Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ynfi8nMgexmNRXaxyEYKsgn2K2WdyyBobjnRog6XG1f/0/34352e3233302e3138302e302f32322d3234203d3e20323637323335.roa
File:                     34352e3233302e3138302e302f32322d3234203d3e20323637323335.roa (raw, json)
Hash identifier:          UPYWxq2/XAv9xppbPcMNGCNX81a8x9TYh34+WEDFh9I=
Subject key identifier:   31:8E:8C:8C:01:50:77:F2:11:32:75:C4:CD:6F:F2:CC:90:AD:D1:73
Certificate issuer:       /CN=5B3063587DF2EE02343EDE8C096577BFF9F55403
Certificate serial:       2FC206FE8E2B5114E160E329CEA87982E7367ACE
Authority key identifier: 5B:30:63:58:7D:F2:EE:02:34:3E:DE:8C:09:65:77:BF:F9:F5:54:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B3063587DF2EE02343EDE8C096577BFF9F55403.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ynfi8nMgexmNRXaxyEYKsgn2K2WdyyBobjnRog6XG1f/0/34352e3233302e3138302e302f32322d3234203d3e20323637323335.roa
Signing time:             Sun 24 Aug 2025 14:11:13 +0000
ROA not before:           Sun 24 Aug 2025 14:06:13 +0000
ROA not after:            Sun 23 Aug 2026 14:11:13 +0000
asID:                     267235
IP address blocks:        45.230.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ynfi8nMgexmNRXaxyEYKsgn2K2WdyyBobjnRog6XG1f/0/5B3063587DF2EE02343EDE8C096577BFF9F55403.crl
                          rsync://rpki-repo.registro.br/repo/Ynfi8nMgexmNRXaxyEYKsgn2K2WdyyBobjnRog6XG1f/0/5B3063587DF2EE02343EDE8C096577BFF9F55403.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B3063587DF2EE02343EDE8C096577BFF9F55403.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c2:06:fe:8e:2b:51:14:e1:60:e3:29:ce:a8:79:82:e7:36:7a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B3063587DF2EE02343EDE8C096577BFF9F55403
        Validity
            Not Before: Aug 24 14:06:13 2025 GMT
            Not After : Aug 23 14:11:13 2026 GMT
        Subject: CN=318E8C8C015077F2113275C4CD6FF2CC90ADD173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:6c:d6:c7:d2:af:e1:55:23:ba:a9:93:f5:
                    8c:70:c5:ff:bd:c4:c8:2d:9c:90:c2:e0:0b:a5:71:
                    35:20:16:44:5d:cf:2b:af:5d:00:c0:06:dd:b4:91:
                    10:ae:85:3e:a2:ea:68:15:23:58:8f:d4:b6:e3:49:
                    8f:72:e1:e8:5f:64:87:05:bd:68:b3:98:d3:67:97:
                    00:a8:6a:88:f0:0e:1c:27:36:77:04:b5:6b:68:be:
                    7b:8c:82:bf:87:5f:29:3c:d3:f7:56:a4:05:89:47:
                    28:77:07:75:5a:00:a7:be:ae:83:56:20:90:a0:4c:
                    29:ba:2c:64:bc:6a:6c:13:8b:90:34:a7:ff:c3:5c:
                    c3:22:35:bf:73:a3:2a:af:d5:9e:2c:72:fe:1c:f0:
                    78:d8:72:5f:db:47:cc:d0:36:c5:e4:90:85:fa:ae:
                    34:cf:2e:37:3e:9c:8b:ed:67:49:c8:63:88:57:45:
                    db:48:3a:e9:d4:08:a8:2f:d1:0f:ca:8f:a7:9d:b3:
                    48:8a:5a:ad:bc:99:07:1b:00:91:d6:76:7d:30:06:
                    be:b1:ad:91:cc:8d:5d:38:60:c4:1a:5d:47:51:f3:
                    bf:68:f2:58:8d:25:c1:36:0c:2d:b1:18:42:17:31:
                    fc:0f:90:85:e1:7b:89:0b:e5:2d:d8:1d:c2:5e:ad:
                    f4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8E:8C:8C:01:50:77:F2:11:32:75:C4:CD:6F:F2:CC:90:AD:D1:73
            X509v3 Authority Key Identifier:
                keyid:5B:30:63:58:7D:F2:EE:02:34:3E:DE:8C:09:65:77:BF:F9:F5:54:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ynfi8nMgexmNRXaxyEYKsgn2K2WdyyBobjnRog6XG1f/0/5B3063587DF2EE02343EDE8C096577BFF9F55403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B3063587DF2EE02343EDE8C096577BFF9F55403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ynfi8nMgexmNRXaxyEYKsgn2K2WdyyBobjnRog6XG1f/0/34352e3233302e3138302e302f32322d3234203d3e20323637323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:ba:a1:aa:c8:46:ac:f5:2c:08:55:25:52:40:4a:c9:18:b4:
         84:80:4a:42:3b:bb:72:20:9b:af:e2:18:6b:70:c4:f5:d7:d8:
         bd:de:46:3c:3a:d4:7b:3e:fa:5b:0e:d4:5c:8a:4c:8e:34:25:
         57:ed:ed:d4:12:c3:4a:0e:27:bc:a5:61:53:ca:fe:4d:c1:90:
         25:aa:91:4c:d9:32:7b:68:2f:b7:7f:16:dd:4d:89:34:4c:6a:
         91:9f:3c:56:0b:72:00:e7:07:e4:2a:df:0b:5b:77:59:32:77:
         c2:27:56:9f:0c:05:0c:78:52:e2:cc:5c:8e:d3:89:f7:80:ef:
         59:c8:0e:e4:08:81:29:99:e2:b2:1c:49:20:37:d9:8a:d5:dc:
         28:5a:bd:cd:83:53:2f:4c:90:35:b6:72:70:d3:f1:e2:77:63:
         ce:1c:63:a4:95:67:79:0a:86:65:94:0f:dc:5d:c7:68:ae:7c:
         06:1e:8b:9e:f2:18:24:43:48:d4:f5:b2:06:86:5c:1d:23:80:
         6a:72:56:9a:30:42:87:83:ba:64:50:a6:15:32:1d:4f:2a:de:
         50:d3:b2:a6:ae:7b:13:5f:46:12:1b:7f:46:83:8f:37:1d:f2:
         d9:55:71:d2:78:95:12:e2:6b:04:ad:61:80:ca:19:22:b1:34:
         87:9b:1e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:32:33 2025 by rpki-client