Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          +teesOMzrdUE5q3CJznVWsA05wjopyfzV4KQiB1JW9o=
Subject key identifier:   55:F3:9F:57:DF:37:DE:FC:F5:4C:1B:3C:48:84:1B:E1:B1:6E:DD:17
Certificate issuer:       /CN=FA3907829FD3FBDB932447112E7CCAE0C541AF99
Certificate serial:       77A2A278ABBACD0AAD0EE3ADE231723D2B7D51D0
Authority key identifier: FA:39:07:82:9F:D3:FB:DB:93:24:47:11:2E:7C:CA:E0:C5:41:AF:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA3907829FD3FBDB932447112E7CCAE0C541AF99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa
Signing time:             Thu 24 Jul 2025 01:41:55 +0000
ROA not before:           Thu 24 Jul 2025 01:36:55 +0000
ROA not after:            Thu 23 Jul 2026 01:41:55 +0000
asID:                     268205
IP address blocks:        45.236.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/FA3907829FD3FBDB932447112E7CCAE0C541AF99.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/FA3907829FD3FBDB932447112E7CCAE0C541AF99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA3907829FD3FBDB932447112E7CCAE0C541AF99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 02:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a2:a2:78:ab:ba:cd:0a:ad:0e:e3:ad:e2:31:72:3d:2b:7d:51:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA3907829FD3FBDB932447112E7CCAE0C541AF99
        Validity
            Not Before: Jul 24 01:36:55 2025 GMT
            Not After : Jul 23 01:41:55 2026 GMT
        Subject: CN=55F39F57DF37DEFCF54C1B3C48841BE1B16EDD17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:6f:ba:ac:54:da:62:e8:e1:4f:6d:d0:77:
                    3f:4c:90:a5:63:fd:ee:3b:13:99:b0:3e:37:c8:92:
                    c3:4c:c8:9e:13:a8:da:85:cb:03:21:8f:71:8a:a2:
                    18:57:f3:e1:26:56:d7:46:9e:1f:8b:48:57:44:99:
                    e7:77:4f:66:95:e3:f6:e6:44:0a:de:64:49:c4:ce:
                    ea:34:3a:24:05:43:2c:dd:ef:e1:8e:b9:0e:f3:26:
                    10:d7:de:7a:47:ea:e8:69:0c:64:4e:47:5c:42:e6:
                    35:68:22:42:4f:3b:b2:6d:be:01:09:a6:4b:07:ba:
                    70:54:ba:6b:5e:c8:b7:2a:02:77:a6:81:42:c1:ed:
                    ef:7d:14:46:50:19:7b:b0:8c:1c:3f:e9:2e:ed:e5:
                    8a:64:7f:8e:9c:6e:3a:74:4d:25:12:66:77:08:08:
                    77:8f:0c:7f:01:4d:d2:08:e2:a7:65:53:d9:e0:65:
                    bf:e6:2e:dc:1c:c3:dd:9c:de:1d:0b:36:e1:0d:90:
                    ef:d1:a2:25:eb:44:89:62:cc:2a:07:23:bd:a9:6d:
                    5d:ef:f8:5c:d1:d0:ba:a7:3a:66:30:73:1c:e6:75:
                    f6:79:1a:9c:f3:68:58:ac:60:33:11:e3:78:a1:94:
                    67:d2:b5:50:2f:78:af:b4:1a:1d:f7:a5:8f:15:2b:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F3:9F:57:DF:37:DE:FC:F5:4C:1B:3C:48:84:1B:E1:B1:6E:DD:17
            X509v3 Authority Key Identifier:
                keyid:FA:39:07:82:9F:D3:FB:DB:93:24:47:11:2E:7C:CA:E0:C5:41:AF:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/FA3907829FD3FBDB932447112E7CCAE0C541AF99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA3907829FD3FBDB932447112E7CCAE0C541AF99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:89:80:ef:6e:0e:b8:4f:be:0e:69:14:34:35:81:31:8b:a9:
         a6:e3:ac:69:9d:42:2d:fc:e5:e8:24:79:29:5a:ac:a9:82:67:
         80:f0:35:11:c2:7a:45:ba:52:a6:50:d4:01:31:8b:04:4c:fc:
         40:5f:74:2f:b0:92:aa:37:f7:75:01:d3:d8:98:d9:88:87:82:
         63:79:b8:88:2a:31:f7:df:1d:e4:0b:7e:33:ef:c2:e0:11:86:
         e4:22:96:b6:11:7e:e0:74:15:f9:ba:cc:37:9b:d0:0a:a6:07:
         04:63:78:98:2b:de:58:a6:e8:5d:62:57:41:54:6e:82:50:09:
         eb:64:c8:b1:0a:20:c7:2f:9a:c6:cc:bd:fa:a1:dd:a7:81:9e:
         b1:fc:ff:12:b0:46:b8:79:b9:55:93:3c:21:ad:f4:4d:6c:12:
         a0:7e:5e:85:5d:65:46:fb:4e:93:d4:b7:5b:9c:23:90:76:6e:
         33:ac:6c:ad:94:bd:c2:a9:17:dd:6a:3e:c0:3d:59:98:71:b8:
         5f:82:de:b9:b0:42:5c:37:4b:b0:55:d6:e4:2b:90:cd:12:0e:
         c6:5a:46:32:90:73:c4:98:4d:16:9a:a7:c6:e9:90:9c:25:31:
         e2:e9:cc:59:16:65:01:10:6c:a7:bd:a0:bb:c2:79:9a:af:c5:
         9f:41:2d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:01:39 2025 by rpki-client