Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32322e302f32342d3234203d3e20323639303135.roa
File:                     34352e3137382e32322e302f32342d3234203d3e20323639303135.roa (raw, json)
Hash identifier:          /DsTevO0WMxjHTNJqS8khDVNrOUlrO3XsXL2znmVHuI=
Subject key identifier:   A3:1E:0F:1F:C3:86:85:CE:D0:74:07:29:FC:4F:9D:6B:C1:89:96:C4
Certificate issuer:       /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
Certificate serial:       01F86BBEBFFBA6E415A782B7AB0C3BFE79EF6589
Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32322e302f32342d3234203d3e20323639303135.roa
Signing time:             Mon 21 Jul 2025 13:39:55 +0000
ROA not before:           Mon 21 Jul 2025 13:34:55 +0000
ROA not after:            Mon 20 Jul 2026 13:39:55 +0000
asID:                     269015
IP address blocks:        45.178.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f8:6b:be:bf:fb:a6:e4:15:a7:82:b7:ab:0c:3b:fe:79:ef:65:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
        Validity
            Not Before: Jul 21 13:34:55 2025 GMT
            Not After : Jul 20 13:39:55 2026 GMT
        Subject: CN=A31E0F1FC38685CED0740729FC4F9D6BC18996C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ff:a1:2d:d7:6d:8c:f4:70:7d:5e:5f:cc:99:
                    f1:fd:64:00:32:a9:85:63:d5:9c:f2:41:74:d5:e1:
                    be:69:13:31:53:9b:34:0f:2e:3a:d8:5b:5e:1c:36:
                    16:22:14:68:f0:3a:54:0c:14:6d:d0:f9:96:e4:db:
                    24:a3:de:f3:04:55:ae:91:59:a3:6c:b4:f8:06:a8:
                    f8:33:0b:59:86:19:f2:54:c0:21:96:eb:43:5a:27:
                    f6:48:04:fd:ea:b5:d1:20:2d:8a:0f:eb:b0:94:8d:
                    b3:b6:57:12:ba:22:93:4e:72:50:42:25:43:ad:e3:
                    db:a5:68:f9:cf:8a:2c:a0:9d:45:4a:0a:ff:c8:40:
                    78:a2:1c:e2:54:a1:f5:01:c7:d2:d9:3d:b1:b4:a5:
                    e2:d9:e1:d6:51:f5:9c:1b:87:cb:dd:e6:f4:bb:85:
                    fc:64:46:33:d3:bb:de:9e:58:61:3d:0f:71:cf:50:
                    00:b3:2d:72:b9:7d:12:0f:f7:45:85:ca:f0:f0:e2:
                    35:07:79:14:f5:d6:ec:8e:da:85:56:e2:11:8b:d6:
                    85:e5:41:f7:c2:37:d8:af:3c:1b:18:ce:16:1c:66:
                    d6:c4:56:f9:a4:41:13:e4:35:ea:82:a8:6b:26:6d:
                    61:08:c9:e6:4b:41:ed:4d:47:97:1a:3d:b2:e8:e7:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1E:0F:1F:C3:86:85:CE:D0:74:07:29:FC:4F:9D:6B:C1:89:96:C4
            X509v3 Authority Key Identifier:
                keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32322e302f32342d3234203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:7d:45:e2:5c:e1:64:45:f5:0f:7e:a3:3a:bb:2f:10:71:7c:
         7f:ab:92:c1:22:9d:dc:41:27:d5:38:4f:e6:75:92:fc:e3:57:
         b6:f9:67:81:d5:74:eb:3b:d3:00:c6:db:a7:04:96:9f:b5:ce:
         23:c5:eb:41:cf:90:3b:08:09:b3:07:f1:fb:68:53:6e:0c:49:
         e6:cd:ee:27:76:70:0e:2c:10:38:c0:51:4c:31:76:c3:99:4b:
         6a:3b:39:48:d6:da:37:2b:9e:d8:bb:1c:21:51:99:ce:c9:0d:
         dd:a8:38:a1:d1:07:ca:ea:cb:c8:8d:04:b5:7b:99:8a:97:25:
         e4:c6:9b:30:57:13:09:ec:43:87:b4:af:cd:cd:9b:3f:09:9c:
         bc:64:a5:92:59:da:91:82:28:bf:d4:a8:68:89:8b:bb:85:31:
         36:e7:9a:ab:47:60:29:12:f3:09:ab:95:4d:c9:5c:d4:82:0f:
         89:b5:31:2e:d7:40:d1:9c:49:d4:30:93:e3:da:fe:6c:11:5a:
         2b:d3:f1:2d:40:08:44:8e:73:fe:69:95:dc:2c:41:69:fe:d0:
         28:00:99:8c:e5:11:b9:4b:52:f4:7c:1a:1e:7e:50:f8:4c:f9:
         52:88:85:26:d5:76:21:35:0d:cf:a4:7f:12:ca:e9:23:e1:5e:
         ab:04:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:54:20 2025 by rpki-client