Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa
File:                     34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (raw, json)
Hash identifier:          CyZlU5isE9wGi3h/xSKxtzFuGmGh7hkfGVSrX1jTcpg=
Subject key identifier:   63:34:68:DC:E8:20:6B:0A:12:11:EB:0F:BB:82:47:81:4A:8F:15:4B
Certificate issuer:       /CN=57B50CDFE20B642A6640800E5E00DB69A36D4AF3
Certificate serial:       3BD98829608CAB8BEBCF3F4646CFDFFFEF750B78
Authority key identifier: 57:B5:0C:DF:E2:0B:64:2A:66:40:80:0E:5E:00:DB:69:A3:6D:4A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa
Signing time:             Mon 21 Jul 2025 16:04:52 +0000
ROA not before:           Mon 21 Jul 2025 15:59:52 +0000
ROA not after:            Mon 20 Jul 2026 16:04:52 +0000
asID:                     267077
IP address blocks:        45.228.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.crl
                          rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 10:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d9:88:29:60:8c:ab:8b:eb:cf:3f:46:46:cf:df:ff:ef:75:0b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B50CDFE20B642A6640800E5E00DB69A36D4AF3
        Validity
            Not Before: Jul 21 15:59:52 2025 GMT
            Not After : Jul 20 16:04:52 2026 GMT
        Subject: CN=633468DCE8206B0A1211EB0FBB8247814A8F154B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:e9:c7:78:64:27:ce:37:17:2a:7a:09:8d:
                    1c:3e:26:06:a2:7f:54:79:46:c4:45:aa:fa:29:c0:
                    cf:08:3e:5c:00:46:5a:53:b6:fa:13:c0:03:e0:87:
                    bc:ec:2e:f9:f8:7c:76:aa:28:af:df:e8:c1:c6:e0:
                    f5:64:43:ea:29:1b:ee:aa:f0:2b:84:b3:23:d5:bd:
                    c6:f4:9b:8a:81:da:90:4c:73:36:d9:7f:bd:27:f3:
                    75:a5:b6:ee:69:42:70:5b:3d:4b:14:b4:51:fd:b1:
                    33:a1:ba:c0:ff:f0:83:53:51:cf:e6:be:d0:b6:87:
                    55:8a:ab:b8:10:34:cf:6e:4b:cd:cd:c3:8b:00:be:
                    64:f5:89:51:95:67:06:ba:24:06:ad:65:7a:f7:1f:
                    37:bb:5c:21:51:b8:ee:65:25:6c:83:4c:c7:30:1c:
                    2f:5a:19:f1:e3:d6:86:a6:64:12:9f:1d:c2:43:58:
                    02:bc:93:a3:28:6f:d8:9d:8c:78:b7:4e:ee:ee:83:
                    f6:3d:7f:61:ef:df:ab:7d:2c:c2:0b:4f:ef:a0:4b:
                    44:71:e6:d4:72:9e:9c:af:7b:32:91:7b:ed:42:9f:
                    3c:62:86:d4:1c:03:6b:ca:57:39:79:2f:56:3c:34:
                    ff:d8:28:a5:08:14:95:b8:0f:a0:b7:8f:ca:a2:55:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:34:68:DC:E8:20:6B:0A:12:11:EB:0F:BB:82:47:81:4A:8F:15:4B
            X509v3 Authority Key Identifier:
                keyid:57:B5:0C:DF:E2:0B:64:2A:66:40:80:0E:5E:00:DB:69:A3:6D:4A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:97:17:c0:25:d6:7d:81:bb:d4:66:e2:de:a3:95:a0:67:0e:
         e0:0d:79:73:ca:9a:f7:e5:77:3a:61:95:db:59:c4:7c:ed:10:
         1d:cd:3d:78:79:bb:27:68:f0:77:8a:6c:4d:7b:94:5b:79:21:
         c4:b8:a7:8b:93:3d:15:0f:17:06:12:77:36:93:d5:b4:06:95:
         d1:5a:7e:03:32:21:73:d0:0c:c8:03:60:12:73:72:f2:4f:ae:
         d5:7b:d7:60:06:04:3a:49:f4:25:6a:44:ef:04:8b:2d:e0:c4:
         d5:a6:51:e7:81:6b:99:0a:c0:ba:9b:75:21:e5:e4:3e:43:2e:
         4f:10:18:40:60:e2:5a:5c:2f:8d:0c:16:63:9f:11:50:cf:1b:
         30:19:9a:93:1a:dc:32:6a:4f:3f:cc:f7:7d:7c:e3:0e:a1:fa:
         dc:ca:e9:af:f4:61:68:ef:fc:b7:10:01:50:db:ae:20:c5:40:
         d8:f6:a0:ca:c4:0a:3d:71:a2:3b:68:52:d9:be:d6:0b:9c:d3:
         6a:ac:aa:60:28:e2:54:a3:69:90:ee:8b:ae:4b:c8:28:3c:c7:
         d3:4c:19:93:62:59:6b:b7:31:d4:ee:fc:c4:52:3b:cf:de:c1:
         d1:3c:a8:91:bd:04:c1:02:06:58:ae:22:82:84:0a:9e:8a:76:
         42:7f:d9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:32:20 2025 by rpki-client