Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e32382e302f32342d3234203d3e20323637303437.roa
File:                     34352e3232372e32382e302f32342d3234203d3e20323637303437.roa (raw, json)
Hash identifier:          2VOBlcE7TiD4bIWxLp9mJ7dRmZBUOVfhzxXehVX4KYc=
Subject key identifier:   BD:9E:9F:8C:25:4D:F7:C7:48:DE:E8:9C:0D:51:BE:46:66:BB:AA:BA
Certificate issuer:       /CN=717380C17B82263404536494404A01EF51405E80
Certificate serial:       6208073C0F0B4EDB2CC8ACE47B8C2A8223D1C99E
Authority key identifier: 71:73:80:C1:7B:82:26:34:04:53:64:94:40:4A:01:EF:51:40:5E:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717380C17B82263404536494404A01EF51405E80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e32382e302f32342d3234203d3e20323637303437.roa
Signing time:             Tue 05 Aug 2025 15:46:17 +0000
ROA not before:           Tue 05 Aug 2025 15:41:17 +0000
ROA not after:            Tue 04 Aug 2026 15:46:17 +0000
asID:                     267047
IP address blocks:        45.227.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.crl
                          rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717380C17B82263404536494404A01EF51405E80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 03:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:08:07:3c:0f:0b:4e:db:2c:c8:ac:e4:7b:8c:2a:82:23:d1:c9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717380C17B82263404536494404A01EF51405E80
        Validity
            Not Before: Aug  5 15:41:17 2025 GMT
            Not After : Aug  4 15:46:17 2026 GMT
        Subject: CN=BD9E9F8C254DF7C748DEE89C0D51BE4666BBAABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:71:ec:69:6f:c3:65:5b:c1:f6:b2:c7:bf:
                    c1:ed:82:20:3b:d2:a4:f8:86:46:68:d1:d5:b0:69:
                    74:46:2e:91:d5:ac:a5:4e:73:6d:b1:b8:3f:94:a0:
                    be:7e:8a:10:ca:a1:d9:49:06:aa:bf:4d:b8:8e:d6:
                    de:51:9f:6d:06:5d:85:71:5d:8a:c0:d7:d1:05:9b:
                    97:64:76:44:f4:4b:8f:88:9b:b2:05:4f:4f:7e:02:
                    e5:70:8e:52:e4:67:68:a7:52:46:45:9a:bd:7d:d1:
                    d8:70:94:70:ac:f9:8e:16:f5:bb:19:21:95:12:4f:
                    af:f5:3c:e0:3d:d0:13:4d:b1:55:c8:bd:41:3f:01:
                    f4:77:c6:dc:78:82:c8:5b:87:fc:5e:a6:73:73:47:
                    87:f6:97:a5:ab:b4:e7:29:ee:cd:4e:9f:8a:29:49:
                    57:70:7e:93:ea:5d:25:7a:97:0a:10:35:06:12:f2:
                    c5:5d:04:e7:39:b7:66:cd:3a:e1:c0:d4:d5:27:a7:
                    86:dd:08:5a:74:b9:50:4e:5d:23:40:01:5e:3b:99:
                    37:9c:d0:84:2b:3e:2f:62:3e:0a:01:0d:b8:1d:d0:
                    f2:78:ad:7e:47:17:65:7f:59:f3:25:91:26:d5:5a:
                    ae:06:8d:2b:2f:8d:e1:06:51:50:15:94:38:70:b5:
                    a1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9E:9F:8C:25:4D:F7:C7:48:DE:E8:9C:0D:51:BE:46:66:BB:AA:BA
            X509v3 Authority Key Identifier:
                keyid:71:73:80:C1:7B:82:26:34:04:53:64:94:40:4A:01:EF:51:40:5E:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717380C17B82263404536494404A01EF51405E80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e32382e302f32342d3234203d3e20323637303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:b4:4c:ec:f6:ae:de:cd:7e:49:d6:ac:bb:93:ed:fc:fa:
         96:49:d6:0f:46:1b:f7:ee:a2:65:b0:ff:60:5f:e8:63:fe:d1:
         11:f5:98:a6:87:fa:44:3d:af:c0:f2:d8:40:37:d1:09:60:d3:
         e4:bd:c7:be:25:29:83:70:de:d6:27:ea:e2:b0:44:c9:c2:2f:
         3b:ff:48:1d:c8:c8:a9:94:3d:89:ad:e4:10:82:36:d6:50:ba:
         f9:e8:8c:ce:95:9c:19:53:14:8b:ed:3b:91:61:b8:7b:3c:fc:
         53:7e:82:82:4e:43:10:a2:f3:df:4b:cc:c2:e2:be:6b:ec:c1:
         83:08:d2:56:a5:ad:73:3a:41:5f:43:26:b3:fc:bb:75:a4:3e:
         39:59:ba:a2:57:8d:3c:b5:68:a8:05:8c:12:61:ba:fc:7a:8a:
         41:bd:a2:6e:3a:41:3a:d4:53:cb:a6:f6:04:3e:69:f5:20:39:
         66:8b:aa:47:8a:78:d4:08:20:f1:75:5a:d4:a2:f7:fe:1b:c9:
         fb:b4:31:5c:37:3e:f6:42:f2:bc:23:9c:b2:69:dc:d7:41:3c:
         4e:cd:3e:2a:f3:f5:61:41:49:42:c8:46:7e:a7:81:63:69:88:
         94:ad:c6:ba:cc:d6:e9:4e:40:17:58:fb:47:4e:db:9a:a3:26:
         fc:3c:c1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:54 2025 by rpki-client