Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137362e302f32322d3332203d3e20323636393138.roa
File:                     34352e3232342e3137362e302f32322d3332203d3e20323636393138.roa (raw, json)
Hash identifier:          N9GnngUjTNjoK1tGJohawIiruhxmpVboOeyZkt912Vo=
Subject key identifier:   B3:AA:F4:76:A2:31:9C:30:F3:E9:8E:62:2C:39:49:75:88:BF:5A:3D
Certificate issuer:       /CN=5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407
Certificate serial:       57E1DE4CD8774D213835E8CABD69ED8EA128FB7B
Authority key identifier: 5F:4C:A5:F4:C5:FC:5D:10:89:78:F1:DD:1C:D1:60:12:3F:F4:D4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137362e302f32322d3332203d3e20323636393138.roa
Signing time:             Thu 03 Jul 2025 21:07:44 +0000
ROA not before:           Thu 03 Jul 2025 21:02:44 +0000
ROA not after:            Thu 02 Jul 2026 21:07:44 +0000
asID:                     266918
IP address blocks:        45.224.176.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.crl
                          rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 15:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e1:de:4c:d8:77:4d:21:38:35:e8:ca:bd:69:ed:8e:a1:28:fb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407
        Validity
            Not Before: Jul  3 21:02:44 2025 GMT
            Not After : Jul  2 21:07:44 2026 GMT
        Subject: CN=B3AAF476A2319C30F3E98E622C39497588BF5A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a8:b8:82:66:f9:d2:cb:4a:e2:97:57:8e:87:
                    62:ff:c5:e3:dc:fc:04:e8:be:57:6a:89:cc:71:5c:
                    01:03:47:74:b1:4c:1c:c5:f5:97:1d:55:48:28:30:
                    50:41:80:7f:cb:50:ca:86:c6:e3:f0:2b:98:07:15:
                    13:7a:ae:c3:2a:90:51:e6:97:fe:99:50:2c:7c:68:
                    fa:75:cf:7b:77:74:ed:bb:d2:6b:f9:89:6a:d9:dc:
                    db:88:78:f0:dc:d9:69:4c:51:f6:3c:58:2a:57:6c:
                    e9:0a:03:1e:5e:b4:da:d9:79:e5:b5:ff:71:78:39:
                    75:87:a4:90:0d:9c:66:63:4b:a0:51:6c:c5:85:29:
                    22:ec:db:10:66:8a:dd:ec:98:b2:5a:58:64:09:1d:
                    5d:10:bd:1e:69:f7:eb:e8:04:45:10:29:26:a6:eb:
                    50:30:a0:dc:91:1d:2d:65:88:99:3e:ba:79:9e:f4:
                    36:97:d2:12:cb:f5:ab:b1:0b:19:1b:31:f3:7d:ec:
                    65:f8:1d:5b:74:f3:58:70:5f:33:fa:ed:0e:75:22:
                    be:42:76:d8:c7:02:9c:6c:67:62:b2:e0:c9:51:e3:
                    83:91:93:14:14:f7:82:e0:f5:9c:42:ea:99:cf:4e:
                    e1:02:85:1a:46:da:c6:db:bf:74:e9:80:64:eb:8a:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AA:F4:76:A2:31:9C:30:F3:E9:8E:62:2C:39:49:75:88:BF:5A:3D
            X509v3 Authority Key Identifier:
                keyid:5F:4C:A5:F4:C5:FC:5D:10:89:78:F1:DD:1C:D1:60:12:3F:F4:D4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4CA5F4C5FC5D108978F1DD1CD160123FF4D407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137362e302f32322d3332203d3e20323636393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:35:5f:86:7c:d9:19:c3:69:78:fe:da:4b:3b:86:7b:59:e3:
         a9:ef:34:ad:18:57:3a:86:cf:eb:89:97:6e:b4:42:fe:ed:b3:
         05:f1:66:1a:26:ca:1f:ff:09:97:92:7c:40:00:88:29:ba:12:
         eb:b4:bf:06:b6:2f:3f:8e:fb:6e:09:a6:ad:b2:6f:26:c8:7f:
         3c:eb:b6:d6:27:70:85:9a:91:f6:42:3a:d3:1b:9a:9a:06:ff:
         f4:64:fd:b9:11:db:2e:ca:76:65:c3:eb:b2:1d:6d:22:4c:3f:
         c5:94:bb:ba:e8:a2:b3:7d:ca:fa:97:ea:0a:c5:5a:b3:7c:87:
         c3:97:48:40:57:94:e9:80:f7:40:51:12:2a:a2:4c:1e:c9:08:
         d6:47:ca:e6:c9:22:3f:32:3a:6e:09:55:45:5a:62:50:77:4f:
         cd:a6:99:d3:6a:a7:02:b7:fb:97:17:d8:fc:4a:20:5f:94:c2:
         15:dd:78:24:27:de:79:bc:b7:bd:5f:d3:f8:54:93:7e:63:ae:
         63:dd:42:92:e5:61:aa:2d:a2:d3:20:71:64:bf:24:d1:f0:6a:
         9a:4c:ff:44:7d:85:7e:7a:5a:55:1d:30:db:70:76:ec:67:7f:
         88:c2:dd:e5:09:44:ef:f2:b1:87:52:65:e3:7e:f4:5a:77:6c:
         f6:9c:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:38:08 2025 by rpki-client