Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa
File:                     34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa (raw, json)
Hash identifier:          8+ncv4PpM4DM301JN4ClDTHx5lTa0NPvqYuanlBEvDI=
Subject key identifier:   E4:D6:C9:B4:BC:81:4B:BA:3D:36:CA:CC:1F:99:A9:20:C6:08:AD:BB
Certificate issuer:       /CN=F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4
Certificate serial:       6FF9A015FBB7A89B29EEDD520B91647F1DEF2D8C
Authority key identifier: F9:AA:3F:12:A4:FC:F0:B7:33:F0:FF:95:94:2F:6F:21:D7:7D:63:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa
Signing time:             Mon 04 Aug 2025 14:49:31 +0000
ROA not before:           Mon 04 Aug 2025 14:44:31 +0000
ROA not after:            Mon 03 Aug 2026 14:49:31 +0000
asID:                     267229
IP address blocks:        45.231.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.crl
                          rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 04:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f9:a0:15:fb:b7:a8:9b:29:ee:dd:52:0b:91:64:7f:1d:ef:2d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4
        Validity
            Not Before: Aug  4 14:44:31 2025 GMT
            Not After : Aug  3 14:49:31 2026 GMT
        Subject: CN=E4D6C9B4BC814BBA3D36CACC1F99A920C608ADBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:82:8c:ad:a9:40:68:6c:89:fa:90:b0:b1:
                    bf:90:1b:3e:9e:cf:f6:6f:85:b9:39:fe:55:68:10:
                    fd:f5:82:18:21:3f:6d:62:89:3e:16:a4:9e:16:87:
                    16:91:68:ea:78:b4:a4:66:ba:6b:55:94:f3:42:75:
                    eb:ed:5b:5e:cc:3f:1e:86:09:6e:65:50:59:bb:1c:
                    1c:fd:94:b8:f3:bc:3d:46:94:a7:e8:93:85:11:31:
                    7a:de:28:be:92:a1:f5:49:a4:dc:88:87:53:29:05:
                    d8:c9:13:57:05:fc:7f:b3:42:ab:c6:e3:e9:af:21:
                    18:30:69:8b:a1:3a:3a:42:5c:10:a0:ab:fa:56:4b:
                    c9:ef:ae:77:10:f2:63:42:30:54:e5:1e:27:e6:3d:
                    8f:4d:ba:81:ca:d6:14:3b:8b:cd:5c:bf:a1:49:d4:
                    62:ae:1c:56:31:36:dd:f4:cf:6a:25:09:7d:04:91:
                    24:44:50:dd:50:59:74:6e:b2:72:09:c6:d1:df:43:
                    55:d4:b2:fe:95:cd:7f:db:ca:da:ea:05:1b:14:6b:
                    a8:ee:97:36:24:9b:07:52:65:1c:4f:48:d1:6f:ae:
                    69:36:f6:fd:a3:d9:a4:03:05:87:40:06:2f:7a:8a:
                    f4:2e:6f:ed:79:ff:23:71:02:7b:a2:99:98:3c:e8:
                    29:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D6:C9:B4:BC:81:4B:BA:3D:36:CA:CC:1F:99:A9:20:C6:08:AD:BB
            X509v3 Authority Key Identifier:
                keyid:F9:AA:3F:12:A4:FC:F0:B7:33:F0:FF:95:94:2F:6F:21:D7:7D:63:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:d6:07:3a:0c:02:32:db:dc:ed:cc:13:fe:af:50:9e:d5:31:
         d9:26:00:4c:e5:ea:e8:30:05:a8:40:f2:94:34:2a:9b:e9:09:
         3d:74:0e:36:0c:47:c1:60:c8:ba:de:00:2a:2d:e4:85:6b:0d:
         d0:18:b4:09:48:02:af:15:53:0d:5d:95:a8:7f:82:59:b9:96:
         ba:a2:0a:88:19:ad:86:8d:80:56:87:71:3e:b6:36:b1:08:fa:
         81:4f:88:00:0a:79:24:29:34:67:a8:e9:3b:49:b8:54:54:ed:
         a1:68:ae:58:6e:2d:db:8f:06:6d:65:12:64:f0:f2:2a:a9:0a:
         ca:28:f4:44:c8:bb:02:d2:13:7b:ff:e7:d4:f9:a8:10:c6:19:
         21:73:cd:a1:59:e6:73:5d:43:76:0e:40:f4:34:2c:fb:78:7b:
         e9:3a:39:cf:13:95:15:7d:e6:f4:95:eb:2f:1f:b0:96:2d:f3:
         d4:ac:6a:d5:3b:e7:55:6b:31:d3:5e:8b:9c:3a:45:5e:f7:56:
         5a:08:ae:b2:13:c4:f5:ac:34:1d:fe:ac:23:01:03:0d:f4:52:
         99:df:d4:86:b9:b4:74:1d:d8:9f:f9:38:18:a7:9c:66:a7:69:
         08:96:7d:78:d9:af:5a:e5:17:4d:dd:fc:06:70:50:18:ad:e5:
         17:9e:b8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:50:47 2025 by rpki-client