Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4c4Z8pgwzeAHPZcJ563nd7Ni1RDDGvEoUVj8cH7YpWbc/0/34352e3137322e302e302f32322d3234203d3e20323638373534.roa
File:                     34352e3137322e302e302f32322d3234203d3e20323638373534.roa (raw, json)
Hash identifier:          y6RICycq52+MU/kFU2JpP/w/u1lKI0WY34Pua+GmGmM=
Subject key identifier:   F8:76:97:20:15:4B:51:46:E6:C0:D5:7D:FA:82:5F:0B:67:9B:BB:9B
Certificate issuer:       /CN=B28266083D3AED48A79D95E36C41207F68F3145C
Certificate serial:       3A14745AFFA22FE884E388C2FCFC9F79D7CF1B77
Authority key identifier: B2:82:66:08:3D:3A:ED:48:A7:9D:95:E3:6C:41:20:7F:68:F3:14:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28266083D3AED48A79D95E36C41207F68F3145C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4c4Z8pgwzeAHPZcJ563nd7Ni1RDDGvEoUVj8cH7YpWbc/0/34352e3137322e302e302f32322d3234203d3e20323638373534.roa
Signing time:             Wed 09 Jul 2025 14:14:31 +0000
ROA not before:           Wed 09 Jul 2025 14:09:31 +0000
ROA not after:            Wed 08 Jul 2026 14:14:31 +0000
asID:                     268754
IP address blocks:        45.172.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4c4Z8pgwzeAHPZcJ563nd7Ni1RDDGvEoUVj8cH7YpWbc/0/B28266083D3AED48A79D95E36C41207F68F3145C.crl
                          rsync://rpki-repo.registro.br/repo/4c4Z8pgwzeAHPZcJ563nd7Ni1RDDGvEoUVj8cH7YpWbc/0/B28266083D3AED48A79D95E36C41207F68F3145C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28266083D3AED48A79D95E36C41207F68F3145C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:14:74:5a:ff:a2:2f:e8:84:e3:88:c2:fc:fc:9f:79:d7:cf:1b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28266083D3AED48A79D95E36C41207F68F3145C
        Validity
            Not Before: Jul  9 14:09:31 2025 GMT
            Not After : Jul  8 14:14:31 2026 GMT
        Subject: CN=F8769720154B5146E6C0D57DFA825F0B679BBB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:6e:68:9f:b4:49:02:db:fb:b5:99:e6:99:
                    04:37:6e:44:a3:9c:b2:8f:be:17:9e:30:06:a5:db:
                    aa:40:54:28:77:3c:e3:fa:11:b9:7e:31:f8:97:ac:
                    fb:ec:23:6c:f6:f5:6e:ba:4f:15:51:a9:45:cd:d2:
                    a8:78:a0:10:47:e7:f8:a9:6a:b9:8a:6a:fc:66:18:
                    11:ff:00:17:40:fe:7f:43:bd:9b:24:09:2c:94:af:
                    c1:ba:bc:28:d8:e3:37:39:7c:11:fd:0c:d7:3f:4c:
                    bb:c0:13:21:4a:bb:3c:6c:a4:02:34:58:e8:62:61:
                    ce:96:61:ef:c9:ab:a3:cb:bb:29:b8:5e:6e:1e:d5:
                    dd:0b:8d:72:30:30:76:6e:b5:29:67:4d:2a:0a:fd:
                    13:93:f6:99:ca:ae:19:7a:63:40:4d:3e:b1:12:a7:
                    2a:be:a1:cf:e3:fe:e0:61:10:a2:8c:22:1e:70:f1:
                    a0:b3:b9:71:10:2c:2f:93:50:e1:05:06:3a:c5:62:
                    a7:2a:8c:a7:85:a2:e9:59:67:ed:ef:23:46:a3:69:
                    cb:10:18:b4:24:4d:e7:ad:45:9f:50:6f:5b:d9:b8:
                    32:4b:40:8b:b7:3d:a4:f3:6f:ae:37:4f:50:be:47:
                    5f:df:6f:dc:be:ba:63:14:1c:ee:9e:85:30:89:1d:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:97:20:15:4B:51:46:E6:C0:D5:7D:FA:82:5F:0B:67:9B:BB:9B
            X509v3 Authority Key Identifier:
                keyid:B2:82:66:08:3D:3A:ED:48:A7:9D:95:E3:6C:41:20:7F:68:F3:14:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4c4Z8pgwzeAHPZcJ563nd7Ni1RDDGvEoUVj8cH7YpWbc/0/B28266083D3AED48A79D95E36C41207F68F3145C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28266083D3AED48A79D95E36C41207F68F3145C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4c4Z8pgwzeAHPZcJ563nd7Ni1RDDGvEoUVj8cH7YpWbc/0/34352e3137322e302e302f32322d3234203d3e20323638373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:c7:82:3d:03:6d:4b:07:68:b6:03:37:7c:6a:f4:14:46:50:
         f7:b6:23:e8:1a:f7:6d:18:16:b8:88:d1:21:28:42:67:9c:64:
         25:39:d0:68:ec:67:32:77:f0:83:c7:03:83:dc:a0:5a:50:54:
         6b:ad:67:4e:9a:62:e7:72:6f:a8:7b:f0:25:97:82:d2:5f:42:
         de:fd:f6:e0:4e:26:47:ee:87:da:62:84:1c:d4:54:46:fb:f2:
         d9:b1:8c:21:da:49:35:4b:7e:5b:51:f4:38:a3:1d:fb:9d:10:
         11:83:d9:a0:5c:09:04:5e:dc:66:c3:51:bc:fe:7f:dd:c3:26:
         94:f3:4b:04:13:d2:8d:c9:fa:56:de:fd:7c:e9:55:16:4c:ee:
         59:e5:1b:3a:88:dc:2b:aa:d5:22:d0:46:d4:34:e4:c0:5c:22:
         f1:1e:a3:64:e3:a1:11:e8:5e:38:b5:d6:ce:9f:5b:9a:aa:7a:
         61:98:19:f9:48:7a:07:88:b7:0b:3c:d0:a6:f5:16:b5:8e:03:
         ee:8f:90:75:ca:51:0e:be:87:93:f4:68:60:06:f5:f6:b3:90:
         35:9e:83:14:d9:45:62:7b:6b:ee:a0:55:50:72:7f:66:98:6f:
         4a:57:a7:11:0e:7a:cf:b8:f8:28:8c:31:41:cd:0b:6e:ce:81:
         a3:0f:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:54:09 2025 by rpki-client