Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/34352e37312e3231362e302f32322d3332203d3e20323637363239.roa
File:                     34352e37312e3231362e302f32322d3332203d3e20323637363239.roa (raw, json)
Hash identifier:          Wnv7hBSmOF0CIwd6C21ryjYLA6ZIoeZkDO35AzphvEY=
Subject key identifier:   8C:9E:9A:7E:7C:99:FF:75:1D:EE:F2:5D:0F:B6:8B:81:21:7E:D7:50
Certificate issuer:       /CN=22072ECE4658EB40DC14284E0D18A33CB11A5E8A
Certificate serial:       28595E3C49C1688401A17225A2EDE78F65F6A7BA
Authority key identifier: 22:07:2E:CE:46:58:EB:40:DC:14:28:4E:0D:18:A3:3C:B1:1A:5E:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22072ECE4658EB40DC14284E0D18A33CB11A5E8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/34352e37312e3231362e302f32322d3332203d3e20323637363239.roa
Signing time:             Sun 07 Sep 2025 22:07:05 +0000
ROA not before:           Sun 07 Sep 2025 22:02:05 +0000
ROA not after:            Sun 06 Sep 2026 22:07:05 +0000
asID:                     267629
IP address blocks:        45.71.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/22072ECE4658EB40DC14284E0D18A33CB11A5E8A.crl
                          rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/22072ECE4658EB40DC14284E0D18A33CB11A5E8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22072ECE4658EB40DC14284E0D18A33CB11A5E8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:59:5e:3c:49:c1:68:84:01:a1:72:25:a2:ed:e7:8f:65:f6:a7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22072ECE4658EB40DC14284E0D18A33CB11A5E8A
        Validity
            Not Before: Sep  7 22:02:05 2025 GMT
            Not After : Sep  6 22:07:05 2026 GMT
        Subject: CN=8C9E9A7E7C99FF751DEEF25D0FB68B81217ED750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:4f:bc:8d:26:48:ce:2e:b7:71:b0:95:55:
                    0a:6f:91:b0:cb:8b:4f:b6:57:bf:01:94:d8:88:6c:
                    5f:03:c7:f6:e4:d0:c7:98:ee:76:38:5b:66:34:7f:
                    cc:3c:c9:dc:61:c2:3a:54:4b:b9:41:3a:e4:e9:fe:
                    1c:6c:4e:e5:7d:9b:2f:d1:e2:5b:e9:e3:80:fe:14:
                    e8:c9:76:5a:f8:e0:54:8a:f3:ef:9c:64:0e:fd:2a:
                    82:ae:69:43:ef:ca:49:6f:fb:4b:1a:24:2f:b5:b1:
                    ec:ec:d3:15:cc:d4:6e:48:44:e7:07:a1:fb:9d:60:
                    38:89:9b:2e:91:47:4d:fd:6e:97:62:6a:aa:00:24:
                    9a:26:27:ed:e1:ca:b3:6a:0a:ac:09:26:c9:09:94:
                    08:e7:89:66:41:18:a3:bc:52:18:f1:44:b3:30:27:
                    00:aa:37:03:b2:a3:39:35:0c:cd:85:c2:b7:40:b4:
                    fb:f4:76:20:b2:2d:73:76:45:6c:ef:26:48:38:9d:
                    7b:7b:43:97:1c:d3:ba:c6:85:16:d7:69:57:3f:df:
                    56:d3:0c:85:cd:27:58:d7:04:ee:ca:21:3a:f7:1a:
                    8c:83:3c:84:31:40:62:32:79:21:e7:99:4b:9e:02:
                    1c:6f:03:54:18:8e:1b:90:cd:f0:d1:06:03:54:4f:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9E:9A:7E:7C:99:FF:75:1D:EE:F2:5D:0F:B6:8B:81:21:7E:D7:50
            X509v3 Authority Key Identifier:
                keyid:22:07:2E:CE:46:58:EB:40:DC:14:28:4E:0D:18:A3:3C:B1:1A:5E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/22072ECE4658EB40DC14284E0D18A33CB11A5E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22072ECE4658EB40DC14284E0D18A33CB11A5E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/34352e37312e3231362e302f32322d3332203d3e20323637363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:f2:c8:14:0e:34:c1:ec:15:ce:77:21:ca:42:74:61:29:bd:
         66:45:89:57:8d:26:87:d4:4b:9b:f8:97:db:63:fe:40:79:eb:
         1d:a4:7c:21:2b:08:da:44:6f:ab:1d:7a:f8:20:55:e9:3f:97:
         c4:b5:38:ed:a2:be:e8:5f:14:f3:cf:35:9a:64:04:f4:ff:56:
         0a:56:02:af:ce:b7:80:7a:2f:12:29:25:ca:a2:cf:64:86:ec:
         ff:80:2f:a8:ab:4a:f3:81:47:b1:bf:c3:ef:cf:7a:aa:d2:c8:
         7b:5b:ab:6b:7c:07:c5:5e:8b:7f:0c:cf:a9:67:89:90:f6:02:
         52:ca:3f:46:10:49:97:5b:00:3b:2c:c5:02:1d:31:1d:0f:14:
         e9:cd:a3:d7:d8:ef:70:1b:b1:56:62:bd:c5:1f:be:4f:1e:1a:
         63:35:a8:c4:fb:8f:2b:7d:ac:9e:53:65:f2:c7:1e:fb:ce:0d:
         26:bf:b5:d0:b1:25:46:5b:7e:de:a1:4d:33:be:7a:b1:df:e8:
         a8:95:b0:f2:0b:d2:b5:07:fa:69:7d:ee:89:12:6c:fa:35:3f:
         20:c6:f7:c3:62:3a:c5:15:92:af:d7:00:49:a3:a4:75:28:e1:
         63:aa:4f:2f:95:3e:f4:ae:d1:4b:46:86:82:cb:0e:80:3f:99:
         c4:00:ce:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:20:08 2025 by rpki-client