Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa
File:                     34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa (raw, json)
Hash identifier:          Ds1o+lFWRAtvSJ6UZvssiOhpXX16rkLox5xLikIvjpE=
Subject key identifier:   14:BE:AC:A6:E9:62:54:9D:AC:97:19:33:88:47:A5:70:60:09:3E:65
Certificate issuer:       /CN=3EA1465E4D3921B276EAB422ACCE68273C80356B
Certificate serial:       6ECEF63999909E783573B0018AA8312F28A9B50D
Authority key identifier: 3E:A1:46:5E:4D:39:21:B2:76:EA:B4:22:AC:CE:68:27:3C:80:35:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa
Signing time:             Mon 11 Aug 2025 14:23:14 +0000
ROA not before:           Mon 11 Aug 2025 14:18:14 +0000
ROA not after:            Mon 10 Aug 2026 14:23:14 +0000
asID:                     267056
IP address blocks:        45.226.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.crl
                          rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 03:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ce:f6:39:99:90:9e:78:35:73:b0:01:8a:a8:31:2f:28:a9:b5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA1465E4D3921B276EAB422ACCE68273C80356B
        Validity
            Not Before: Aug 11 14:18:14 2025 GMT
            Not After : Aug 10 14:23:14 2026 GMT
        Subject: CN=14BEACA6E962549DAC9719338847A57060093E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:71:0d:32:ba:4e:27:70:7b:5f:20:c3:3e:
                    24:c1:46:38:93:d8:89:10:40:bf:90:53:45:fa:d3:
                    f9:e1:72:3c:10:f2:3a:50:88:b2:36:c8:87:5e:4c:
                    db:d8:0f:63:19:32:91:7d:9d:e1:24:c2:7b:8f:94:
                    5a:98:d9:f0:25:9b:1e:e4:83:26:83:45:4d:48:b7:
                    76:2f:78:79:8e:e0:f1:9e:7f:73:2d:09:17:c8:e7:
                    3d:54:9b:51:27:6d:9c:bb:5d:a5:71:75:48:d5:35:
                    ad:5e:8c:14:b2:13:c4:41:a3:1c:57:bf:a2:ac:4c:
                    4f:33:a6:81:23:4e:f2:0b:13:76:bf:62:e7:83:89:
                    ee:7c:26:0c:cd:3f:f0:1a:49:d1:29:30:2b:b8:8b:
                    61:ac:38:1b:01:9a:7c:6f:aa:e5:0a:75:e0:73:c7:
                    20:d3:65:aa:92:bd:44:9f:58:ed:b1:cf:a5:98:2e:
                    19:a9:30:2b:5e:9c:c5:e7:04:35:4e:e7:7a:0d:c8:
                    f5:14:5c:7f:ba:3b:84:7d:31:7f:56:e7:99:54:2a:
                    6c:c7:d2:97:f8:a1:94:14:84:85:6f:33:16:93:38:
                    a5:da:34:3a:ee:26:cf:ff:5b:ec:4a:95:39:60:07:
                    9c:01:41:05:84:b3:8c:22:3e:fc:b1:e6:ff:1f:7b:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BE:AC:A6:E9:62:54:9D:AC:97:19:33:88:47:A5:70:60:09:3E:65
            X509v3 Authority Key Identifier:
                keyid:3E:A1:46:5E:4D:39:21:B2:76:EA:B4:22:AC:CE:68:27:3C:80:35:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:fe:1d:c3:e0:51:d9:e2:9e:a9:0f:f0:17:ad:4f:bc:e1:4d:
         9d:44:51:88:61:cb:a8:28:00:4a:50:85:30:6d:51:b7:16:54:
         23:07:c0:d4:94:d7:1a:37:d9:18:9d:97:6d:04:bd:7e:26:a3:
         c7:4d:ca:a8:5e:6e:27:8b:1f:68:e7:f3:f4:10:16:45:fd:df:
         8d:9c:70:b3:41:af:11:49:87:6c:63:49:c9:55:1c:95:4a:df:
         dd:5e:73:b8:44:26:52:35:b2:f5:5a:55:03:3b:16:a3:01:eb:
         a7:8a:36:71:4d:7c:8d:93:31:e9:aa:b7:08:53:96:be:13:0e:
         24:94:d4:c3:3e:6c:04:85:a4:84:dc:c9:de:c9:81:c7:bc:aa:
         bc:53:80:26:78:8d:09:54:1b:16:ff:be:cb:97:fa:eb:0e:22:
         e9:aa:63:a9:04:1d:96:a5:b8:06:8c:fe:d7:73:bc:48:f1:93:
         4e:01:cd:e9:5e:23:8f:51:8f:b6:02:ff:54:3f:14:13:31:1f:
         27:b1:14:0e:8b:9c:b7:40:cb:8d:d7:db:2b:16:92:56:6c:83:
         c8:e5:ee:78:84:21:94:3e:66:71:eb:6a:8b:ef:de:6c:cf:fb:
         c3:80:99:28:9a:8b:1b:63:72:88:7f:75:eb:05:d3:83:a8:4c:
         6d:87:33:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:30:30 2025 by rpki-client