Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/34352e3232382e342e302f32322d3234203d3e20323637303339.roa
File:                     34352e3232382e342e302f32322d3234203d3e20323637303339.roa (raw, json)
Hash identifier:          IFZ6BvBxMNWknP24XBqOwBQL/d19uQefNcBmyYXJ3aU=
Subject key identifier:   67:B8:D5:73:C1:76:7D:E8:1B:FE:33:6E:53:30:C3:B5:7D:78:87:41
Certificate issuer:       /CN=62595ED971A5BB40662FB52F1C40BDD69B1CD1BB
Certificate serial:       2611D2A8DEF21518D017FAD86A6E0021F58AFFF1
Authority key identifier: 62:59:5E:D9:71:A5:BB:40:66:2F:B5:2F:1C:40:BD:D6:9B:1C:D1:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/34352e3232382e342e302f32322d3234203d3e20323637303339.roa
Signing time:             Thu 24 Jul 2025 15:00:00 +0000
ROA not before:           Thu 24 Jul 2025 14:55:00 +0000
ROA not after:            Thu 23 Jul 2026 15:00:00 +0000
asID:                     267039
IP address blocks:        45.228.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.crl
                          rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 01:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:11:d2:a8:de:f2:15:18:d0:17:fa:d8:6a:6e:00:21:f5:8a:ff:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62595ED971A5BB40662FB52F1C40BDD69B1CD1BB
        Validity
            Not Before: Jul 24 14:55:00 2025 GMT
            Not After : Jul 23 15:00:00 2026 GMT
        Subject: CN=67B8D573C1767DE81BFE336E5330C3B57D788741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:d1:cb:12:02:66:d7:f4:30:90:2f:3b:7d:
                    2b:dd:21:74:86:9a:2a:14:36:e8:ab:bf:61:f8:87:
                    02:af:2c:c3:37:b8:44:8c:40:67:ab:7c:d5:96:2b:
                    7f:4c:3a:59:b8:d6:f0:ba:64:d4:78:46:b7:17:a7:
                    93:f0:ac:61:07:7e:22:c0:32:86:79:57:65:2d:66:
                    79:7e:59:e2:be:cc:fa:e7:ff:5d:64:11:e4:45:5c:
                    ee:a3:b8:88:dd:77:fa:9d:89:c8:7c:1e:3f:bf:a4:
                    0b:80:ce:6a:73:6d:34:be:e5:3b:96:c8:f8:a0:63:
                    69:1c:55:f3:25:a9:d4:45:1e:21:fb:34:b3:43:b7:
                    11:40:44:89:d1:35:2b:7a:61:85:e0:76:d7:d4:52:
                    ed:a7:18:76:d8:a5:4d:0b:ff:f6:c9:14:5d:b2:83:
                    3e:6f:26:34:8d:38:09:26:07:75:6f:11:45:7d:81:
                    f8:19:06:8d:05:f4:67:a4:e6:f4:64:18:4c:59:0f:
                    f0:53:20:87:2d:5d:c0:09:7f:c0:be:09:9f:61:43:
                    ef:fa:38:c8:0e:09:6f:f3:7f:4b:dd:82:67:a3:ce:
                    b7:ce:62:3b:82:4d:50:e9:41:1c:2d:11:46:d6:df:
                    bb:d8:59:7c:a7:ce:c5:29:2a:9f:e5:61:58:f8:e0:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B8:D5:73:C1:76:7D:E8:1B:FE:33:6E:53:30:C3:B5:7D:78:87:41
            X509v3 Authority Key Identifier:
                keyid:62:59:5E:D9:71:A5:BB:40:66:2F:B5:2F:1C:40:BD:D6:9B:1C:D1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/34352e3232382e342e302f32322d3234203d3e20323637303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:64:1d:09:11:e8:0b:4a:fa:99:48:f9:db:e8:08:32:33:b5:
         e5:80:15:44:09:58:a4:61:23:5c:97:f7:81:9b:01:01:7f:44:
         50:89:e7:62:3d:5b:63:8b:fa:b3:5e:16:84:40:aa:8d:db:8c:
         70:98:e0:96:c0:f5:88:6a:c3:a3:9b:2e:1e:71:85:11:1c:f3:
         01:75:c2:78:57:a0:d8:1e:2a:e9:e9:82:50:03:65:3e:bf:f1:
         fa:4d:1b:00:53:f6:22:6d:1a:ad:22:cd:01:5b:82:ca:ac:e3:
         cd:e4:18:c0:24:83:8a:25:51:18:83:66:b5:f4:0b:65:79:78:
         bf:24:8f:6d:b4:cb:b4:e0:d2:44:0a:e3:af:4b:48:7d:c8:43:
         ce:b6:25:02:56:4f:fd:63:99:ee:ee:ea:01:ff:9b:10:b5:ca:
         d0:e9:5a:58:2d:b8:c5:a7:32:4d:49:34:1e:e9:df:36:54:a5:
         fb:bb:08:aa:c1:03:69:0e:d3:13:c5:60:d3:8b:3a:9b:e0:92:
         29:9a:32:35:ae:8e:81:15:72:b8:91:0f:a7:71:4f:60:84:b1:
         5e:50:8b:24:15:2a:7e:a6:78:b2:92:d1:d5:9a:99:78:3c:f5:
         54:e8:6d:63:29:fd:1b:aa:30:df:ec:92:de:da:5f:73:a0:ec:
         fb:48:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:46:22 2025 by rpki-client