Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa
File:                     34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa (raw, json)
Hash identifier:          Ic3r121EPc0G35t3YWN+c9WNJu2rdqfrDjpu/dTeE4A=
Subject key identifier:   4D:40:10:61:51:C6:8F:38:5A:D2:9D:1E:98:80:6A:83:49:44:C0:A6
Certificate issuer:       /CN=206D33F3A8B725D8326CB6CF3F2E8CBBB714859E
Certificate serial:       01D9B0FE63770A8C2FFC24376122C45B17E11D5B
Authority key identifier: 20:6D:33:F3:A8:B7:25:D8:32:6C:B6:CF:3F:2E:8C:BB:B7:14:85:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa
Signing time:             Fri 08 Aug 2025 13:21:44 +0000
ROA not before:           Fri 08 Aug 2025 13:16:44 +0000
ROA not after:            Fri 07 Aug 2026 13:21:44 +0000
asID:                     267128
IP address blocks:        45.229.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.crl
                          rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 01:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d9:b0:fe:63:77:0a:8c:2f:fc:24:37:61:22:c4:5b:17:e1:1d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206D33F3A8B725D8326CB6CF3F2E8CBBB714859E
        Validity
            Not Before: Aug  8 13:16:44 2025 GMT
            Not After : Aug  7 13:21:44 2026 GMT
        Subject: CN=4D40106151C68F385AD29D1E98806A834944C0A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:73:4d:5d:f1:a7:7d:ef:7b:7d:3a:43:64:a1:
                    3c:39:85:9a:20:73:a9:95:77:3e:a2:89:c5:fe:96:
                    21:c7:15:04:a4:cd:46:8d:b8:4a:00:7b:3e:b9:ae:
                    a2:8d:e7:8e:4b:47:54:bf:c1:d6:f2:29:60:35:14:
                    1d:cf:19:93:5f:c5:5c:f4:c9:f9:a2:22:29:9c:54:
                    7b:66:b9:92:bb:af:24:d6:e0:a3:d7:3f:9e:97:3b:
                    ad:0e:53:73:af:28:dd:fd:6f:42:20:79:c0:67:ec:
                    ed:5d:66:3a:82:ac:e1:07:30:cf:45:6b:a3:a0:39:
                    8e:03:2d:0b:fb:a7:74:fc:5f:56:19:f3:29:11:65:
                    3c:e3:df:1e:f2:1d:c6:c3:55:33:3d:da:17:1a:10:
                    72:15:ff:30:e4:67:e5:6b:7c:a6:37:e2:41:ce:70:
                    f5:74:60:19:6e:06:3c:6b:cc:87:71:83:bc:df:c9:
                    2a:61:ab:56:0e:92:89:3a:dc:15:80:30:5a:72:cd:
                    cd:f5:89:e6:29:5c:9f:64:92:09:4f:8a:92:12:f6:
                    59:f5:ed:3d:76:22:09:35:9b:7e:b8:73:4e:3c:44:
                    77:84:5e:2d:b9:8a:e2:af:68:ce:89:c3:0b:f1:86:
                    49:22:d2:f6:b9:71:31:fc:7e:ed:de:7c:14:52:d0:
                    4a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:40:10:61:51:C6:8F:38:5A:D2:9D:1E:98:80:6A:83:49:44:C0:A6
            X509v3 Authority Key Identifier:
                keyid:20:6D:33:F3:A8:B7:25:D8:32:6C:B6:CF:3F:2E:8C:BB:B7:14:85:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:6d:6b:9d:cf:1c:25:e0:90:98:e7:d1:2f:bd:ab:17:79:a8:
         3d:a3:7a:63:9a:c7:97:1f:37:4a:90:4d:0e:77:8c:cd:8b:c6:
         33:d7:7e:13:0d:35:bb:c4:be:80:fe:d9:03:50:17:33:21:12:
         8a:32:c6:69:33:c7:37:27:7c:16:37:62:81:51:96:0c:82:88:
         33:72:3c:3c:89:9c:30:77:d0:c7:09:56:d6:9f:0d:23:54:73:
         77:06:75:ea:40:94:77:63:c1:91:20:9e:a2:0d:5e:f6:84:9a:
         2c:5a:74:f7:b7:47:c2:3d:69:45:ce:98:bd:da:d6:00:87:e0:
         0e:38:92:d5:b7:0c:f0:ed:db:2e:b7:3c:c4:84:a5:da:28:82:
         f1:69:ee:b3:a2:da:6a:1e:46:ec:a6:87:2c:68:c8:a8:a6:12:
         78:4e:76:99:97:44:2d:53:e2:f1:0f:02:20:42:0f:d8:bd:dd:
         af:c8:59:d7:59:9e:b9:3e:3d:bb:1f:0c:43:3c:e7:8d:f6:75:
         d6:b6:e1:f7:60:e2:57:13:a2:90:86:8f:e0:dd:a4:53:b9:c5:
         7c:2e:80:38:e7:f1:74:12:fd:eb:7e:bf:bc:eb:fc:d5:26:08:
         0a:38:ab:f5:4c:a5:e4:c9:49:02:f0:34:4a:17:90:1b:1d:64:
         2e:6a:42:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:57:50 2025 by rpki-client