Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/34352e372e34332e302f32342d3234203d3e20323636353635.roa
File:                     34352e372e34332e302f32342d3234203d3e20323636353635.roa (raw, json)
Hash identifier:          FTs0xVsYxIuX8GPJf6xe1XeWm70/IBxfRVc5dFakbxY=
Subject key identifier:   D7:17:0D:29:64:39:4F:85:C4:B4:FE:17:65:DE:28:68:10:40:D8:00
Certificate issuer:       /CN=8D2922D358225395ABA691BA6723BAA778294D49
Certificate serial:       208027100D7F50A976CCA34975C5736485783EED
Authority key identifier: 8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/34352e372e34332e302f32342d3234203d3e20323636353635.roa
Signing time:             Sat 19 Jul 2025 02:12:55 +0000
ROA not before:           Sat 19 Jul 2025 02:07:55 +0000
ROA not after:            Sat 18 Jul 2026 02:12:55 +0000
asID:                     266565
IP address blocks:        45.7.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl
                          rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 20:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:80:27:10:0d:7f:50:a9:76:cc:a3:49:75:c5:73:64:85:78:3e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2922D358225395ABA691BA6723BAA778294D49
        Validity
            Not Before: Jul 19 02:07:55 2025 GMT
            Not After : Jul 18 02:12:55 2026 GMT
        Subject: CN=D7170D2964394F85C4B4FE1765DE28681040D800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:d7:90:18:81:83:cb:ac:13:7d:f5:5b:75:
                    27:b6:23:a8:8f:bb:33:da:30:87:7a:07:8a:66:9a:
                    7d:97:47:13:19:9e:4c:49:43:25:68:7a:e7:07:74:
                    2d:c1:41:71:5f:91:f4:57:4c:36:47:b4:fa:ef:32:
                    b6:ca:bb:8e:98:a1:7c:35:eb:43:b3:1a:cf:fd:4d:
                    7b:70:ea:9c:48:58:7d:1d:59:4b:3c:e5:7e:d9:72:
                    7a:fd:95:df:37:3d:bb:09:e7:73:ba:87:35:30:db:
                    9b:44:59:3b:87:ed:b9:6a:eb:28:df:50:1f:c2:f1:
                    8c:79:db:81:b4:5e:ee:d5:73:01:04:00:de:6e:45:
                    30:d5:53:db:e0:59:17:52:ca:07:e2:a1:32:fc:89:
                    a6:79:8e:d2:55:68:5d:91:78:76:13:97:ea:aa:55:
                    31:1b:23:7c:46:2f:e8:67:8b:eb:6b:71:cc:eb:f8:
                    f1:7f:00:7c:1a:d4:4a:10:46:55:3d:f9:94:1d:66:
                    44:80:34:32:0c:42:c3:57:ae:aa:65:94:bf:98:6d:
                    27:b0:a3:08:f2:1d:c5:1a:00:a9:43:1c:36:71:25:
                    48:02:6b:21:ad:39:81:9d:e9:58:98:ac:d5:42:a2:
                    6e:72:10:87:d7:94:68:0b:31:be:97:1f:2d:e3:a4:
                    b5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:17:0D:29:64:39:4F:85:C4:B4:FE:17:65:DE:28:68:10:40:D8:00
            X509v3 Authority Key Identifier:
                keyid:8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/34352e372e34332e302f32342d3234203d3e20323636353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:8d:48:6c:bb:5d:57:7e:49:be:f8:c4:93:1c:4f:a5:b1:90:
         da:3d:64:f0:bd:99:73:c6:8a:6e:6d:67:94:78:7a:08:19:99:
         ec:76:76:68:8c:c7:df:fb:ca:2d:50:1a:f9:2d:0b:0f:41:0b:
         c0:b6:6c:57:8f:55:da:77:46:c7:e2:f4:65:03:fc:e7:e5:c6:
         3f:3e:da:d9:78:21:60:71:4b:6e:b6:e7:92:59:bb:95:aa:17:
         ca:ad:19:dc:10:63:03:39:90:e5:48:f8:2c:b1:9b:92:95:a3:
         2e:64:e1:d1:e3:b4:23:dc:6c:1a:c4:0e:91:6a:c8:8e:84:81:
         03:de:2d:b7:86:38:ab:13:7b:c3:96:b9:cb:cc:d7:5e:fd:bb:
         ce:10:5b:99:73:5f:88:1d:d4:13:6a:44:4f:1e:4e:10:41:5e:
         1c:fc:67:c4:9f:e4:a1:c7:32:33:76:9b:f0:20:1c:c8:30:54:
         07:d1:77:94:a3:04:f4:ea:48:70:f6:fd:e7:18:ca:50:7a:ee:
         5f:70:91:88:87:0d:15:57:54:1e:19:b8:59:b4:eb:dc:41:d0:
         2e:67:40:c4:33:72:6f:d9:bf:72:db:d7:d4:28:71:43:05:6f:
         7e:37:88:73:e6:17:0a:d5:d8:38:c4:3b:4e:1e:b1:08:32:8f:
         43:8b:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:57:22 2025 by rpki-client