Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131342e302f32332d3233203d3e20323637363537.roa
File:                     34352e3232342e3131342e302f32332d3233203d3e20323637363537.roa (raw, json)
Hash identifier:          KimwajkIBAKKOS0h3qMz7ajSEAY3qEVonpTmcqSqJvo=
Subject key identifier:   CB:CA:05:38:43:DE:19:D7:C8:87:7E:D5:31:64:59:90:D7:C5:C4:AE
Certificate issuer:       /CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20
Certificate serial:       26A5F1A5B05ED7ACE1CECED66F2408150AB92D97
Authority key identifier: 2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131342e302f32332d3233203d3e20323637363537.roa
Signing time:             Thu 31 Jul 2025 13:26:35 +0000
ROA not before:           Thu 31 Jul 2025 13:21:35 +0000
ROA not after:            Thu 30 Jul 2026 13:26:35 +0000
asID:                     267657
IP address blocks:        45.224.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl
                          rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 13:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a5:f1:a5:b0:5e:d7:ac:e1:ce:ce:d6:6f:24:08:15:0a:b9:2d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20
        Validity
            Not Before: Jul 31 13:21:35 2025 GMT
            Not After : Jul 30 13:26:35 2026 GMT
        Subject: CN=CBCA053843DE19D7C8877ED531645990D7C5C4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:67:cd:c7:06:a1:41:2b:77:33:e1:5d:11:
                    dc:f3:0f:19:7c:d7:34:57:cb:22:a3:52:35:25:f0:
                    45:40:53:3e:76:2c:0f:82:50:2d:a5:d4:fc:9a:e2:
                    aa:4f:6a:a1:52:f7:5d:bc:03:d3:85:c6:83:86:22:
                    51:c6:71:53:d1:5e:1c:78:5c:a6:62:79:ff:b2:ba:
                    55:d1:f4:1b:3b:93:57:42:ee:fe:8c:01:68:ee:91:
                    f1:b8:92:ce:ef:7b:1b:3f:b5:ab:64:45:9d:e0:d6:
                    54:e5:06:54:58:b6:f1:33:f3:12:fc:a4:b1:8c:2f:
                    d3:8d:9f:75:e1:cf:77:83:b8:ba:b1:87:e2:44:d2:
                    e3:11:c1:d1:93:fd:b8:3e:52:c6:f6:4d:88:cf:94:
                    53:7c:13:67:94:38:fa:17:66:24:66:12:45:96:1a:
                    68:06:e7:91:b0:90:78:4a:ea:e2:47:26:37:91:8b:
                    c3:0d:89:04:11:80:2a:3f:4e:bc:38:a9:2d:96:0d:
                    b4:a4:70:09:5a:71:fb:b7:0d:3b:3f:d8:7c:a2:b4:
                    36:c7:4f:87:75:50:65:e0:ca:92:54:ad:41:f3:49:
                    80:13:17:3c:ea:db:ca:3f:60:24:01:26:78:33:43:
                    22:bd:df:5c:21:30:95:8c:a4:62:e4:ec:2e:99:bd:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CA:05:38:43:DE:19:D7:C8:87:7E:D5:31:64:59:90:D7:C5:C4:AE
            X509v3 Authority Key Identifier:
                keyid:2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131342e302f32332d3233203d3e20323637363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:03:82:40:da:ff:45:77:3b:a1:d2:d2:5d:27:cd:f4:b9:
         4f:8f:4c:f5:02:66:9d:36:56:b3:b6:5e:a2:78:e6:3f:28:d8:
         23:d4:1d:d7:cc:4f:4d:5c:84:77:39:1e:f5:62:3c:f5:72:96:
         2e:42:e1:c7:49:56:f4:41:c2:b7:e0:d5:28:13:08:90:d4:f6:
         6d:88:f2:ae:e0:3e:40:5f:10:5e:ee:b3:16:d5:83:50:4d:3c:
         74:33:4e:a2:4e:f9:ad:16:15:96:4a:38:ae:06:28:7f:eb:a1:
         30:3d:0e:86:a0:9f:b6:39:ab:3d:5b:4f:cc:58:c3:22:4c:16:
         a9:12:09:48:45:a8:f7:f5:49:8b:89:b5:d2:cb:3a:82:87:93:
         35:b5:80:44:af:61:07:e8:24:ce:a2:87:82:1d:b3:2c:fd:bb:
         ff:a2:94:4d:7c:32:7d:e6:7d:85:e3:8c:df:eb:86:5b:20:1e:
         57:cc:13:ac:58:14:de:8c:70:a4:41:3e:9e:39:5a:88:f8:a1:
         bf:a5:e3:5a:32:0b:d9:c0:f6:ac:7a:5d:39:a8:29:c0:bb:b0:
         07:de:22:89:ae:1e:af:1e:0a:25:3c:af:93:02:d4:37:27:8b:
         03:f5:92:89:1d:65:9c:0a:ed:bd:27:cd:c9:9f:17:24:75:9f:
         3e:c0:7a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:29:19 2025 by rpki-client