Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131362e302f32322d3332203d3e20323636393334.roa
File:                     34352e3232352e3131362e302f32322d3332203d3e20323636393334.roa (raw, json)
Hash identifier:          fwxhI5EcglVwIzvq8qtUQ/exMqXm+CG86pLVSYnoFFU=
Subject key identifier:   5A:27:FE:63:3B:6C:B8:6A:35:C2:1D:BE:E5:DB:05:73:A2:1B:51:AB
Certificate issuer:       /CN=87DC0BC66FCDE290C7B38E784CD460C99B44A60A
Certificate serial:       2904F1A7972BE726329D165A8722069973F681BE
Authority key identifier: 87:DC:0B:C6:6F:CD:E2:90:C7:B3:8E:78:4C:D4:60:C9:9B:44:A6:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DC0BC66FCDE290C7B38E784CD460C99B44A60A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131362e302f32322d3332203d3e20323636393334.roa
Signing time:             Sat 26 Jul 2025 01:44:10 +0000
ROA not before:           Sat 26 Jul 2025 01:39:10 +0000
ROA not after:            Sat 25 Jul 2026 01:44:10 +0000
asID:                     266934
IP address blocks:        45.225.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/87DC0BC66FCDE290C7B38E784CD460C99B44A60A.crl
                          rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/87DC0BC66FCDE290C7B38E784CD460C99B44A60A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DC0BC66FCDE290C7B38E784CD460C99B44A60A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 18:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:04:f1:a7:97:2b:e7:26:32:9d:16:5a:87:22:06:99:73:f6:81:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DC0BC66FCDE290C7B38E784CD460C99B44A60A
        Validity
            Not Before: Jul 26 01:39:10 2025 GMT
            Not After : Jul 25 01:44:10 2026 GMT
        Subject: CN=5A27FE633B6CB86A35C21DBEE5DB0573A21B51AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:17:e8:7d:25:55:6d:c0:75:8b:e7:0d:a0:
                    0e:e4:53:6a:96:40:fb:b7:ee:cf:4b:8d:68:47:74:
                    0c:bb:13:76:b1:9c:2b:ec:e1:93:10:cd:f1:65:f3:
                    97:84:c2:e9:ad:0f:64:e2:07:d3:c8:ce:12:74:da:
                    6a:e8:63:84:67:27:36:f9:16:a2:4c:7c:3d:5b:bf:
                    3c:ba:23:4c:7c:46:8d:93:75:22:df:26:f3:4e:ab:
                    07:c0:38:c5:56:0e:e7:af:46:5c:1d:02:e0:6e:e3:
                    b9:4e:38:dd:39:53:db:1e:7e:2d:cf:8e:45:a4:a7:
                    c4:81:76:40:06:7d:aa:f3:b6:24:9c:0e:b5:c4:3a:
                    3c:10:7f:48:00:75:ab:e4:70:6f:30:b9:e6:01:cb:
                    c7:a1:b9:73:f5:9b:5f:14:d3:9d:6e:ca:7f:9b:16:
                    e0:61:00:1b:54:b1:53:72:ed:d2:71:ca:b8:00:ab:
                    8b:a0:92:ba:bc:c2:8b:f3:13:44:78:05:8b:05:7a:
                    83:55:43:b5:9a:63:ba:2d:f2:e9:25:70:cf:0c:96:
                    db:1d:45:b1:e3:6f:9b:f1:2b:64:09:01:c2:fb:9b:
                    9c:23:8a:cd:f9:a1:bf:d9:8d:8a:48:0f:3c:99:aa:
                    f5:be:f7:99:df:98:67:1b:2c:c5:d5:3c:8b:2f:cf:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:27:FE:63:3B:6C:B8:6A:35:C2:1D:BE:E5:DB:05:73:A2:1B:51:AB
            X509v3 Authority Key Identifier:
                keyid:87:DC:0B:C6:6F:CD:E2:90:C7:B3:8E:78:4C:D4:60:C9:9B:44:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/87DC0BC66FCDE290C7B38E784CD460C99B44A60A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DC0BC66FCDE290C7B38E784CD460C99B44A60A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131362e302f32322d3332203d3e20323636393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:7c:14:3d:0b:12:96:09:7c:99:fa:db:e0:cd:79:51:f4:08:
         4c:c6:47:3d:43:19:5b:aa:64:0d:2c:34:0e:ae:6b:8f:e2:ec:
         80:8c:d5:20:eb:24:c6:a8:85:14:03:15:c4:b6:5f:d7:31:70:
         78:06:e6:08:b3:23:67:d9:8c:4f:30:6d:bc:4e:5e:7e:3c:7e:
         b4:d2:c2:dc:7e:92:eb:8d:22:9a:fe:f5:32:89:8f:19:e0:3e:
         32:d9:c2:b3:84:3d:69:82:2b:75:8e:c5:68:31:67:c5:64:ab:
         3d:91:e8:39:e7:08:5b:6a:e7:95:4e:34:11:39:c4:70:52:c2:
         4a:33:eb:5c:ac:01:75:3d:95:35:ba:2a:3f:db:4b:6a:6e:f9:
         f8:94:8b:9e:0e:f6:72:e2:0a:8b:b7:05:0e:6d:4b:af:f0:d0:
         c5:56:e2:a9:26:25:b9:fd:44:76:f8:5b:53:96:5c:d6:2d:f1:
         f5:ac:56:b7:56:e4:c9:52:e6:64:4a:08:a3:74:ca:b3:76:f5:
         3a:11:8e:83:0b:dd:0b:6e:14:8f:3b:e3:52:a1:d7:97:bc:f4:
         b7:b4:3b:53:e6:b9:33:79:a4:16:0b:1d:e8:f4:8a:ef:a3:58:
         26:c9:4d:bc:6e:a5:60:f0:bd:86:47:98:54:e8:0f:4e:39:1e:
         24:e8:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:07:51 2025 by rpki-client