Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa
File:                     34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa (raw, json)
Hash identifier:          VtTyk0EvimIgnb+bU1GSQduJIme+GhUx6AVs6Artn7g=
Subject key identifier:   7A:D8:DF:E6:E2:D0:88:A5:A1:CC:C4:E2:D2:EE:1D:C4:BB:9E:5B:CA
Certificate issuer:       /CN=794E629B0678092652C7896E669B6A838A268C5A
Certificate serial:       69E22BFE29E65532D2C6D19B134569E1D7DF983C
Authority key identifier: 79:4E:62:9B:06:78:09:26:52:C7:89:6E:66:9B:6A:83:8A:26:8C:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa
Signing time:             Thu 07 Aug 2025 15:40:03 +0000
ROA not before:           Thu 07 Aug 2025 15:35:03 +0000
ROA not after:            Thu 06 Aug 2026 15:40:03 +0000
asID:                     267329
IP address blocks:        45.232.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e2:2b:fe:29:e6:55:32:d2:c6:d1:9b:13:45:69:e1:d7:df:98:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794E629B0678092652C7896E669B6A838A268C5A
        Validity
            Not Before: Aug  7 15:35:03 2025 GMT
            Not After : Aug  6 15:40:03 2026 GMT
        Subject: CN=7AD8DFE6E2D088A5A1CCC4E2D2EE1DC4BB9E5BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:7f:dd:44:bb:2f:9b:4b:d3:bf:87:3b:30:
                    dc:87:f2:e4:6b:51:6f:4a:ca:71:37:66:a5:d8:5d:
                    e8:7e:2a:91:96:81:6c:f5:a6:af:bb:1f:a4:eb:1f:
                    b4:88:00:2e:bb:6d:7f:3e:24:10:75:3b:7f:91:1b:
                    98:e8:09:40:8c:8f:aa:9b:5d:3a:44:f1:cb:12:f1:
                    8a:34:89:78:11:f0:07:1e:02:d6:67:cd:03:a3:c4:
                    2b:73:86:2d:ef:72:ed:fb:fb:56:75:f1:3c:59:c2:
                    30:0e:90:aa:3a:c7:50:2e:a9:a7:cb:56:6e:31:4a:
                    ee:33:11:cf:8a:6d:f1:39:b2:2c:19:a9:70:a1:a3:
                    56:cb:d2:d8:08:57:60:8b:d4:97:e3:3b:a9:af:5a:
                    f1:41:ec:a8:6d:b5:76:f4:e0:7b:69:4a:86:a3:03:
                    07:43:5d:6b:4f:36:fe:9d:df:4a:ff:ee:69:c0:40:
                    4f:c1:4e:57:68:c0:c5:67:94:2c:68:b8:03:4b:22:
                    ff:a2:35:30:a9:dc:13:5e:be:e2:ae:2c:78:51:c6:
                    8a:04:22:49:ad:04:23:f5:3d:3c:88:f8:4f:c7:96:
                    b1:08:04:79:d4:ea:87:7e:fc:12:0b:25:d9:22:d3:
                    e3:cd:0f:d9:c3:30:08:0c:e9:71:8d:bb:81:39:d5:
                    1d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D8:DF:E6:E2:D0:88:A5:A1:CC:C4:E2:D2:EE:1D:C4:BB:9E:5B:CA
            X509v3 Authority Key Identifier:
                keyid:79:4E:62:9B:06:78:09:26:52:C7:89:6E:66:9B:6A:83:8A:26:8C:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:9c:0a:23:6b:04:c5:59:67:74:0f:5c:e2:bf:73:f6:14:5b:
         5a:87:32:ab:d6:c0:16:e6:00:df:52:d7:6b:e0:71:fd:d9:f2:
         90:d8:1e:04:9d:aa:a2:bc:f9:cb:15:4d:d3:9e:1f:8a:f6:82:
         bb:06:4b:7e:df:db:98:f1:7a:a7:ca:f7:f0:7b:79:a1:99:22:
         8a:70:5d:b6:b4:ef:85:f8:74:58:c7:45:29:c5:24:2c:af:80:
         3c:16:48:3a:89:82:55:c3:81:ba:f8:b0:4f:16:89:8e:9d:ff:
         40:3f:32:63:e5:09:90:74:e0:dd:3a:3b:3c:1d:3e:1e:cb:52:
         58:d1:b9:8a:25:e6:59:97:96:31:51:f5:9f:8c:6d:dc:bf:33:
         07:80:0c:2b:96:56:15:f9:f1:52:2d:fa:b9:50:70:43:2f:81:
         17:1a:5e:0b:4f:de:b0:06:23:ea:fb:b4:96:fa:70:3b:21:83:
         43:c4:28:34:a5:5e:7b:94:39:cf:7b:1c:bb:2e:e8:9b:f5:c5:
         01:34:8f:23:45:77:92:33:59:cd:49:f3:d0:0f:0a:a3:1f:77:
         c5:d6:fd:01:e4:0a:c2:17:86:12:5e:fe:d7:91:36:7c:65:4f:
         a3:be:10:62:ed:21:09:e0:d6:3d:18:31:6d:33:e0:65:89:91:
         94:9c:7f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:35:19 2025 by rpki-client