Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32332d3233203d3e20323638333038.roa
File:                     34352e3233382e342e302f32332d3233203d3e20323638333038.roa (raw, json)
Hash identifier:          yxN/MnhKCc8IdJAsEcowy/8udHtOJHjl/DEOLBcqbgo=
Subject key identifier:   61:42:87:9F:15:95:A4:40:62:CB:3A:B6:13:12:56:19:00:DA:5E:B2
Certificate issuer:       /CN=22384FCE6FE91AF1802DF9209B165E8A616D2AC1
Certificate serial:       2392F7930FCF3F9862EFA63FA57117A06D431CFE
Authority key identifier: 22:38:4F:CE:6F:E9:1A:F1:80:2D:F9:20:9B:16:5E:8A:61:6D:2A:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32332d3233203d3e20323638333038.roa
Signing time:             Thu 05 Jun 2025 13:15:20 +0000
ROA not before:           Thu 05 Jun 2025 13:10:20 +0000
ROA not after:            Thu 04 Jun 2026 13:15:20 +0000
asID:                     268308
IP address blocks:        45.238.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:92:f7:93:0f:cf:3f:98:62:ef:a6:3f:a5:71:17:a0:6d:43:1c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22384FCE6FE91AF1802DF9209B165E8A616D2AC1
        Validity
            Not Before: Jun  5 13:10:20 2025 GMT
            Not After : Jun  4 13:15:20 2026 GMT
        Subject: CN=6142879F1595A44062CB3AB61312561900DA5EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:70:83:88:6d:70:c3:21:01:c5:2a:20:77:
                    8f:cf:33:a4:b2:9d:e8:bb:73:c7:f9:7d:aa:6d:6f:
                    39:98:45:82:cd:99:be:98:15:1a:75:75:b6:de:76:
                    00:a3:da:12:2d:37:dc:65:59:5a:2c:a0:fe:72:f5:
                    3f:35:e9:69:64:7a:bb:97:24:c1:84:fb:72:86:64:
                    a4:cd:51:e8:ee:2c:8e:97:f9:5f:d7:e6:64:8e:3e:
                    87:e7:0d:a8:4d:ca:d7:84:7d:cd:5c:20:2b:48:3e:
                    b5:7b:b2:e5:cc:d7:86:09:f3:27:0b:00:9f:08:ea:
                    24:c7:4f:c3:dc:2a:66:a2:f0:e1:af:a5:85:7f:f6:
                    93:54:56:5d:96:2f:d9:4b:8c:dc:6e:15:b3:57:96:
                    01:ae:b0:b9:30:d9:37:ad:ce:a4:f8:b9:eb:63:10:
                    40:59:ad:22:20:ff:61:fd:33:f9:19:b7:4e:c2:59:
                    2d:59:67:c2:97:cb:49:89:6e:25:29:6c:7b:cb:f5:
                    68:74:03:ca:b4:e1:7a:a6:33:b5:bf:38:24:96:14:
                    67:c8:60:a4:a0:35:b7:d5:63:5b:a0:db:fd:e3:70:
                    2d:05:4e:ea:31:5b:a1:cb:82:72:be:b1:b8:b6:6c:
                    32:d3:68:80:58:e4:8c:62:48:d1:d4:04:e0:bb:20:
                    38:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:42:87:9F:15:95:A4:40:62:CB:3A:B6:13:12:56:19:00:DA:5E:B2
            X509v3 Authority Key Identifier:
                keyid:22:38:4F:CE:6F:E9:1A:F1:80:2D:F9:20:9B:16:5E:8A:61:6D:2A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32332d3233203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:80:7a:65:ff:80:dc:a9:f7:45:7d:9a:c7:49:74:e9:ba:60:
         c7:a6:67:c8:33:a0:f2:ae:01:d3:ff:83:86:0b:a1:57:fa:50:
         38:29:e1:b1:eb:de:5c:e8:27:71:22:e5:31:0f:99:47:65:8e:
         63:8a:cb:f9:1c:36:d6:27:16:a1:84:37:e2:c1:38:2c:07:bb:
         4b:8e:b7:c1:27:4b:6d:0d:25:ff:b0:d5:71:21:71:ec:91:20:
         ad:cb:fd:cf:e4:03:4b:9b:dd:b0:76:27:81:38:8a:41:9d:e0:
         e3:73:33:f6:bc:27:af:93:b2:7d:da:50:72:4f:56:6e:d0:8b:
         7a:a0:e3:96:cc:16:91:3a:71:98:b7:ec:7a:83:11:0a:0b:74:
         ed:48:f2:5e:9b:ad:08:3e:b9:4d:16:7e:f8:a4:d0:47:4e:d6:
         f7:f1:6a:60:83:77:34:8f:e0:e9:71:2a:37:01:07:b0:3f:7b:
         39:25:f0:3a:1b:27:3d:7c:5f:d5:86:43:a0:8f:ea:16:82:01:
         b3:ed:71:ef:b4:e7:30:d5:d4:e5:32:51:c5:f1:99:37:b2:88:
         0b:38:e7:c2:87:98:35:7e:12:48:e6:26:87:2c:57:65:de:df:
         c7:45:05:53:87:51:fc:a6:5e:2b:64:52:7b:29:d5:cc:cc:74:
         2b:9e:15:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:58:35 2025 by rpki-client