Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa
File:                     34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (raw, json)
Hash identifier:          YeQQQga2IPXcQPI4WZR6ySFBpq83/d3HIcA7pJ/zYnk=
Subject key identifier:   C2:FB:74:DB:9A:7C:A5:0D:8C:7E:2F:F7:AE:BC:A2:72:8A:5F:D6:C0
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       3C0228D3355FAC52865763A3E7FB690D9668F2BF
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa
Signing time:             Thu 31 Jul 2025 21:32:40 +0000
ROA not before:           Thu 31 Jul 2025 21:27:40 +0000
ROA not after:            Thu 30 Jul 2026 21:32:40 +0000
asID:                     268205
IP address blocks:        45.236.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:02:28:d3:35:5f:ac:52:86:57:63:a3:e7:fb:69:0d:96:68:f2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: Jul 31 21:27:40 2025 GMT
            Not After : Jul 30 21:32:40 2026 GMT
        Subject: CN=C2FB74DB9A7CA50D8C7E2FF7AEBCA2728A5FD6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:34:87:17:25:33:d3:ca:63:19:29:c4:17:
                    ab:0d:32:01:bd:e8:90:0d:f9:21:27:19:e9:30:39:
                    4b:30:ed:ff:7b:3e:32:94:28:2a:b8:15:29:33:de:
                    32:12:c0:81:ee:f7:76:f7:15:28:bc:10:9f:94:bf:
                    b3:a7:c7:4d:01:eb:e8:24:22:6d:3d:22:68:cb:b8:
                    23:36:4d:23:cd:a1:08:e9:5d:be:7b:0d:d3:55:83:
                    70:91:28:d5:ef:6c:47:d2:83:09:d4:db:06:d3:6e:
                    31:b1:84:b5:56:0e:25:19:f9:2e:d3:95:1c:a6:64:
                    44:98:3a:7b:ea:32:e5:64:32:55:ed:45:00:82:c4:
                    f5:ac:97:1e:10:cf:dc:d3:45:59:b5:8f:2c:44:28:
                    90:0a:f3:09:b0:a4:71:af:5e:16:bf:2b:0b:95:4f:
                    3b:cb:fc:d2:03:1c:11:eb:53:68:e6:47:1d:a5:e0:
                    8a:1a:76:f7:75:06:da:b6:25:68:6c:0b:b7:f0:6d:
                    cb:f6:f1:12:cb:23:18:73:22:bc:86:6c:88:ab:48:
                    6c:d0:96:b3:cc:6a:f6:9b:3a:5f:09:8c:f3:e6:0e:
                    b3:65:a6:ef:97:44:aa:4e:ed:ea:f7:25:0d:47:7d:
                    7e:1a:ee:37:0c:c3:ec:9c:78:7b:ef:3b:10:63:d1:
                    4f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FB:74:DB:9A:7C:A5:0D:8C:7E:2F:F7:AE:BC:A2:72:8A:5F:D6:C0
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:86:d6:d7:06:ba:80:93:5e:b9:93:19:5a:d0:84:af:a8:49:
         c3:e9:23:9a:e9:3c:f9:b4:35:3c:ae:b6:49:df:ab:36:7e:60:
         26:b2:26:24:aa:75:38:81:df:7e:42:40:0d:a3:27:3e:89:2e:
         f6:d0:68:4a:a4:41:75:2d:f6:0a:e4:e5:81:db:23:53:c3:a3:
         1f:f2:c7:1e:af:ca:15:63:dc:e1:2b:11:1b:e9:6b:f9:26:01:
         f0:05:c9:17:55:a0:42:51:7d:ae:45:ce:a1:af:2d:5c:63:d2:
         35:61:6e:2e:f2:ac:23:0a:71:64:6b:c2:fe:76:85:27:e3:42:
         c4:1f:17:ea:77:3a:a1:65:72:fa:6e:ff:0c:86:25:78:12:89:
         9f:52:6d:44:7e:a6:39:57:c9:54:7f:70:ec:cf:89:b3:c7:48:
         bb:c1:2e:55:0d:8d:ee:20:25:88:ea:72:66:67:e5:91:5e:b4:
         3d:4b:17:2a:6f:76:27:6a:c6:3b:07:f5:98:e3:8a:ad:53:34:
         6d:8c:de:f9:22:63:b8:40:28:af:9a:60:42:32:18:d2:88:2c:
         ad:65:eb:06:0f:af:df:24:f1:84:38:87:e4:62:3c:2a:03:dd:
         c3:93:fc:0f:ab:9d:a0:59:61:e0:8c:85:13:ec:22:9c:fd:c6:
         1f:72:55:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:43 2025 by rpki-client