Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134322e302f32332d3233203d3e20323637333239.roa
File:                     34352e3233322e3134322e302f32332d3233203d3e20323637333239.roa (raw, json)
Hash identifier:          1FPBixm38WHhRinLI+8Ju+G3qEXr8wi8InNnjYKQJUE=
Subject key identifier:   9D:8A:16:75:BA:52:17:D2:A3:0D:65:C2:5F:E7:51:75:30:00:E8:AB
Certificate issuer:       /CN=794E629B0678092652C7896E669B6A838A268C5A
Certificate serial:       4BDF04C875893FB7076C55926FFE3D037F0B8785
Authority key identifier: 79:4E:62:9B:06:78:09:26:52:C7:89:6E:66:9B:6A:83:8A:26:8C:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134322e302f32332d3233203d3e20323637333239.roa
Signing time:             Thu 07 Aug 2025 15:40:03 +0000
ROA not before:           Thu 07 Aug 2025 15:35:03 +0000
ROA not after:            Thu 06 Aug 2026 15:40:03 +0000
asID:                     267329
IP address blocks:        45.232.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:df:04:c8:75:89:3f:b7:07:6c:55:92:6f:fe:3d:03:7f:0b:87:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794E629B0678092652C7896E669B6A838A268C5A
        Validity
            Not Before: Aug  7 15:35:03 2025 GMT
            Not After : Aug  6 15:40:03 2026 GMT
        Subject: CN=9D8A1675BA5217D2A30D65C25FE751753000E8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:e5:0f:46:17:a4:89:43:ec:48:48:0c:b9:
                    a0:5c:2c:b0:2b:73:0f:1f:9b:d3:99:0b:d1:1c:2a:
                    2e:a5:f5:03:0a:2f:81:c1:17:80:88:5f:bf:eb:1c:
                    ae:a2:22:e0:50:5a:ff:08:06:13:0d:ab:4f:42:38:
                    cc:ff:98:6a:32:12:d8:f7:14:27:99:14:be:b0:15:
                    2f:ea:2a:f6:6e:fa:fb:58:45:fd:c9:45:9e:be:74:
                    0a:c5:bd:f4:45:9d:bc:77:8a:01:ab:d7:01:60:9a:
                    96:d5:b9:e1:c6:00:9d:88:cd:cb:a8:09:4c:f1:d3:
                    da:0c:d4:7f:55:01:2f:8b:56:21:2e:88:13:b0:d8:
                    b4:4e:86:d0:df:59:0f:68:bf:ef:9f:54:64:24:d6:
                    ba:e8:c8:d9:93:67:68:18:92:83:6f:ef:08:bb:48:
                    10:36:a4:b1:4f:da:87:3e:c0:4f:89:df:34:26:99:
                    ca:8a:c8:78:78:de:67:ff:aa:53:e2:08:36:ee:42:
                    03:13:f2:cf:86:dc:66:d5:e7:6b:b9:cd:11:fa:ef:
                    b9:2a:0a:7b:33:de:80:75:9d:a4:0e:10:19:71:f2:
                    be:97:e7:4a:6a:29:27:06:c9:99:04:68:0b:b5:ec:
                    ef:99:44:14:14:a9:8f:7b:3c:b3:1e:d5:2d:68:14:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8A:16:75:BA:52:17:D2:A3:0D:65:C2:5F:E7:51:75:30:00:E8:AB
            X509v3 Authority Key Identifier:
                keyid:79:4E:62:9B:06:78:09:26:52:C7:89:6E:66:9B:6A:83:8A:26:8C:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134322e302f32332d3233203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:22:04:49:5b:cf:fc:e2:84:58:e9:7e:c4:53:63:62:7d:12:
         97:3b:1d:22:ba:54:82:2a:90:60:24:71:0c:6e:9f:2e:da:bb:
         a8:9f:fb:5e:f9:4c:38:9b:74:b1:68:97:54:33:d1:48:42:38:
         89:3b:5a:85:b2:89:6a:5e:d7:fd:3c:9c:aa:ac:40:c1:f9:39:
         a5:e0:12:e7:dd:43:b9:2d:7a:e0:53:18:37:8f:0f:46:c9:c3:
         66:20:ec:d0:51:c7:0e:30:a3:1f:3e:4c:40:4a:56:f5:7d:ee:
         8c:75:0b:20:02:e6:f7:6b:21:78:be:7a:a3:68:3c:45:20:62:
         fc:82:ce:98:23:10:cb:d5:74:8a:d4:0e:48:25:6e:47:43:2d:
         98:7d:33:62:9e:90:16:90:87:46:dd:5a:3c:d0:5c:5b:b0:24:
         63:0c:d8:71:85:ac:b7:bf:4b:00:ed:3b:f8:4d:c3:20:48:96:
         77:ec:bd:b3:3d:32:a1:bf:7e:97:24:70:55:18:c7:cb:31:25:
         29:2f:a6:4d:44:40:64:52:16:59:35:88:3f:e0:2f:50:e9:f4:
         ec:df:f4:5a:b3:9a:69:4c:0e:40:4a:5d:ac:f4:5f:60:10:89:
         c0:92:66:d0:fe:36:3e:b5:65:8a:ab:0e:2b:38:30:e7:d5:fd:
         91:cd:6b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:33:58 2025 by rpki-client