Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32322d3232203d3e20323639323835.roa
File:                     34352e3138322e35322e302f32322d3232203d3e20323639323835.roa (raw, json)
Hash identifier:          baYSgeyu1Fh792QHXa/jVzjbIEks13VYEFPNKOFhRUw=
Subject key identifier:   EF:4F:99:78:5A:28:70:F9:8F:93:F1:02:60:93:3B:3C:76:49:96:2C
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       22BD3EADFA71338205FA2FE45ACEB3773EFC3F7D
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32322d3232203d3e20323639323835.roa
Signing time:             Wed 30 Jul 2025 17:02:28 +0000
ROA not before:           Wed 30 Jul 2025 16:57:28 +0000
ROA not after:            Wed 29 Jul 2026 17:02:28 +0000
asID:                     269285
IP address blocks:        45.182.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 17:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bd:3e:ad:fa:71:33:82:05:fa:2f:e4:5a:ce:b3:77:3e:fc:3f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Jul 30 16:57:28 2025 GMT
            Not After : Jul 29 17:02:28 2026 GMT
        Subject: CN=EF4F99785A2870F98F93F10260933B3C7649962C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:96:23:56:8e:2a:4d:9d:d9:67:9f:99:39:
                    12:ce:ce:a7:4a:db:ed:e4:6f:cc:c8:5a:7f:92:95:
                    ae:91:03:32:78:94:f7:81:d4:63:a4:15:5c:a5:74:
                    d1:25:d9:91:de:e7:2e:02:c1:bb:6a:95:ac:5d:f5:
                    e3:1b:a1:2c:79:0e:5e:ca:2a:e1:d3:65:f2:c5:cf:
                    9d:38:70:1a:95:ce:4f:93:8a:2b:ae:c0:b3:6c:78:
                    82:a4:0f:d9:42:08:b3:ac:90:63:e9:4e:5f:27:bf:
                    eb:f2:0e:19:eb:54:fc:fa:61:03:c9:97:34:51:4b:
                    31:00:00:85:10:9a:57:52:bb:6e:20:50:15:ee:58:
                    0d:4f:1a:24:25:bb:c0:ca:c4:60:06:e9:e6:e0:23:
                    75:11:2e:9c:ac:b5:c7:a0:01:f0:ab:b4:38:4a:57:
                    9d:0f:9f:ed:70:b8:23:d0:2f:93:8b:56:c2:eb:b7:
                    04:90:08:dd:54:c5:d6:a5:57:3d:87:89:1d:45:02:
                    98:b9:ee:ed:c2:65:ba:1f:6c:e8:99:96:e1:25:78:
                    29:aa:ca:57:71:60:68:b4:07:b3:86:21:45:20:9b:
                    45:5a:f8:a2:8d:5a:8d:3a:b0:bb:42:19:17:59:a1:
                    0d:c6:6d:66:ff:af:3b:4d:a9:af:82:86:7c:5c:39:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4F:99:78:5A:28:70:F9:8F:93:F1:02:60:93:3B:3C:76:49:96:2C
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32322d3232203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:0e:90:ce:69:2b:c9:0b:90:a9:ee:45:12:98:c8:e5:3c:44:
         92:27:9c:93:7c:ab:3b:34:34:b6:65:97:7e:14:dd:62:11:50:
         8c:a4:4c:aa:e9:e3:be:43:0e:88:3f:2f:86:4a:c2:32:1f:0f:
         33:8c:07:1e:34:7c:76:67:d7:e9:0e:52:92:41:a7:22:63:40:
         6f:db:4f:5e:c7:9f:93:9b:ab:d0:aa:f8:1b:50:9c:78:4c:a5:
         43:a9:70:e4:15:5d:00:4b:77:1b:fa:e0:ae:b5:78:24:1c:74:
         7b:41:7a:65:19:5b:a6:b1:9a:a7:19:19:ce:ac:4d:c4:53:d3:
         c0:f2:ca:71:fe:a7:8a:01:e1:30:63:26:3c:a5:5e:c4:3b:b6:
         8f:13:5e:c8:9d:d0:9a:c9:6a:ea:4b:7a:ab:32:2f:55:ec:09:
         11:d4:70:1f:e7:90:11:5d:b0:03:21:e2:99:6e:e4:4b:ef:8b:
         8f:8c:53:1c:5f:3a:e1:c1:52:3b:da:16:02:3d:31:2e:25:8c:
         e4:a8:45:5c:65:35:ce:5f:5e:d0:19:b1:00:20:fa:eb:ef:d1:
         e9:35:b2:97:5f:a7:69:ec:63:ac:23:f9:c4:ef:fb:e7:f9:71:
         46:73:be:42:0d:ff:f2:9d:97:d7:b5:b1:87:79:d5:85:14:e6:
         05:71:59:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:32 2025 by rpki-client