Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/34352e3136382e342e302f32322d3332203d3e20323638303437.roa
File:                     34352e3136382e342e302f32322d3332203d3e20323638303437.roa (raw, json)
Hash identifier:          2jrHaa+hwH2oFt1Zl6Q8aSVdxmSJjuGdjSzRULxSjCM=
Subject key identifier:   80:D4:42:3A:27:EA:FA:8D:75:DB:DB:EC:E4:47:AA:D9:88:4E:5B:8B
Certificate issuer:       /CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD
Certificate serial:       0DAE96A89534C8BDA576B933065775B0B077656A
Authority key identifier: C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/34352e3136382e342e302f32322d3332203d3e20323638303437.roa
Signing time:             Tue 09 Sep 2025 17:42:29 +0000
ROA not before:           Tue 09 Sep 2025 17:37:29 +0000
ROA not after:            Tue 08 Sep 2026 17:42:29 +0000
asID:                     268047
IP address blocks:        45.168.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl
                          rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 02:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ae:96:a8:95:34:c8:bd:a5:76:b9:33:06:57:75:b0:b0:77:65:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD
        Validity
            Not Before: Sep  9 17:37:29 2025 GMT
            Not After : Sep  8 17:42:29 2026 GMT
        Subject: CN=80D4423A27EAFA8D75DBDBECE447AAD9884E5B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:47:35:9e:0f:28:0c:46:19:94:06:77:7e:
                    94:d1:f8:d5:df:a0:00:4b:8d:2d:95:b6:f3:ae:c8:
                    ea:9e:66:13:5b:9c:43:a7:7a:64:44:b2:1d:b3:76:
                    c3:a9:45:af:67:b4:9b:d5:0b:fc:87:66:ea:a3:eb:
                    a0:48:3c:f3:41:e8:cb:c0:93:12:1f:50:7f:a1:58:
                    35:e9:72:8c:3e:d4:7c:ba:59:28:86:c7:c3:21:48:
                    a2:d0:1b:a3:dd:03:92:9b:5e:4e:62:d1:c8:50:a6:
                    53:7e:ed:e1:5d:6c:75:b3:d3:b1:d9:ec:2b:45:51:
                    ff:00:9a:fe:ae:05:4e:bb:b4:90:4b:a3:86:2f:92:
                    76:92:cd:1f:7a:53:49:41:cb:a4:9a:d7:c4:7e:e6:
                    56:b5:1d:16:99:d3:ca:3c:bf:4e:ac:e4:f8:ec:cc:
                    16:33:20:52:c5:2e:49:3e:79:8d:55:81:64:4f:68:
                    7c:95:d8:6a:11:aa:0d:09:59:07:f1:3e:2c:40:21:
                    f0:f1:d2:71:20:1b:ca:83:cb:44:e9:26:55:d9:1b:
                    5b:38:da:ae:3a:0f:76:d8:fe:16:fe:ac:29:9d:22:
                    73:b2:cb:d8:9d:12:a8:49:6e:3b:3b:b8:39:49:9b:
                    6e:a3:9a:3d:ee:33:f1:c8:ef:cf:99:c7:4f:54:8d:
                    be:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D4:42:3A:27:EA:FA:8D:75:DB:DB:EC:E4:47:AA:D9:88:4E:5B:8B
            X509v3 Authority Key Identifier:
                keyid:C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/34352e3136382e342e302f32322d3332203d3e20323638303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:58:a6:18:e7:fb:0e:f3:66:cd:5e:43:ef:5d:19:a2:d8:99:
         42:b6:af:e8:86:b8:ed:58:c1:bd:77:7a:3d:70:c3:ff:51:e9:
         bd:51:7d:5a:6b:13:78:f6:2e:81:c9:3f:88:39:7e:84:b8:34:
         54:e7:19:82:e7:81:28:e5:85:49:e6:39:e2:51:4a:c8:a1:a1:
         91:91:ff:17:22:02:ca:fc:2b:a8:be:b5:e7:0f:2c:73:88:9a:
         2a:0f:21:cb:f4:87:26:d8:1b:d0:79:9a:c3:a4:7e:9f:95:80:
         8c:84:c5:1b:0f:ee:be:3c:90:9a:bb:7c:e3:ed:3b:ef:64:ff:
         1a:bb:be:77:71:0a:e4:39:eb:50:c1:0f:a1:86:3c:c7:40:2e:
         44:1b:85:ed:57:7b:a2:e2:2c:93:73:db:b1:37:e8:2e:47:a4:
         51:ba:b6:60:7c:52:e4:06:fe:58:3a:0e:bb:24:0b:f0:5c:c4:
         7e:7b:bb:c3:dc:1f:fd:20:cc:3a:b8:73:22:87:8e:3b:d7:b1:
         7a:be:cb:45:0f:ac:e5:8b:6b:4c:8c:b3:72:e9:64:43:8b:f3:
         19:e1:c9:1c:c2:fc:2f:96:db:79:08:b1:48:f4:56:f4:d2:ba:
         eb:33:87:81:c7:94:5a:8b:2c:e7:b9:fc:5e:8b:b9:9f:39:6a:
         b2:da:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:08:49 2025 by rpki-client