Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/34352e3233382e3230322e302f32332d3233203d3e20323638333630.roa
File:                     34352e3233382e3230322e302f32332d3233203d3e20323638333630.roa (raw, json)
Hash identifier:          a/356OyU5/TSbj4J7cwE8zW++JnafZzWhwg9ksDuWrs=
Subject key identifier:   93:AD:08:5D:1A:2D:BE:B9:36:B7:6D:50:93:40:BE:49:3C:42:C6:D6
Certificate issuer:       /CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
Certificate serial:       3110EC884E91E5337C7C50EEFC5C3F47758BD3E2
Authority key identifier: 22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/34352e3233382e3230322e302f32332d3233203d3e20323638333630.roa
Signing time:             Mon 09 Jun 2025 11:05:37 +0000
ROA not before:           Mon 09 Jun 2025 11:00:37 +0000
ROA not after:            Mon 08 Jun 2026 11:05:37 +0000
asID:                     268360
IP address blocks:        45.238.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl
                          rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 05:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:10:ec:88:4e:91:e5:33:7c:7c:50:ee:fc:5c:3f:47:75:8b:d3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
        Validity
            Not Before: Jun  9 11:00:37 2025 GMT
            Not After : Jun  8 11:05:37 2026 GMT
        Subject: CN=93AD085D1A2DBEB936B76D509340BE493C42C6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:fc:a1:04:38:5c:3a:92:d9:75:8b:9b:bb:
                    8c:6b:3e:56:69:cf:05:c8:13:fe:49:91:c6:f6:d4:
                    98:cb:23:d2:5e:72:24:1c:90:49:36:39:99:53:aa:
                    41:78:2c:48:54:11:f7:28:c3:a8:b4:34:fa:77:e5:
                    46:d4:29:84:51:7f:05:9a:ca:2f:86:9c:9b:64:37:
                    10:2a:cf:34:85:dd:09:4e:79:99:3f:d6:6e:14:a8:
                    0e:79:7e:9c:48:16:17:1d:12:77:f8:c8:3e:6f:dc:
                    44:96:01:85:8d:d5:b9:16:19:b4:a7:73:15:a4:62:
                    c4:0b:8f:3b:6a:96:d9:8b:dd:fd:d8:95:99:81:d0:
                    1e:29:78:34:b6:1c:93:77:a5:79:f4:36:9b:0e:49:
                    13:b2:9b:b5:1c:ed:4b:db:ca:36:b7:94:d5:20:14:
                    28:29:c3:1d:c5:2e:9d:37:6e:cb:2e:e5:1f:5f:b7:
                    d9:aa:3e:2b:51:f6:b6:d0:c4:06:21:89:47:18:ba:
                    48:ca:4a:c3:5a:69:9c:04:8b:02:90:51:90:ef:d1:
                    da:1f:23:32:13:cf:07:c1:7c:54:e8:73:dd:30:50:
                    fc:ae:e6:79:b7:eb:a0:b5:e8:85:42:b4:0e:b4:d2:
                    1a:26:ba:55:8b:07:3e:06:7e:a8:f3:36:2a:d2:62:
                    6a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AD:08:5D:1A:2D:BE:B9:36:B7:6D:50:93:40:BE:49:3C:42:C6:D6
            X509v3 Authority Key Identifier:
                keyid:22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/34352e3233382e3230322e302f32332d3233203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:9e:fc:57:7e:c7:f1:b5:7e:c3:20:27:3d:f9:4f:d9:b9:cb:
         75:0b:6b:40:36:a9:2a:92:27:f4:58:26:10:c4:a2:89:7a:0c:
         53:82:03:d9:55:4a:a7:1f:6a:72:2a:3a:7a:43:6e:55:88:42:
         1d:1d:bc:86:85:e1:b7:cd:da:1b:ee:e1:37:23:c4:d1:fc:0b:
         80:cd:79:11:85:29:ee:1c:51:44:e2:53:a5:8a:62:df:0f:e1:
         94:bb:15:08:fd:4f:5f:d5:e4:d6:4b:0d:4c:3c:4f:98:76:e3:
         9b:74:a5:2a:b1:ab:97:62:42:05:d3:d4:b2:fd:99:48:59:a4:
         64:6b:ea:46:4a:51:56:ce:6f:a6:2f:40:a4:23:ca:6c:f3:46:
         14:f1:a4:1e:c2:12:0a:4c:87:f5:85:bc:03:f7:c1:02:ae:7e:
         a3:3b:cc:d6:ba:d4:47:79:e0:7b:8d:30:4d:a6:a6:9a:6c:a6:
         8e:c0:1a:b2:c5:3d:a2:20:a8:95:55:95:10:59:23:55:d2:66:
         8d:b3:28:37:23:2b:5d:83:a7:9d:e8:c2:fe:76:07:ca:94:9d:
         09:21:1e:f5:d9:a9:ae:d8:93:b1:20:de:94:02:d3:5b:be:0d:
         a8:86:25:85:8f:f8:72:85:09:e8:b1:72:62:b8:e7:58:aa:23:
         30:74:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:16:54 2025 by rpki-client