Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32322d3232203d3e20323632353033.roa
File:                     34352e3138312e3232382e302f32322d3232203d3e20323632353033.roa (raw, json)
Hash identifier:          z/QoLoKMUoa0EDhMbznCLVNrMr4LUi9voEbB6wDyRD4=
Subject key identifier:   F5:24:8A:FE:5B:EB:77:40:E9:BF:F3:2C:77:42:9A:D0:4D:77:9C:21
Certificate issuer:       /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial:       19D79D054C24BFBCED2CFC18BA2CC6C823CC7118
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32322d3232203d3e20323632353033.roa
Signing time:             Tue 19 Aug 2025 20:06:23 +0000
ROA not before:           Tue 19 Aug 2025 20:01:23 +0000
ROA not after:            Tue 18 Aug 2026 20:06:23 +0000
asID:                     262503
IP address blocks:        45.181.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d7:9d:05:4c:24:bf:bc:ed:2c:fc:18:ba:2c:c6:c8:23:cc:71:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
        Validity
            Not Before: Aug 19 20:01:23 2025 GMT
            Not After : Aug 18 20:06:23 2026 GMT
        Subject: CN=F5248AFE5BEB7740E9BFF32C77429AD04D779C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:32:c8:41:cd:cf:8d:e5:b4:5d:dd:58:df:
                    79:0e:75:bb:ca:82:cc:4c:d7:2d:d6:d1:d7:28:b7:
                    b8:38:23:2f:97:e7:b4:f6:b2:bc:78:d8:af:10:f4:
                    7e:c7:ce:82:06:3d:fb:d1:85:c8:76:55:9b:2a:a4:
                    7a:0f:db:64:8d:c7:a5:6e:09:ed:b3:f3:f7:13:69:
                    f4:b8:31:b8:ed:d0:5f:f7:c0:c2:d3:da:73:4f:f2:
                    54:88:56:6b:6a:87:ac:49:8a:37:d1:59:12:84:c6:
                    90:8c:d9:d3:09:7b:ed:cc:dc:ea:7c:83:80:41:9a:
                    f7:d0:2c:46:2b:c0:b5:95:6b:84:12:a7:b1:b7:6f:
                    f4:6b:7b:48:13:52:23:a4:b7:af:78:72:31:56:2c:
                    ba:a4:7b:e1:2f:44:82:66:76:0a:ae:d8:dd:f2:d4:
                    50:2b:99:ba:a2:3d:5a:f4:66:4c:c5:a7:64:67:d1:
                    5e:2b:91:65:7e:fd:04:a6:d0:65:ce:f5:90:6b:42:
                    b7:c5:af:5a:ce:f7:4a:16:f9:e2:65:0a:cb:cb:e4:
                    ff:a0:0d:cb:0b:56:35:3a:ea:e4:da:96:12:b7:8c:
                    0d:7d:6d:cf:f8:b5:3e:0a:c4:0d:ec:b6:d0:82:c5:
                    07:7a:a9:ec:aa:03:4e:c9:82:9b:a2:9b:93:08:79:
                    62:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:24:8A:FE:5B:EB:77:40:E9:BF:F3:2C:77:42:9A:D0:4D:77:9C:21
            X509v3 Authority Key Identifier:
                keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32322d3232203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:fd:7e:22:d3:ff:11:85:28:c7:e7:99:50:f4:67:70:9b:fb:
         58:6d:26:f9:9b:d1:d1:97:c6:49:66:1a:94:16:45:58:7e:49:
         8c:56:18:3a:f6:c2:fc:4c:0d:e6:b8:e5:66:15:71:7b:69:91:
         1e:bc:df:ef:74:62:01:e4:ab:9b:83:91:8d:62:1b:9d:97:11:
         e5:ff:7d:f6:c2:6d:e4:29:5c:e9:3b:9e:0f:29:c3:2d:24:b1:
         da:18:23:d2:87:86:b8:e8:f3:3f:06:ea:58:ef:98:b5:c8:bb:
         5d:60:80:45:e3:b9:a7:9d:f6:35:cf:4b:18:e8:52:5d:90:43:
         f4:1f:4c:8a:66:47:77:96:c8:44:ce:a8:1f:21:1f:cf:b1:e5:
         f9:02:28:b3:7f:c6:2d:a0:17:05:bb:81:41:7b:d9:a9:c0:53:
         5a:66:1a:e2:cb:24:53:18:28:77:a2:87:fe:d8:fd:cd:23:e1:
         e5:b7:31:6a:23:de:d2:89:68:a4:8c:f8:30:80:bf:7c:c5:3a:
         e1:07:19:9d:1a:5c:49:23:9e:4d:c2:39:a5:6c:bf:f2:c2:18:
         e8:a3:72:39:9d:66:0e:0a:08:b8:e2:8b:40:83:4d:cd:6b:e1:
         b5:39:1a:5b:ef:e7:bd:d4:f1:cf:22:76:ff:6c:0b:3d:3a:26:
         4f:34:3f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:23:18 2025 by rpki-client