Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/34352e3233382e3230312e302f32342d3234203d3e20323638333630.roa
File:                     34352e3233382e3230312e302f32342d3234203d3e20323638333630.roa (raw, json)
Hash identifier:          svqWhNp26Kxpf/bIuNcCi/+C5X1JOqSwl+1kgn6lJCk=
Subject key identifier:   34:95:8F:6E:D4:C0:4F:0F:7E:ED:52:36:7F:4E:99:B2:B3:F5:ED:3C
Certificate issuer:       /CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
Certificate serial:       250C775C4F433AF6BDE90CACA12BC3B6F263CD2C
Authority key identifier: 22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/34352e3233382e3230312e302f32342d3234203d3e20323638333630.roa
Signing time:             Mon 09 Jun 2025 11:06:21 +0000
ROA not before:           Mon 09 Jun 2025 11:01:21 +0000
ROA not after:            Mon 08 Jun 2026 11:06:21 +0000
asID:                     268360
IP address blocks:        45.238.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl
                          rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 23:29:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0c:77:5c:4f:43:3a:f6:bd:e9:0c:ac:a1:2b:c3:b6:f2:63:cd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
        Validity
            Not Before: Jun  9 11:01:21 2025 GMT
            Not After : Jun  8 11:06:21 2026 GMT
        Subject: CN=34958F6ED4C04F0F7EED52367F4E99B2B3F5ED3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f6:fa:89:64:33:18:52:fd:15:64:7d:be:cc:
                    d4:49:fd:a6:16:43:58:a5:02:1e:0c:ad:60:7f:c3:
                    3a:d6:d6:6b:52:21:9b:03:ac:14:5c:34:f3:fc:7a:
                    32:b9:40:0b:55:32:f3:01:c4:88:e8:82:8b:3a:94:
                    f0:2d:01:12:d6:c2:d8:49:ee:24:b7:e8:40:f6:52:
                    58:4e:50:76:0f:b5:ff:07:54:3e:ee:e8:47:a9:21:
                    78:e0:03:34:bd:d2:14:b5:3d:b8:1d:ec:62:fd:5f:
                    d0:1b:96:2c:32:03:84:c0:92:05:cf:73:55:0e:7b:
                    b8:93:e2:e4:f4:0c:91:0d:b8:bb:f8:4e:c3:cc:72:
                    9d:dc:f4:6e:fd:0e:60:16:fa:07:22:88:7d:bb:16:
                    f8:d0:ce:de:97:da:0a:cd:84:ec:dd:de:94:22:c6:
                    83:89:c6:77:44:94:5e:c8:f7:f8:3a:cd:1f:ee:da:
                    f3:94:5f:c1:02:cd:41:c6:1f:6d:b5:ed:94:ee:83:
                    5e:e0:34:59:2d:14:38:0c:e4:e4:a9:b4:3a:a1:6f:
                    fb:67:9b:e9:eb:48:a0:85:02:d8:72:9c:ff:1f:c8:
                    82:bd:90:13:62:98:e0:28:d8:87:cc:4d:af:40:02:
                    d8:ca:82:bd:78:94:b5:da:d3:61:b5:05:bc:41:0f:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:95:8F:6E:D4:C0:4F:0F:7E:ED:52:36:7F:4E:99:B2:B3:F5:ED:3C
            X509v3 Authority Key Identifier:
                keyid:22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/34352e3233382e3230312e302f32342d3234203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:09:01:41:d4:32:74:73:a1:0d:7c:ed:b5:e5:ff:90:ea:97:
         fd:48:f4:ee:46:6a:8a:33:7c:5a:68:14:1b:17:7f:ae:86:33:
         d0:5e:c6:09:14:74:da:bc:9b:10:99:b2:0c:1b:c5:2f:b0:9b:
         9f:6c:49:03:f8:b9:50:d8:5d:d1:41:a6:ff:24:28:4b:ab:53:
         21:27:05:52:9d:90:3d:7b:9c:eb:8d:56:ad:f0:d5:1b:67:60:
         1e:f6:49:c6:3a:ee:f3:a6:bf:35:c2:52:b1:a1:c0:77:bd:dc:
         35:7f:bb:57:56:f5:60:ae:06:a5:a7:bb:ad:04:ca:32:9e:8a:
         80:10:47:a6:d5:c4:7d:54:a4:73:6b:27:9e:c2:a6:d5:94:f8:
         a4:26:df:eb:71:83:9e:9e:82:7a:ad:79:1e:1f:7a:a6:86:28:
         39:5c:de:b1:f8:7e:19:9d:4e:38:c8:70:ee:79:b7:64:cc:73:
         a5:1a:86:d1:e2:0b:e0:3c:51:a2:06:84:8a:ed:fe:f8:74:bb:
         6f:2a:0d:0c:69:1f:a6:21:b9:1d:a8:87:39:35:e8:87:da:ed:
         e4:77:6e:46:7c:a4:22:08:90:52:46:ce:85:35:0a:dd:53:cf:
         41:14:d3:b5:3b:33:28:6e:4a:be:7d:6c:ec:0d:83:ae:7e:c0:
         80:36:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:24:09 2025 by rpki-client