Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          QCbZMrUKJgBUWwCX4f2grxkhDaOONDhgbpeLvId+Sr8=
Subject key identifier:   C6:FD:92:56:ED:6D:EC:B9:56:44:23:4C:1E:FA:C0:06:85:BD:36:DC
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       6E87DAD32A0156885890E987C0518C1021F37845
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa
Signing time:             Thu 31 Jul 2025 21:32:40 +0000
ROA not before:           Thu 31 Jul 2025 21:27:40 +0000
ROA not after:            Thu 30 Jul 2026 21:32:40 +0000
asID:                     268205
IP address blocks:        45.236.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 11:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:87:da:d3:2a:01:56:88:58:90:e9:87:c0:51:8c:10:21:f3:78:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: Jul 31 21:27:40 2025 GMT
            Not After : Jul 30 21:32:40 2026 GMT
        Subject: CN=C6FD9256ED6DECB95644234C1EFAC00685BD36DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f4:76:1a:3a:2e:21:42:04:c2:8b:f5:b9:79:
                    f5:d0:7e:b3:e5:60:27:d9:7c:ef:5d:74:31:2a:74:
                    b7:af:cd:24:22:8e:c1:54:d6:a9:af:87:f7:28:5f:
                    c7:92:f9:ba:44:fc:e0:b4:d3:97:1c:80:0a:1b:6b:
                    26:70:22:3e:73:35:c9:a9:56:f8:b9:97:37:a0:5c:
                    7f:30:9d:6d:f9:6e:0b:63:fb:52:16:50:b9:6f:3e:
                    82:e9:f4:f4:8d:21:4c:0f:5e:58:14:57:d6:30:ab:
                    1a:5c:6a:e5:d6:9f:3f:71:7c:6d:10:40:fc:55:d4:
                    73:21:90:15:7f:fa:d8:63:6e:41:5c:71:78:21:5c:
                    45:ca:dc:7f:82:d4:97:e0:16:6f:e5:bf:43:e6:c1:
                    1c:4c:28:5b:07:f7:4c:e8:3c:67:2b:c7:e6:f4:34:
                    c6:4a:e8:73:68:89:bd:3a:9f:d7:ec:49:39:c1:75:
                    83:ff:67:c3:94:88:6f:1c:a5:e4:b0:59:96:55:b8:
                    b4:78:61:ad:6e:27:da:84:25:68:2e:03:f7:35:20:
                    0b:3c:8b:32:9b:2b:b2:31:d6:26:a8:5f:88:df:c3:
                    02:7e:61:07:6d:58:05:b9:f5:1f:26:2c:61:d3:a0:
                    79:dd:34:94:08:a7:dd:30:ba:e7:c5:7b:8f:ae:d3:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FD:92:56:ED:6D:EC:B9:56:44:23:4C:1E:FA:C0:06:85:BD:36:DC
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:6e:f7:e8:3a:77:cd:00:89:20:78:b5:2b:16:a0:e4:85:41:
         82:7c:a0:6c:59:c7:76:e1:8b:5e:0d:34:a8:8a:94:6d:f5:2a:
         aa:dc:ab:75:d3:6d:be:75:5e:a1:0e:0e:db:29:5c:7a:06:67:
         8f:35:79:53:e2:dc:c9:f4:8f:06:da:89:3b:0c:4e:92:1a:d8:
         a5:72:1b:b5:ed:b3:98:8d:02:a6:d8:ee:5b:4d:d6:99:f3:dc:
         5c:4f:a6:49:f5:40:43:45:47:a2:f5:0f:59:f9:2d:84:bb:a8:
         8b:e9:75:34:ca:2b:4e:d8:f4:01:ef:bb:95:46:76:27:2b:b7:
         39:6f:bb:cd:24:67:80:a7:6d:e9:44:9a:66:fd:00:81:ce:7e:
         b0:8f:53:2a:23:e2:df:12:6e:cc:45:1d:24:3d:33:1e:a8:e5:
         9e:c2:92:7d:1a:89:99:16:ee:c9:e0:00:b8:5d:d8:4d:55:b6:
         84:9c:c4:d4:83:e3:dc:7e:c0:72:e3:c4:70:a9:1e:6f:e8:5c:
         2c:93:f8:b8:53:fd:85:35:15:b1:0c:35:87:28:84:b5:fc:b6:
         3e:8f:6e:ca:be:de:f7:c7:1f:25:01:28:b0:43:44:7f:4c:77:
         c6:81:a4:3f:a0:37:44:a0:70:af:39:86:4b:fa:1c:26:91:e1:
         87:25:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:10:28 2025 by rpki-client