Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa
File:                     34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa (raw, json)
Hash identifier:          u4vxwdC/Vm4BxLFrw347cV1aKyGF5wyQSZiJYKVZ51g=
Subject key identifier:   F7:6C:19:21:94:86:09:BB:7B:E5:9C:20:0A:CB:DF:CC:D5:E8:9F:11
Certificate issuer:       /CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20
Certificate serial:       7354BA9020A27DA816BDFA3881ED0B15183BB17C
Authority key identifier: 2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa
Signing time:             Fri 22 Aug 2025 19:41:33 +0000
ROA not before:           Fri 22 Aug 2025 19:36:33 +0000
ROA not after:            Fri 21 Aug 2026 19:41:33 +0000
asID:                     267657
IP address blocks:        45.224.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl
                          rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 06:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:54:ba:90:20:a2:7d:a8:16:bd:fa:38:81:ed:0b:15:18:3b:b1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20
        Validity
            Not Before: Aug 22 19:36:33 2025 GMT
            Not After : Aug 21 19:41:33 2026 GMT
        Subject: CN=F76C1921948609BB7BE59C200ACBDFCCD5E89F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:78:cd:b3:d1:52:7d:bf:74:1a:c6:28:6b:
                    55:1a:e3:ce:d1:91:55:5b:89:68:d5:6d:75:f7:10:
                    be:24:62:06:a3:4e:b4:ab:7e:33:4e:13:89:54:19:
                    e4:a6:ac:fc:5c:fb:9c:b9:a0:d2:a6:17:91:26:1a:
                    f7:fc:a1:12:48:c4:ba:50:6e:e7:b0:d7:f8:8a:de:
                    fd:e4:7a:1c:89:b7:2f:1d:f5:78:6f:63:a9:aa:28:
                    0d:72:ba:6b:c6:51:dd:02:3e:e1:4b:12:40:08:f2:
                    dc:65:b1:91:01:a8:20:65:79:5c:f8:ba:4f:1f:21:
                    df:88:c5:0d:d8:03:89:d3:d5:7c:84:98:14:17:11:
                    e0:78:b3:89:d9:03:1c:8b:5e:88:c3:92:ad:3a:4a:
                    a3:f3:ad:e3:54:c9:6d:74:3f:d9:29:ae:ed:58:73:
                    16:3d:21:24:da:a3:ac:14:2b:e3:a0:c4:d5:ed:5b:
                    a8:ea:19:df:8f:f0:3f:4b:b0:6f:34:1a:60:fd:e7:
                    55:96:e0:cb:3d:5f:5e:36:8b:74:a1:8c:6b:b5:5b:
                    a9:14:ca:5c:a2:01:aa:c7:67:f4:43:a2:b5:fb:60:
                    fe:6e:74:00:32:63:10:d5:ce:e9:d8:43:5e:64:dc:
                    6f:85:12:4e:51:8d:7a:a5:8e:90:15:5f:41:81:7f:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:19:21:94:86:09:BB:7B:E5:9C:20:0A:CB:DF:CC:D5:E8:9F:11
            X509v3 Authority Key Identifier:
                keyid:2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:5e:84:69:55:1a:37:a0:b3:36:8a:15:47:e8:b8:b6:7e:67:
         d2:80:b0:7a:1d:fe:a5:54:36:7d:0d:f4:cb:b7:10:46:22:8c:
         88:53:32:8e:09:1c:e8:23:2e:e3:78:70:63:10:43:30:d0:0d:
         cc:3b:97:90:2b:b8:04:da:44:b1:5a:8f:12:84:89:89:59:64:
         bc:66:0b:65:ea:aa:17:ac:7c:3c:30:c3:d8:7a:d6:2b:55:96:
         ab:e1:f1:3a:cd:ab:10:e8:d8:7d:bb:56:d5:c5:e8:43:69:73:
         de:a1:4a:bc:c5:f7:3f:74:32:0f:62:c9:a5:1b:91:dc:b7:7b:
         38:20:7d:73:0a:fa:8d:d4:67:bd:4c:15:14:f3:f4:ba:a8:50:
         9e:7c:56:40:00:dd:41:15:28:32:3f:16:c1:69:97:91:f4:ef:
         3d:c7:5c:43:07:3a:ae:dd:10:4b:4e:5a:79:6e:e7:45:26:30:
         e4:9d:2e:c9:cd:fa:cc:06:e4:0e:4e:6b:e2:27:c8:8f:cb:83:
         35:ff:7f:a4:c3:7e:d4:25:ea:cc:ac:98:a9:47:80:0c:e8:3f:
         9d:1d:84:3c:64:14:1e:db:b3:d6:e7:69:c6:f3:6d:8d:35:2c:
         9e:dc:fd:fe:cd:d0:1b:49:c1:46:04:55:f5:c7:00:72:a7:88:
         40:ff:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:04:37 2025 by rpki-client