Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/34352e3232392e36342e302f32322d3332203d3e20323637313033.roa
File:                     34352e3232392e36342e302f32322d3332203d3e20323637313033.roa (raw, json)
Hash identifier:          3fzkXThuz1dKAUO66kh3dpbrn22doisComTiGJtQ/8c=
Subject key identifier:   82:E8:97:0F:72:4B:52:1E:47:D0:FC:84:B0:A7:A2:AB:A7:30:C9:7A
Certificate issuer:       /CN=C7795D5DB71F280F943DFC5D9EBD915A2B3B576C
Certificate serial:       3A0F0C080E27000D27744BB778125D20B542FC65
Authority key identifier: C7:79:5D:5D:B7:1F:28:0F:94:3D:FC:5D:9E:BD:91:5A:2B:3B:57:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7795D5DB71F280F943DFC5D9EBD915A2B3B576C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/34352e3232392e36342e302f32322d3332203d3e20323637313033.roa
Signing time:             Fri 08 Aug 2025 18:25:54 +0000
ROA not before:           Fri 08 Aug 2025 18:20:54 +0000
ROA not after:            Fri 07 Aug 2026 18:25:54 +0000
asID:                     267103
IP address blocks:        45.229.64.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/C7795D5DB71F280F943DFC5D9EBD915A2B3B576C.crl
                          rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/C7795D5DB71F280F943DFC5D9EBD915A2B3B576C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7795D5DB71F280F943DFC5D9EBD915A2B3B576C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Aug 2025 03:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0f:0c:08:0e:27:00:0d:27:74:4b:b7:78:12:5d:20:b5:42:fc:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7795D5DB71F280F943DFC5D9EBD915A2B3B576C
        Validity
            Not Before: Aug  8 18:20:54 2025 GMT
            Not After : Aug  7 18:25:54 2026 GMT
        Subject: CN=82E8970F724B521E47D0FC84B0A7A2ABA730C97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:9d:ba:8f:af:7e:c8:7a:ee:b0:96:ae:63:
                    37:5f:b1:f0:f7:e3:b0:59:04:88:71:ca:f4:1e:b0:
                    27:f5:af:68:ae:f5:cd:03:72:51:61:67:e6:7b:e2:
                    4d:ae:1d:c4:94:73:58:84:2e:19:76:20:7c:b9:5b:
                    84:b7:78:bb:82:ae:04:55:b4:20:29:7f:d1:2f:d2:
                    52:e8:fd:6a:d7:23:ba:4b:05:4a:e4:b8:e1:22:05:
                    5f:27:d1:6d:ac:e9:23:66:4c:9d:e8:d8:3c:56:0c:
                    53:55:d3:cd:7a:f6:c4:be:ee:69:36:df:ba:96:70:
                    42:6b:e8:c2:ad:2f:c6:48:43:b9:31:8c:17:62:03:
                    a7:1a:c6:54:2a:51:bd:a4:7a:57:36:27:4d:fd:87:
                    5f:0b:3f:c4:7b:0b:09:50:e5:1a:d3:32:92:f4:98:
                    62:1a:72:37:df:69:56:23:54:a4:0c:ba:9f:05:05:
                    f4:ec:2f:cb:ec:b5:e3:00:f0:83:55:a8:06:66:39:
                    71:e4:f7:8f:09:5b:76:2d:1e:8e:d8:55:de:71:f5:
                    a4:f1:a8:b9:cc:0b:d2:a9:28:13:fe:6d:36:80:0e:
                    e4:c7:e2:49:6b:a7:71:d7:e8:41:f6:f0:02:41:2f:
                    77:67:58:03:2d:ae:db:1f:64:4d:1d:51:6e:ac:51:
                    a2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E8:97:0F:72:4B:52:1E:47:D0:FC:84:B0:A7:A2:AB:A7:30:C9:7A
            X509v3 Authority Key Identifier:
                keyid:C7:79:5D:5D:B7:1F:28:0F:94:3D:FC:5D:9E:BD:91:5A:2B:3B:57:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/C7795D5DB71F280F943DFC5D9EBD915A2B3B576C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7795D5DB71F280F943DFC5D9EBD915A2B3B576C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/34352e3232392e36342e302f32322d3332203d3e20323637313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:4e:68:15:81:7f:0f:8d:ce:6a:8c:ee:e7:ae:43:eb:db:14:
         63:e7:d6:38:1c:cc:5a:db:65:60:c7:a7:3c:4a:93:43:06:c1:
         2f:dc:f2:67:78:3e:e7:01:80:22:37:cb:c8:e9:07:a3:a3:8e:
         bf:15:47:68:44:82:29:05:dd:bc:b7:d6:9f:0e:43:35:da:25:
         84:1a:e9:81:0b:4c:ac:de:30:0d:11:9c:81:da:c2:04:f2:39:
         5c:98:77:f2:d4:2f:4a:2f:b6:aa:90:8d:34:a4:63:2f:44:84:
         5f:c5:cb:40:4b:88:46:9e:90:4e:9a:b5:a9:57:b3:a5:b3:00:
         ae:e3:7a:cc:16:a4:cc:cd:cf:45:8e:42:f8:87:98:c8:ad:26:
         1b:23:a9:72:55:be:4d:37:11:e6:f1:60:40:aa:4c:15:9d:fe:
         6f:4c:27:4e:35:35:1c:20:30:08:2d:aa:6f:34:4b:10:68:7d:
         eb:3a:1f:00:b5:f1:0b:ce:a0:1f:f6:5b:70:46:7b:49:b1:0f:
         71:9f:a6:e8:ac:16:fc:a4:9f:93:85:d8:cf:85:c5:51:42:b6:
         ef:6a:f3:72:ec:ec:61:4c:91:55:81:dd:ad:57:59:7f:ff:96:
         86:54:d9:27:45:c8:43:de:b8:32:12:3a:9b:4b:6b:ad:de:e6:
         2b:ac:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:58:11 2025 by rpki-client