Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/34352e3233342e34392e302f32342d3234203d3e20323637333533.roa
File:                     34352e3233342e34392e302f32342d3234203d3e20323637333533.roa (raw, json)
Hash identifier:          dZH8ZxBMw0oZDUrL/jw2vuUaVyuoflPFTd7ol71clGw=
Subject key identifier:   3D:C4:DB:B6:01:30:56:5B:46:A5:B0:90:52:CD:FD:B3:5D:D4:E2:59
Certificate issuer:       /CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
Certificate serial:       2721B5C08C8E5300FD082C0A7DF4575A4E70757B
Authority key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/34352e3233342e34392e302f32342d3234203d3e20323637333533.roa
Signing time:             Sat 06 Sep 2025 13:07:46 +0000
ROA not before:           Sat 06 Sep 2025 13:02:46 +0000
ROA not after:            Sat 05 Sep 2026 13:07:46 +0000
asID:                     267353
IP address blocks:        45.234.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl
                          rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:21:b5:c0:8c:8e:53:00:fd:08:2c:0a:7d:f4:57:5a:4e:70:75:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
        Validity
            Not Before: Sep  6 13:02:46 2025 GMT
            Not After : Sep  5 13:07:46 2026 GMT
        Subject: CN=3DC4DBB60130565B46A5B09052CDFDB35DD4E259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8a:94:b1:f3:94:17:85:0b:1b:73:93:3c:39:
                    b8:7b:c0:a8:d4:c5:fb:1e:d1:87:35:be:ff:12:fd:
                    8b:bb:22:6e:4e:7c:46:93:3d:e8:02:e4:f7:82:af:
                    07:ed:7f:2d:eb:d4:a8:34:e2:5d:2e:e4:ed:f0:68:
                    e1:36:71:e5:62:22:b7:af:4d:2a:73:9c:29:f5:ae:
                    3e:ea:6c:9e:b2:c4:78:b6:b8:94:8c:c7:57:09:f3:
                    6c:1e:52:a2:d3:08:75:63:44:84:5d:99:4c:80:ea:
                    8b:8e:44:77:9d:b8:88:d7:69:90:e2:98:fe:7a:77:
                    ee:26:fd:aa:20:17:b0:64:62:da:43:92:4c:30:06:
                    f5:af:7b:b8:77:0a:10:d4:2c:8b:7c:9d:8d:32:06:
                    07:59:7e:97:27:d2:f8:38:ea:14:13:03:7d:65:9b:
                    c0:c2:a6:6d:43:6f:8f:ae:f6:0d:6b:fb:39:27:0b:
                    4b:b2:4c:6e:0c:d8:10:ea:9a:5e:a0:aa:01:0e:86:
                    20:f1:62:89:cd:94:1f:8f:07:ca:55:fd:73:6c:37:
                    06:3b:32:16:8c:82:6c:81:5b:87:4e:ad:d9:1e:7c:
                    3a:1b:73:d9:d8:11:ca:63:f5:2f:85:d0:d7:a1:e3:
                    1e:6c:32:86:d8:f6:ce:b9:8b:5c:14:50:6b:ac:9f:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C4:DB:B6:01:30:56:5B:46:A5:B0:90:52:CD:FD:B3:5D:D4:E2:59
            X509v3 Authority Key Identifier:
                keyid:74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/34352e3233342e34392e302f32342d3234203d3e20323637333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:26:42:f0:74:f8:3a:f9:f0:c6:14:e9:a0:c4:3d:a4:d2:27:
         c7:bd:10:cc:f7:2b:91:50:4d:26:ce:2c:28:6b:3d:37:22:f8:
         7c:b7:ce:45:6a:9d:3e:b6:c5:24:55:b6:68:44:17:08:3f:9e:
         09:d9:08:d9:e3:83:8e:a0:c4:0e:5f:5f:8a:76:c8:b7:1b:73:
         50:7a:a2:c2:0d:92:3c:9f:e9:b5:c4:a3:f3:82:75:c2:ea:18:
         8e:75:3c:7e:38:c5:ae:ea:7f:91:17:69:a5:80:88:ba:f2:1a:
         a1:0c:18:75:67:b2:7b:54:6c:ed:3f:6d:08:af:a8:e6:06:4b:
         4b:6b:a3:f4:0a:ef:2b:fe:43:18:6b:a2:ae:2b:86:86:27:af:
         84:15:0f:41:4c:2d:b8:c5:eb:ff:b7:42:3c:94:73:8f:49:f7:
         e9:c3:b1:4a:6e:81:19:06:5e:ef:4b:b0:ec:11:44:e4:f5:f5:
         a5:54:c5:7b:bf:84:dd:f7:4e:90:ca:f8:38:80:ea:9c:94:82:
         9c:ad:c8:aa:f3:24:8c:b7:2e:1a:af:f0:0e:e4:99:78:da:3c:
         83:e4:ea:7f:7e:b2:72:25:3f:bc:9e:06:62:2a:7f:0c:f4:2b:
         63:58:4b:d3:b1:59:19:63:db:2f:d7:97:11:dc:16:8d:e2:60:
         1a:99:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:40:47 2025 by rpki-client