Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/34352e3136302e3232382e302f32322d3332203d3e20323730373234.roa
File:                     34352e3136302e3232382e302f32322d3332203d3e20323730373234.roa (raw, json)
Hash identifier:          apiMZOTuoCPu0nI8Ljt6nzTzBjuneeSIxNjEV+NCOQo=
Subject key identifier:   E4:28:94:D8:4A:9A:64:30:2F:98:D8:6F:7F:CB:61:A0:2A:A6:47:31
Certificate issuer:       /CN=331A5DDD5E7A3EE354C08E8A7D87875342BC753F
Certificate serial:       0B574F64DBB4A52C42AE45FC44AC224FDA609C3E
Authority key identifier: 33:1A:5D:DD:5E:7A:3E:E3:54:C0:8E:8A:7D:87:87:53:42:BC:75:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/34352e3136302e3232382e302f32322d3332203d3e20323730373234.roa
Signing time:             Wed 10 Sep 2025 20:19:13 +0000
ROA not before:           Wed 10 Sep 2025 20:14:13 +0000
ROA not after:            Wed 09 Sep 2026 20:19:13 +0000
asID:                     270724
IP address blocks:        45.160.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.crl
                          rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:57:4f:64:db:b4:a5:2c:42:ae:45:fc:44:ac:22:4f:da:60:9c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331A5DDD5E7A3EE354C08E8A7D87875342BC753F
        Validity
            Not Before: Sep 10 20:14:13 2025 GMT
            Not After : Sep  9 20:19:13 2026 GMT
        Subject: CN=E42894D84A9A64302F98D86F7FCB61A02AA64731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bb:0c:0e:4b:89:86:00:e0:d3:81:ee:73:53:
                    08:1b:79:d8:8c:fa:93:6c:79:96:c6:f6:57:b9:07:
                    2c:30:f5:b1:3e:e3:26:c1:47:52:13:8c:02:20:be:
                    fa:0a:3b:ea:e8:ef:5d:3f:20:b7:69:65:65:af:58:
                    ca:8d:fa:37:89:24:4a:e0:37:7d:d6:70:96:30:57:
                    43:22:03:e5:e6:0e:84:49:31:91:3d:4f:06:de:c9:
                    7f:77:e8:a1:1c:dc:8f:84:d4:a4:24:7b:d5:83:c4:
                    ca:a3:9d:7e:21:08:0f:ea:d6:28:b7:3d:87:31:36:
                    82:89:a5:18:0a:92:5b:ff:bd:1e:86:e2:48:07:28:
                    04:5e:e5:ba:7b:01:3a:19:0f:32:8c:9b:60:3d:c7:
                    bc:02:84:96:d5:46:ec:1e:d4:8e:59:2e:e6:16:49:
                    e6:61:a1:87:88:68:3b:8d:e5:96:42:c3:c0:05:40:
                    ba:af:c3:1b:33:31:93:f2:12:93:ec:38:c9:39:93:
                    97:fa:93:3e:bd:37:9c:78:6d:e5:3a:4c:d0:57:96:
                    ab:96:ad:e3:ec:32:c8:af:d7:86:d2:bd:56:a7:79:
                    e5:d8:8c:5a:6b:2b:9f:e0:01:67:23:bb:97:d7:33:
                    34:ec:23:fa:f3:8e:27:f6:86:97:da:16:50:10:2a:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:28:94:D8:4A:9A:64:30:2F:98:D8:6F:7F:CB:61:A0:2A:A6:47:31
            X509v3 Authority Key Identifier:
                keyid:33:1A:5D:DD:5E:7A:3E:E3:54:C0:8E:8A:7D:87:87:53:42:BC:75:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/34352e3136302e3232382e302f32322d3332203d3e20323730373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:23:83:6d:6b:17:cf:25:b2:68:f5:dd:f7:47:de:b2:70:1f:
         5c:72:0b:ba:3a:8f:52:fe:80:7b:b8:6e:5b:98:89:d7:cd:7c:
         d7:e1:07:52:de:1e:b4:7c:67:51:47:46:6a:2e:59:7b:2f:23:
         ef:85:f5:08:6a:54:94:b2:d2:62:c6:31:50:83:48:ec:5a:3c:
         a9:85:76:30:b9:9a:83:b8:be:38:0d:4f:85:8d:3a:58:4d:f4:
         88:c6:e6:81:b5:0a:ab:03:94:44:fc:27:41:6c:e2:82:fb:5b:
         bf:ab:f6:34:02:56:a6:12:38:c9:5f:b2:9e:9f:7a:37:93:90:
         84:0b:5e:0b:80:3d:93:39:ce:0c:b1:ec:9b:43:f2:bb:96:3d:
         45:ac:aa:93:a1:74:cd:52:36:f4:9c:ae:04:99:71:6c:7a:db:
         48:5c:41:55:57:71:be:86:32:61:cd:e4:24:80:47:d8:b3:79:
         d8:01:a9:65:6a:c3:52:c1:3d:29:0e:79:c7:eb:08:cd:05:62:
         d8:01:86:9b:e5:04:42:0f:ff:59:b2:b9:35:c0:9a:12:53:82:
         fb:8a:85:ee:a8:0e:e1:d0:f6:6b:17:b3:5a:07:19:64:76:21:
         72:14:77:89:a5:ad:3d:a1:8a:f5:74:85:71:13:84:06:53:0e:
         08:9f:e7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:37:52 2025 by rpki-client