Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230302e302f32332d3233203d3e20323638383239.roa
File:                     34352e3232392e3230302e302f32332d3233203d3e20323638383239.roa (raw, json)
Hash identifier:          6CAIWRDc+lNgH8Iuwr9lS0AkWpOdYXqeQ7zXgbfTp9E=
Subject key identifier:   7E:3A:36:2F:D2:16:64:6C:C0:92:F6:BA:60:71:91:E0:AE:69:91:5F
Certificate issuer:       /CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
Certificate serial:       428209540F75CD07636085143B6AEC920A531F73
Authority key identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230302e302f32332d3233203d3e20323638383239.roa
Signing time:             Fri 18 Jul 2025 18:08:55 +0000
ROA not before:           Fri 18 Jul 2025 18:03:55 +0000
ROA not after:            Fri 17 Jul 2026 18:08:55 +0000
asID:                     268829
IP address blocks:        45.229.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:82:09:54:0f:75:cd:07:63:60:85:14:3b:6a:ec:92:0a:53:1f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
        Validity
            Not Before: Jul 18 18:03:55 2025 GMT
            Not After : Jul 17 18:08:55 2026 GMT
        Subject: CN=7E3A362FD216646CC092F6BA607191E0AE69915F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:dc:12:78:a6:1c:a8:7e:e2:85:6e:e3:42:
                    67:1a:d5:76:ee:39:19:a3:e1:86:83:02:60:09:92:
                    9d:46:5b:ad:b6:a8:36:21:da:ca:09:be:27:c7:02:
                    d8:4f:32:31:22:97:70:1c:86:5c:d8:b0:20:bd:1b:
                    d2:be:6b:b4:55:06:29:d5:57:6d:c3:85:ec:4b:c2:
                    99:31:66:46:27:8a:e5:6c:38:e8:b0:68:48:60:d2:
                    3e:61:56:9b:3d:96:89:b0:70:98:ec:a8:e5:8b:5b:
                    e0:0c:4e:ef:4f:8d:d6:21:46:a6:fa:15:31:c7:63:
                    3f:46:c2:f4:c3:d6:32:0f:2b:b2:ff:fb:69:7b:be:
                    e7:56:3a:48:09:a8:80:9a:b1:61:0a:8d:69:63:7f:
                    9b:84:4c:a6:81:46:d2:21:3e:0b:f7:49:87:ce:d6:
                    09:00:e5:56:e1:ef:80:26:55:25:c9:33:0a:61:7e:
                    54:cf:d0:6b:72:3d:42:22:74:32:4e:00:e9:f1:86:
                    3e:de:b7:5d:70:5d:c4:71:67:70:06:18:e6:1c:a1:
                    4d:c7:69:79:48:fe:be:64:b6:72:ea:61:69:3d:ac:
                    dd:a1:2e:ac:98:ca:41:48:f9:e4:c4:4b:ec:99:c1:
                    fe:2c:2f:9a:19:ea:25:4f:a1:18:84:8e:52:89:c6:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3A:36:2F:D2:16:64:6C:C0:92:F6:BA:60:71:91:E0:AE:69:91:5F
            X509v3 Authority Key Identifier:
                keyid:31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230302e302f32332d3233203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:de:8d:21:96:94:61:98:ed:77:32:d0:1b:37:60:17:84:47:
         b4:d4:62:53:e9:a7:ec:9a:50:4d:82:12:65:40:63:c9:78:b3:
         71:41:6c:cc:54:b3:ec:03:48:a0:45:c0:14:fc:f3:5f:80:1a:
         72:bd:bb:e9:84:ad:6d:f2:9c:ad:66:79:f0:b8:8f:d1:2c:b5:
         81:f2:26:54:c2:29:84:7c:62:71:5e:a7:fc:e7:93:1d:24:12:
         b5:97:f2:4f:6c:5b:83:34:d2:cd:6a:f7:9b:a5:75:36:c1:ff:
         c8:86:ab:f2:cc:bb:fa:d0:c6:50:28:10:54:9b:65:10:da:a0:
         a9:fa:c6:c8:b9:54:53:5a:7d:ac:e2:d6:26:8d:3b:f6:70:83:
         74:18:a6:2d:5a:f8:d0:26:8e:01:11:f8:df:52:36:52:63:0b:
         c3:cc:c0:47:f3:3f:41:74:42:0a:83:6a:66:df:59:e2:42:e0:
         29:8a:e7:82:00:25:e1:94:af:09:8f:aa:13:79:aa:b8:80:0f:
         35:b5:58:33:38:8b:58:37:5b:b8:fa:0c:12:fc:29:e0:83:2a:
         d0:42:f1:fb:ff:d9:c5:06:ab:46:92:b9:40:ad:16:27:3b:0a:
         be:03:cc:ba:83:cf:e7:68:2e:80:c5:6d:5d:3d:09:8b:df:6a:
         92:6e:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:31:51 2025 by rpki-client