Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/34352e372e34302e302f32342d3234203d3e20323636353635.roa
File:                     34352e372e34302e302f32342d3234203d3e20323636353635.roa (raw, json)
Hash identifier:          OHHMZjAn7tNHdZvW0ZXKwKxpI0rsxlXvSQnsflVSJUA=
Subject key identifier:   72:AD:94:B8:F2:86:F8:AC:B6:80:EF:1E:BB:40:C1:64:27:E7:26:E2
Certificate issuer:       /CN=8D2922D358225395ABA691BA6723BAA778294D49
Certificate serial:       59B9FC9DE7BC507EC5F365614D0655AD0293B349
Authority key identifier: 8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/34352e372e34302e302f32342d3234203d3e20323636353635.roa
Signing time:             Sat 19 Jul 2025 02:12:47 +0000
ROA not before:           Sat 19 Jul 2025 02:07:47 +0000
ROA not after:            Sat 18 Jul 2026 02:12:47 +0000
asID:                     266565
IP address blocks:        45.7.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl
                          rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 02:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b9:fc:9d:e7:bc:50:7e:c5:f3:65:61:4d:06:55:ad:02:93:b3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2922D358225395ABA691BA6723BAA778294D49
        Validity
            Not Before: Jul 19 02:07:47 2025 GMT
            Not After : Jul 18 02:12:47 2026 GMT
        Subject: CN=72AD94B8F286F8ACB680EF1EBB40C16427E726E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d9:e1:b1:43:28:72:36:ba:a9:52:f1:11:73:
                    c9:5f:c9:a3:dc:3e:34:9e:b2:0b:c4:7e:4a:fb:5c:
                    60:4e:cf:f0:e4:8b:cf:8e:65:64:4c:04:9f:00:ad:
                    af:19:25:b2:c1:1e:11:8f:58:32:17:57:7b:d7:04:
                    dc:8d:f2:28:70:18:5a:54:04:d8:d3:f2:19:c0:4e:
                    4c:02:1f:db:db:58:98:5d:bf:c7:b7:f4:02:3c:36:
                    70:f6:88:96:b7:54:27:f3:36:63:f3:4a:f8:2c:ab:
                    ea:a5:c0:28:96:db:33:cb:b5:98:21:a9:63:07:9d:
                    45:b7:b5:22:84:ef:d1:87:15:77:04:a3:43:55:f3:
                    a2:2c:0e:8d:99:92:e9:1d:01:ce:67:ee:bb:6b:d1:
                    0f:3c:56:a3:38:62:22:08:24:e3:80:33:60:bf:a5:
                    10:ec:3d:83:e6:4f:9b:2d:d7:fa:4b:22:7c:26:af:
                    83:41:32:55:92:99:9a:90:10:4a:76:80:5a:19:b8:
                    aa:6f:90:9e:50:47:bc:a8:28:0b:1a:dd:4d:86:bb:
                    fa:0c:7a:97:76:bb:2a:05:9f:8c:8c:68:32:73:23:
                    f1:64:e6:d9:c7:17:b1:ed:d9:f2:11:53:42:08:68:
                    e9:7f:c8:c0:19:b5:d6:00:7b:bd:f0:b6:33:ea:d3:
                    83:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AD:94:B8:F2:86:F8:AC:B6:80:EF:1E:BB:40:C1:64:27:E7:26:E2
            X509v3 Authority Key Identifier:
                keyid:8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/34352e372e34302e302f32342d3234203d3e20323636353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:29:76:50:74:1b:f9:b5:4b:89:25:a4:42:cb:47:2c:91:52:
         18:22:14:fb:0c:76:f1:c5:8c:24:8b:39:86:2e:c6:fa:bb:98:
         89:e6:e4:11:64:32:3f:a2:41:be:5d:2a:08:e5:db:fa:05:54:
         30:ab:30:25:ed:ab:e3:4b:22:13:57:2f:28:50:8c:0b:42:8d:
         88:aa:7d:b2:b9:f7:6e:39:4a:bb:05:d9:8e:49:2f:83:39:6a:
         6f:98:90:32:24:73:28:55:84:48:5b:c1:0a:ad:89:5a:c0:53:
         26:14:3a:0a:a6:5e:71:8d:56:35:4c:86:b6:80:5b:86:da:bf:
         24:56:4d:83:3c:80:75:f5:e7:50:7a:a6:82:64:c9:bf:b1:c0:
         92:00:01:c9:db:41:8b:27:f2:ee:52:dc:9c:d9:db:d1:57:c6:
         78:25:4f:37:24:1e:65:1d:eb:bf:5e:6b:d6:22:43:d3:03:76:
         30:ff:87:e6:2b:ae:05:35:39:26:ba:59:1b:0c:cd:23:2c:5f:
         66:14:98:61:f9:ca:d8:68:9c:86:4a:40:fe:9d:a5:78:7d:85:
         c5:e8:7a:e8:f2:d0:1b:32:0e:84:91:9e:92:f9:ca:cf:6d:59:
         37:21:b2:59:06:67:6c:28:f7:66:65:d7:c0:8a:0b:91:ab:79:
         93:46:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:52:57 2025 by rpki-client