Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/34352e3233322e36302e302f32322d3332203d3e20323637333136.roa
File:                     34352e3233322e36302e302f32322d3332203d3e20323637333136.roa (raw, json)
Hash identifier:          nw0NpupkAzt0uKFRYgy5vCDDMGOg7JOE7vpmE0b5/hg=
Subject key identifier:   8C:FC:20:97:58:11:C1:8D:DB:DA:2C:F7:2A:DC:FE:8E:F9:D8:7D:22
Certificate issuer:       /CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
Certificate serial:       367B8B88CD315521E11066FE9B1E516062EEC5D9
Authority key identifier: 4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/34352e3233322e36302e302f32322d3332203d3e20323637333136.roa
Signing time:             Mon 04 Aug 2025 19:16:44 +0000
ROA not before:           Mon 04 Aug 2025 19:11:44 +0000
ROA not after:            Mon 03 Aug 2026 19:16:44 +0000
asID:                     267316
IP address blocks:        45.232.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.crl
                          rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 04:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7b:8b:88:cd:31:55:21:e1:10:66:fe:9b:1e:51:60:62:ee:c5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
        Validity
            Not Before: Aug  4 19:11:44 2025 GMT
            Not After : Aug  3 19:16:44 2026 GMT
        Subject: CN=8CFC20975811C18DDBDA2CF72ADCFE8EF9D87D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:b0:26:33:8a:3f:45:cd:f3:9b:06:6f:d3:
                    8f:5b:f1:51:09:04:ca:47:74:25:84:e2:ce:d8:7e:
                    15:07:73:20:0c:bc:65:b5:6c:0d:af:74:0d:16:d0:
                    e9:52:20:d6:2d:29:39:d4:bc:51:c5:2c:2e:b4:69:
                    f6:0e:7f:f0:1a:57:6b:76:10:f0:7b:6f:cc:5f:63:
                    ac:6b:28:82:11:15:b6:c2:8d:7f:26:99:d0:30:b2:
                    7e:1f:c7:85:8b:ce:a7:1d:a1:86:c7:e3:28:a0:1f:
                    1a:89:bb:ad:af:b5:ac:ac:22:bc:1d:24:92:70:11:
                    80:e5:58:ec:2a:6b:92:8b:18:25:c0:c4:2f:14:29:
                    07:94:76:5e:29:60:b1:2e:2d:33:3c:7b:99:33:c3:
                    ee:9e:fc:84:83:58:18:da:97:54:3d:43:6f:35:43:
                    10:1f:db:00:ea:13:d8:98:bb:8f:8d:06:53:ef:a7:
                    c0:58:36:17:a0:8a:a2:75:bf:32:3b:1b:fa:a0:e9:
                    41:82:eb:9d:d4:5f:56:0b:38:18:38:8f:68:f9:0f:
                    f9:db:56:69:31:a7:26:4d:c6:67:80:01:4e:ae:83:
                    86:06:66:f2:54:44:6b:d5:f7:df:13:32:dd:22:eb:
                    4e:88:33:f1:d3:71:59:02:59:ad:0e:34:f6:6f:f9:
                    93:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FC:20:97:58:11:C1:8D:DB:DA:2C:F7:2A:DC:FE:8E:F9:D8:7D:22
            X509v3 Authority Key Identifier:
                keyid:4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/34352e3233322e36302e302f32322d3332203d3e20323637333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:13:e9:5b:3e:cc:dc:c5:4a:0e:a6:30:0e:55:69:d8:e5:
         a6:6c:17:99:fe:bb:ba:7e:ca:30:65:34:57:ce:eb:cb:4d:25:
         11:08:70:9a:7c:63:04:29:7b:e5:ce:65:20:15:ee:2d:e1:c2:
         6d:51:19:e2:7f:f5:32:d9:5c:a7:96:90:3f:d5:06:1d:27:da:
         38:d0:36:5d:6f:f5:ea:7a:5b:55:84:24:43:18:5f:3b:81:16:
         0e:27:ff:6f:f5:bd:7f:13:41:1c:c4:53:b9:13:3c:ec:aa:47:
         79:12:fa:f9:cb:f2:ae:cf:ed:22:ee:1d:72:ff:9b:a1:59:0a:
         4d:0c:d4:3c:93:41:0d:75:5c:77:f7:ad:ef:e9:1f:1f:a2:38:
         86:ff:0b:c2:39:ba:73:64:d2:04:7e:8c:a2:0c:31:c6:79:4a:
         e2:9a:a5:b9:c3:2d:18:a7:bb:34:86:ee:ea:92:22:3c:f0:bf:
         1d:fb:63:3a:61:cf:48:6e:2b:49:c1:25:16:01:1f:30:1e:ad:
         97:aa:b2:18:01:39:b4:a2:7c:9f:a4:74:f0:f9:fd:db:81:82:
         af:2c:b8:48:57:a2:be:10:14:63:db:e0:4c:1a:30:76:ce:3c:
         f7:51:41:99:c4:c1:3c:36:ac:a5:c1:24:7f:5f:da:8e:1a:32:
         fc:05:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:09:25 2025 by rpki-client