Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134342e302f32322d3332203d3e20323638313937.roa
File:                     34352e3233352e3134342e302f32322d3332203d3e20323638313937.roa (raw, json)
Hash identifier:          S7Da8DFMxkjKDB/XOb75nmWzM4CyLgqNGvwkOLEUA58=
Subject key identifier:   7B:8F:EE:44:07:92:FD:D5:16:D7:79:E3:64:7F:8E:84:6E:DE:92:83
Certificate issuer:       /CN=E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F
Certificate serial:       65E6B09F3C02B635374504E2F480A242410DD213
Authority key identifier: E2:5C:D2:A4:A3:97:9D:30:BC:2F:FF:CF:02:4D:BE:94:CD:0D:8D:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134342e302f32322d3332203d3e20323638313937.roa
Signing time:             Mon 11 Aug 2025 17:09:28 +0000
ROA not before:           Mon 11 Aug 2025 17:04:28 +0000
ROA not after:            Mon 10 Aug 2026 17:09:28 +0000
asID:                     268197
IP address blocks:        45.235.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.crl
                          rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 23:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e6:b0:9f:3c:02:b6:35:37:45:04:e2:f4:80:a2:42:41:0d:d2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F
        Validity
            Not Before: Aug 11 17:04:28 2025 GMT
            Not After : Aug 10 17:09:28 2026 GMT
        Subject: CN=7B8FEE440792FDD516D779E3647F8E846EDE9283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:46:07:a9:89:a3:d0:d6:4f:cf:e1:82:87:7c:
                    92:69:c2:ac:f9:94:4c:a9:69:5d:63:d1:cf:4b:7c:
                    1b:c3:84:55:68:fc:5d:88:0b:a3:11:15:f8:4d:4c:
                    d0:e8:52:68:d7:a1:08:4e:be:f1:91:78:07:cb:5b:
                    7e:3e:a9:33:64:85:38:07:ed:39:8a:71:c1:ac:d2:
                    7d:14:59:11:a9:1e:06:6e:34:71:35:1c:ee:ef:0c:
                    65:cf:c9:22:bf:90:b6:4a:7f:a1:e6:0d:3f:32:f0:
                    38:13:35:48:e2:31:14:08:c0:0b:8c:ed:c9:7d:ac:
                    b4:c9:b4:31:b3:c4:27:a3:fe:34:de:49:4a:ea:40:
                    27:6c:aa:e0:d5:7b:c0:8a:25:04:97:69:ad:b7:58:
                    82:d8:89:4a:86:a0:74:2b:32:80:40:81:35:aa:e0:
                    f7:e2:e5:73:ec:ba:b3:7c:e3:78:20:30:c6:c2:69:
                    b8:5f:3e:21:0a:2e:0f:35:b3:ca:cb:a7:98:b3:53:
                    7e:f8:c9:15:6e:89:41:d3:4a:a6:01:51:09:70:8c:
                    47:35:b2:30:b6:63:ef:5b:bb:c6:4a:12:80:89:04:
                    05:67:c4:8d:0d:b3:49:e4:b9:5e:85:83:68:a8:88:
                    ce:6e:c7:c3:62:76:4c:b1:87:32:f6:10:9c:1d:b5:
                    a3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8F:EE:44:07:92:FD:D5:16:D7:79:E3:64:7F:8E:84:6E:DE:92:83
            X509v3 Authority Key Identifier:
                keyid:E2:5C:D2:A4:A3:97:9D:30:BC:2F:FF:CF:02:4D:BE:94:CD:0D:8D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25CD2A4A3979D30BC2FFFCF024DBE94CD0D8D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134342e302f32322d3332203d3e20323638313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:fa:7a:9a:69:81:89:57:11:26:77:7d:01:4e:c9:9a:7d:46:
         aa:6d:40:e6:69:da:4a:a7:92:88:c1:bb:32:46:6e:c6:67:4b:
         80:01:ac:e2:de:05:52:20:96:54:e9:cb:54:7c:4a:37:c2:a7:
         21:23:d4:3d:82:f3:71:f5:ec:3c:43:e0:19:69:8f:3a:11:5c:
         af:3b:40:8c:88:f2:70:ed:86:81:b7:83:25:b7:df:bf:83:80:
         19:10:7e:74:65:38:2f:ce:c1:33:66:d5:79:38:42:f2:73:8b:
         45:5f:7b:c3:76:a8:95:31:45:10:64:6d:ea:0b:8c:10:e8:da:
         5f:e1:c2:1d:42:1d:e2:8e:21:f3:48:28:1e:00:70:59:a1:3b:
         2a:c4:93:e3:8f:83:95:a5:a6:08:ae:4e:5b:b8:fe:07:42:32:
         91:4d:2e:3a:0b:23:02:00:39:6e:4c:50:d5:ee:a8:f4:6e:82:
         62:c0:17:5a:83:e0:78:85:e3:0b:9c:ad:dc:9d:f3:c9:c4:75:
         33:eb:e8:65:0f:34:a3:f5:ab:85:87:58:47:54:f2:c1:ee:ae:
         20:6b:12:9a:74:17:f5:3e:b5:45:06:65:bf:ec:5d:4f:b3:87:
         5a:be:04:02:72:40:d9:40:bd:a3:19:4a:74:06:f8:ab:92:1d:
         8c:83:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:20:21 2025 by rpki-client