Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa
File:                     34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (raw, json)
Hash identifier:          oJObu+JWyCm0e0MRn4eLLnRMK/5rAwAKtSrFpI3LuNQ=
Subject key identifier:   EA:2B:08:4B:35:F3:91:58:A5:C8:62:28:45:65:41:9C:08:19:26:98
Certificate issuer:       /CN=FA3907829FD3FBDB932447112E7CCAE0C541AF99
Certificate serial:       6452D61D3D2309C1144D72733C0E61B1113CE60C
Authority key identifier: FA:39:07:82:9F:D3:FB:DB:93:24:47:11:2E:7C:CA:E0:C5:41:AF:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA3907829FD3FBDB932447112E7CCAE0C541AF99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa
Signing time:             Thu 24 Jul 2025 01:41:24 +0000
ROA not before:           Thu 24 Jul 2025 01:36:24 +0000
ROA not after:            Thu 23 Jul 2026 01:41:24 +0000
asID:                     268205
IP address blocks:        45.236.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/FA3907829FD3FBDB932447112E7CCAE0C541AF99.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/FA3907829FD3FBDB932447112E7CCAE0C541AF99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA3907829FD3FBDB932447112E7CCAE0C541AF99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 08:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:52:d6:1d:3d:23:09:c1:14:4d:72:73:3c:0e:61:b1:11:3c:e6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA3907829FD3FBDB932447112E7CCAE0C541AF99
        Validity
            Not Before: Jul 24 01:36:24 2025 GMT
            Not After : Jul 23 01:41:24 2026 GMT
        Subject: CN=EA2B084B35F39158A5C862284565419C08192698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:65:9f:70:86:54:10:82:11:15:81:b0:02:
                    18:ea:7f:b8:09:bf:d3:5b:cc:f7:82:ce:b8:e6:44:
                    28:e0:a0:14:31:f4:80:89:58:97:20:b1:11:af:d5:
                    f2:40:94:61:2e:07:ae:7a:8d:44:85:37:cd:3f:52:
                    9e:55:cb:0b:e5:58:6b:96:01:2d:d7:7c:8d:7f:4c:
                    ee:00:bf:e7:7f:87:cb:a1:29:63:60:80:7d:27:b0:
                    9d:f4:1a:5e:3f:4e:41:ba:77:a6:7d:75:64:15:c4:
                    c3:06:a0:49:4b:27:5a:77:2f:76:39:9d:61:81:90:
                    39:29:56:74:3f:ca:25:a6:5f:5b:ce:d3:b7:3b:1c:
                    9e:b7:f1:35:99:fb:8e:d8:69:ed:16:b4:a1:94:0e:
                    da:38:ea:a2:ea:14:6b:e4:a9:fc:48:7e:ae:06:f2:
                    87:cd:6a:c0:a6:0a:b0:5a:c1:57:e8:58:71:89:43:
                    8b:b6:ed:8b:8b:c5:6c:f3:44:de:7b:ec:92:42:15:
                    b1:63:3b:b7:c4:03:3d:ea:31:d3:6b:3f:b6:3c:50:
                    50:84:00:81:d7:8b:a7:64:dd:fa:20:fa:20:fb:63:
                    6b:96:05:24:14:26:a5:74:fd:1e:ef:c7:16:f3:3b:
                    93:1d:26:d9:c8:8b:ff:16:71:e9:50:0e:91:18:7a:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2B:08:4B:35:F3:91:58:A5:C8:62:28:45:65:41:9C:08:19:26:98
            X509v3 Authority Key Identifier:
                keyid:FA:39:07:82:9F:D3:FB:DB:93:24:47:11:2E:7C:CA:E0:C5:41:AF:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/FA3907829FD3FBDB932447112E7CCAE0C541AF99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA3907829FD3FBDB932447112E7CCAE0C541AF99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:8f:e5:d7:26:36:da:7e:74:2e:b0:69:64:b8:0b:70:b7:
         50:44:ae:8f:37:e0:2f:4d:7d:1c:72:31:de:67:70:03:b5:fa:
         1d:e9:b0:2c:48:07:23:a9:4e:33:6f:c6:8b:19:d2:ac:bc:d9:
         21:03:21:5e:94:cf:08:78:44:75:08:25:11:d7:58:51:f0:d7:
         2d:3b:c9:a1:06:37:e7:c1:f3:91:75:42:3a:02:9c:5d:ed:61:
         6a:33:cc:3b:7b:f6:df:5f:5c:88:05:38:b2:f7:4d:49:4d:69:
         9f:93:c3:cd:3b:6c:95:9e:17:3e:6b:f7:c9:08:ec:66:9e:21:
         a9:68:7d:81:7d:e5:5f:df:dd:6c:40:8f:57:9b:6f:fe:bc:2f:
         17:be:c3:dc:04:01:45:df:6f:71:f2:1d:28:15:f4:10:d1:77:
         43:5d:55:04:cc:53:5b:12:13:87:39:0b:f2:0a:2f:38:b9:b8:
         53:eb:7d:fe:a1:ac:b3:17:22:c5:43:2f:81:fe:72:dc:98:45:
         68:3b:e9:01:ef:70:6f:9b:1e:91:2f:47:89:f1:71:37:ff:e9:
         98:80:d3:2d:5b:fd:85:c7:e8:6d:3f:a8:42:d6:19:27:b5:24:
         7f:16:02:78:eb:ae:9f:68:9d:34:44:ad:c4:4b:3f:b9:ce:f1:
         c4:db:53:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:39:41 2025 by rpki-client