Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/34352e3233372e3134382e302f32322d3234203d3e20323635303431.roa
File:                     34352e3233372e3134382e302f32322d3234203d3e20323635303431.roa (raw, json)
Hash identifier:          xkKj8FxJmY2o2lGnlJtSJhwDSYloXGD0DADDWXhLM00=
Subject key identifier:   9C:D9:0F:F7:AA:EC:01:2B:CE:0A:7C:8D:45:77:2F:75:C9:A9:A9:FA
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       2FF0B9A9EBC9C835635670C4A8C34BFFDFEE0561
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/34352e3233372e3134382e302f32322d3234203d3e20323635303431.roa
Signing time:             Fri 23 May 2025 20:15:06 +0000
ROA not before:           Fri 23 May 2025 20:10:06 +0000
ROA not after:            Fri 22 May 2026 20:15:06 +0000
asID:                     265041
IP address blocks:        45.237.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 19:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f0:b9:a9:eb:c9:c8:35:63:56:70:c4:a8:c3:4b:ff:df:ee:05:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: May 23 20:10:06 2025 GMT
            Not After : May 22 20:15:06 2026 GMT
        Subject: CN=9CD90FF7AAEC012BCE0A7C8D45772F75C9A9A9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:d8:e9:72:f2:d5:5f:35:99:41:6a:c5:3f:
                    ec:24:79:d5:4e:29:96:fa:f3:04:5f:ee:27:0e:0d:
                    eb:b3:a4:5c:a4:4d:74:6d:e1:59:57:b2:98:71:f8:
                    ac:3b:c4:9d:0f:18:89:66:49:c7:6e:df:10:e5:e8:
                    e0:98:25:a0:47:11:62:16:18:9a:42:c6:82:a3:05:
                    1c:2c:2e:10:8a:c7:ac:b0:cd:cb:b4:66:f0:44:a6:
                    e9:52:38:80:86:12:cf:16:ef:13:3b:60:52:4d:3c:
                    f0:10:a4:bd:b5:c0:83:21:21:6a:c6:da:0a:9e:69:
                    fe:6a:9a:14:7f:41:ba:1d:d3:93:17:88:92:5a:a0:
                    88:b9:de:8c:ae:e5:57:2e:f3:e2:f8:f9:c9:e7:ea:
                    32:f6:ac:9b:fd:c1:26:12:44:20:77:50:c6:c2:ca:
                    ac:22:df:30:d9:7f:c7:f1:e9:d7:60:95:4a:3d:44:
                    02:bc:a3:84:82:8d:21:31:6a:03:93:7e:a7:ee:a4:
                    65:09:b3:77:e1:4a:eb:8c:5c:fd:58:80:03:ce:ee:
                    be:e0:c3:61:91:b2:9c:6d:fb:50:ff:d9:fc:5d:8e:
                    92:ef:4b:75:86:58:30:af:9c:e4:0e:16:c9:e3:e7:
                    f5:41:c6:c3:7e:1c:1a:6e:ef:84:63:e3:73:fc:65:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D9:0F:F7:AA:EC:01:2B:CE:0A:7C:8D:45:77:2F:75:C9:A9:A9:FA
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/34352e3233372e3134382e302f32322d3234203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:24:58:71:03:87:39:36:e9:67:09:fc:c6:5b:df:49:f7:bc:
         53:dc:c4:70:de:8d:d4:f5:af:4e:6a:af:0b:48:a6:a6:18:1b:
         08:01:fb:1a:f7:0c:d1:08:1b:ab:f8:88:59:d0:39:85:71:70:
         5a:90:04:a3:5e:08:5b:ea:74:9e:74:b8:e7:04:e2:15:5c:c1:
         01:c6:09:d4:01:fc:4e:a5:82:52:a3:3a:15:76:ce:12:17:83:
         be:79:ed:df:1b:9b:bb:0d:ca:1e:33:b1:96:77:e2:d9:68:a1:
         d6:7f:d3:6e:7a:b9:cd:84:57:47:f2:6b:e5:f7:ee:69:86:bc:
         a7:b1:9d:58:db:56:8b:e5:0e:42:b3:7d:f6:ea:36:68:e9:79:
         02:a7:6f:ad:e3:00:cc:fe:aa:72:3f:15:e9:03:ea:eb:b1:50:
         34:33:99:1d:16:bf:e8:b0:d8:40:47:7f:54:64:0a:91:2c:16:
         8c:ea:e7:50:86:7d:3b:74:6c:45:91:c9:50:cf:e6:80:29:30:
         b6:e7:84:29:72:8d:b9:b4:5d:8b:43:17:6a:83:c4:7b:b3:7b:
         4e:26:22:19:f2:ef:e2:1d:24:ff:c2:fb:ae:04:23:a3:f6:21:
         7b:10:62:e9:cd:f4:b1:77:2c:94:f9:88:c9:93:d1:8b:83:13:
         44:9c:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 02:49:35 2025 by rpki-client