722D7446264F43230C
Authority key identifier: 78:FA:ED:BB:05:11:94:63:05:40:EE:EF:B7:EB:5E:DD:6D:08:3E:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137342e302f32332d3233203d3e20323638353536.roa
Signing time:             Mon 30 Jun 2025 12:55:31 +0000
ROA not before:           Mon 30 Jun 2025 12:50:31 +0000
ROA not after:            Mon 29 Jun 2026 12:55:31 +0000
asID:                     268556
IP address blocks:        45.163.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.crl
                          rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bd:ea:8f:9b:79:c9:d9:4a:3b:22:72:2d:74:46:26:4f:43:23:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78FAEDBB051194630540EEEFB7EB5EDD6D083EE5
        Validity
            Not Before: Jun 30 12:50:31 2025 GMT
            Not After : Jun 29 12:55:31 2026 GMT
        Subject: CN=4D68E05573C5C0EF984D889148CCE14DBF56BD9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:e4:de:8b:f0:69:7c:b6:56:87:75:4d:55:
                    42:f3:e2:5d:c4:93:69:ff:27:7a:ef:79:4d:90:71:
                    f5:88:df:f4:8b:6c:b8:96:07:20:3d:55:00:0f:8a:
                    b4:10:09:b8:2e:a3:dd:b1:6c:be:f1:38:e2:cf:a6:
                    e6:38:35:3e:a2:41:ee:c0:8b:cd:3e:49:13:3d:17:
                    18:e5:e6:ca:2d:3d:9d:d0:7b:26:20:e2:ed:55:17:
                    73:eb:49:80:5a:43:52:83:12:4d:d2:94:2d:4d:12:
                    bb:79:a5:d9:e2:9b:55:59:6c:c2:ed:c9:38:b1:46:
                    0b:fd:41:61:2b:dc:af:da:e7:ec:49:f9:ad:01:d7:
                    69:fd:aa:8a:5e:14:93:22:8f:1b:86:10:22:5b:88:
                    11:80:c0:5f:36:2a:7d:1d:0c:f9:3e:7e:13:e0:4c:
                    9f:66:a3:fc:f1:1b:6e:62:16:11:58:68:8a:d7:79:
                    cd:56:8b:ee:cb:b6:f4:59:4e:b5:12:2f:9b:81:1b:
                    60:fa:f2:17:b2:99:9d:27:ae:88:fb:a7:d9:e1:90:
                    55:bb:72:38:3b:e1:6e:a1:ed:56:5f:a1:fe:70:07:
                    e1:b2:a2:9d:13:35:c5:4b:10:5c:e5:d0:8a:25:c3:
                    04:95:4b:48:97:6d:35:d6:39:30:20:38:5a:0d:bd:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:68:E0:55:73:C5:C0:EF:98:4D:88:91:48:CC:E1:4D:BF:56:BD:9A
            X509v3 Authority Key Identifier:
                keyid:78:FA:ED:BB:05:11:94:63:05:40:EE:EF:B7:EB:5E:DD:6D:08:3E:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137342e302f32332d3233203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:85:e2:9e:31:a3:ce:91:75:ad:70:4c:a3:1f:28:97:22:7b:
         ad:29:d7:57:79:2c:cb:30:28:49:7d:2b:b7:14:c6:46:fb:97:
         31:31:27:4e:25:c2:d8:dc:e2:c6:df:5d:f3:0c:81:be:7e:27:
         76:73:87:17:5f:5b:9a:7e:42:18:0e:91:0d:ef:d5:d5:43:e9:
         7c:51:53:99:cc:83:32:68:38:cb:af:7f:02:b3:df:ae:35:3d:
         85:38:d7:f9:0d:8c:66:09:29:80:f2:a3:26:cf:3e:10:53:0d:
         18:b7:c0:fe:4e:a2:28:05:b2:f4:65:e3:5f:15:fa:db:4a:87:
         69:76:f5:f4:fc:77:6f:67:65:08:54:62:02:44:53:71:49:84:
         4a:a9:fe:e9:72:3e:64:42:30:ed:5a:25:8c:f0:95:67:1e:66:
         54:07:15:8a:27:bd:26:53:cd:f8:a9:93:00:c8:72:f5:eb:bb:
         ce:e6:bf:c7:66:6f:c8:11:70:5c:e2:58:11:97:d6:7b:77:87:
         07:97:4f:f9:ec:25:0f:27:e1:fd:9a:f8:19:29:31:c5:fa:3a:
         ad:5d:0a:18:ff:64:23:ed:8c:b2:90:cf:98:2d:99:35:91:01:
         27:2d:30:a4:02:3d:23:e2:9f:01:ca:b9:1f:e9:24:48:39:8f:
         27:e5:21:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:19:43 2025 by rpki-client