Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/34352e372e34302e302f32322d3232203d3e20323636353635.roa
File:                     34352e372e34302e302f32322d3232203d3e20323636353635.roa (raw, json)
Hash identifier:          Trg2ehzqshKWvxlbVvD7fwGqitU7ba6nqQN5CMiXGjo=
Subject key identifier:   7C:64:02:34:B7:B7:22:2C:F3:B2:D4:B5:0C:CF:71:E2:45:5E:57:B6
Certificate issuer:       /CN=8D2922D358225395ABA691BA6723BAA778294D49
Certificate serial:       4DA27FC25AD09519984BB8C26CB284F7BBEECA9B
Authority key identifier: 8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/34352e372e34302e302f32322d3232203d3e20323636353635.roa
Signing time:             Sat 19 Jul 2025 18:52:07 +0000
ROA not before:           Sat 19 Jul 2025 18:47:07 +0000
ROA not after:            Sat 18 Jul 2026 18:52:07 +0000
asID:                     266565
IP address blocks:        45.7.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl
                          rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 02:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a2:7f:c2:5a:d0:95:19:98:4b:b8:c2:6c:b2:84:f7:bb:ee:ca:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2922D358225395ABA691BA6723BAA778294D49
        Validity
            Not Before: Jul 19 18:47:07 2025 GMT
            Not After : Jul 18 18:52:07 2026 GMT
        Subject: CN=7C640234B7B7222CF3B2D4B50CCF71E2455E57B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:4d:cf:6b:dd:48:e8:f3:5a:1e:2c:39:2f:
                    46:6c:82:08:cb:c6:02:68:38:81:a8:ab:1e:f4:13:
                    51:80:03:e8:f4:8d:33:7a:68:70:cd:0c:5b:13:72:
                    45:75:b3:d8:d2:d6:7e:27:11:63:6e:86:39:5d:e8:
                    c3:2f:07:72:aa:00:39:b6:7b:d1:1a:56:50:52:67:
                    20:96:8b:86:ff:70:82:fd:b2:a8:5d:31:9d:c0:e0:
                    5c:13:8e:3c:40:27:3c:d7:a7:9f:c8:0b:25:87:83:
                    f7:a6:47:7d:4b:fb:9b:12:e0:ac:24:40:a8:64:40:
                    a4:35:8c:75:1c:60:75:fd:28:81:39:02:f8:1d:7a:
                    e4:17:0b:1d:0c:e7:fe:64:e9:0e:44:e0:f4:b5:5d:
                    4a:75:31:13:b9:b3:fd:2b:3d:cf:1e:84:9c:26:13:
                    6e:fe:c8:c9:0f:48:7b:13:c0:2c:86:2d:61:1b:4a:
                    3b:58:c7:c8:ce:e7:56:ab:cd:1e:41:f3:75:70:bf:
                    8d:15:83:2c:ec:04:61:e3:7a:0c:71:87:cb:8a:b5:
                    85:ec:25:9a:fb:52:fd:b0:36:05:22:2c:a1:23:6d:
                    46:64:3d:8b:04:25:7e:ff:36:82:38:e9:b8:a0:fd:
                    5e:19:5b:2e:d7:ed:08:40:a3:92:fb:fb:34:fa:45:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:64:02:34:B7:B7:22:2C:F3:B2:D4:B5:0C:CF:71:E2:45:5E:57:B6
            X509v3 Authority Key Identifier:
                keyid:8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/34352e372e34302e302f32322d3232203d3e20323636353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:00:c9:d9:ea:73:5a:28:30:5e:07:1c:16:7d:71:80:06:28:
         8c:bd:c0:50:0d:4d:99:f8:9b:7d:7c:98:52:ec:4c:71:a4:75:
         3f:b8:2b:06:2f:6d:5a:9e:03:63:0e:50:25:c3:28:0d:1a:d3:
         cb:58:82:7f:ec:03:9e:e1:f0:d7:ac:4d:dd:bd:3b:cd:7a:77:
         bf:41:4d:62:b1:24:2f:58:56:48:d5:f7:e0:85:fa:ed:68:e2:
         00:fb:cd:3e:ab:1d:f9:a7:20:5d:88:7b:eb:f5:62:be:38:c4:
         c6:5d:ed:85:f2:38:f4:fe:08:50:77:45:6a:7e:8d:a4:ed:76:
         cd:f1:e8:7d:f9:1f:5e:3d:b8:e9:db:9b:ce:38:80:5e:5f:97:
         25:1c:0a:e4:75:ce:98:ba:09:60:a7:aa:06:8d:f8:4c:d0:00:
         e8:24:3b:44:d6:49:e4:fc:92:11:64:25:11:51:ac:3b:7a:3c:
         d1:84:ad:02:bc:07:71:de:41:df:d3:bc:fc:a8:87:23:97:f1:
         38:f9:ff:72:77:f9:4e:7d:12:0e:3b:38:53:d2:d2:cc:aa:eb:
         72:e7:9d:89:60:12:22:c2:aa:91:d7:07:2d:ca:3d:b0:ab:8c:
         62:0c:46:ca:29:91:22:c2:56:5f:86:ce:3a:5b:e2:21:5a:31:
         91:b0:2c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:50:10 2025 by rpki-client