Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35302e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          qZKUtAG+JVR2dVS4JiNI+Kw6jfhzxGMb3WwVCawye94=
Subject key identifier:   C6:8F:EF:45:84:F4:4D:04:83:57:63:9B:16:6D:54:59:F0:2F:67:8B
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       7E2782778FD418301F6C82D796CC7434A4A6B83D
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35302e302f32342d3234203d3e20323638323035.roa
Signing time:             Thu 31 Jul 2025 21:32:40 +0000
ROA not before:           Thu 31 Jul 2025 21:27:40 +0000
ROA not after:            Thu 30 Jul 2026 21:32:40 +0000
asID:                     268205
IP address blocks:        45.236.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 11:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:27:82:77:8f:d4:18:30:1f:6c:82:d7:96:cc:74:34:a4:a6:b8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: Jul 31 21:27:40 2025 GMT
            Not After : Jul 30 21:32:40 2026 GMT
        Subject: CN=C68FEF4584F44D048357639B166D5459F02F678B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:d4:fe:01:0c:65:81:38:c1:31:40:73:00:
                    d4:02:28:ba:4a:11:6f:b5:d5:33:04:45:90:a5:e8:
                    75:a1:c8:dd:0f:a8:5c:9f:92:2a:b3:dd:ad:29:c1:
                    72:2c:82:38:b0:af:ad:3b:2a:da:ac:a1:7a:48:2e:
                    1f:63:16:ec:e5:38:53:fc:b9:61:9f:a2:69:b0:b1:
                    7a:e3:b1:2f:a2:82:42:52:21:7b:1d:a6:95:ce:e2:
                    c5:00:d4:4c:32:1f:f6:10:13:23:81:61:51:ee:76:
                    b6:db:9d:4c:4c:42:cb:99:d7:29:92:fa:bf:35:39:
                    bb:66:fb:10:73:a1:14:f3:8a:60:9b:bd:a3:71:d0:
                    fd:23:26:e7:87:8e:3e:cf:39:ef:70:48:3f:27:22:
                    0a:e9:9a:5a:15:5c:41:99:bf:54:6a:e2:68:e3:20:
                    b0:d8:46:79:c4:a9:f4:b1:47:12:8a:23:25:13:4a:
                    d3:e6:c8:ab:be:58:ce:8c:28:f5:24:b8:b4:61:3c:
                    68:fa:4e:d0:5b:6a:cd:be:ba:76:71:d7:70:bf:b1:
                    bc:0e:da:f6:d7:78:b4:18:f3:63:eb:eb:c9:d3:68:
                    52:04:21:5a:8b:d5:ab:4e:32:73:e3:9d:a4:7e:8e:
                    8d:e0:79:19:b4:03:1c:b2:b8:b0:be:d5:37:c6:bb:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8F:EF:45:84:F4:4D:04:83:57:63:9B:16:6D:54:59:F0:2F:67:8B
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35302e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:ff:a8:37:7e:d0:21:e5:ff:ca:65:ed:25:54:0d:c4:fe:b6:
         96:9e:fa:92:97:b3:45:35:a2:ec:ee:7a:75:63:f0:c1:46:20:
         03:79:96:6b:1c:0b:e9:81:a3:dc:6c:c9:12:b3:ee:fb:b2:bd:
         da:1b:32:d3:13:21:01:d8:8a:89:df:5b:60:13:98:b0:8c:a9:
         e3:f3:36:0e:6b:a3:8b:44:b9:f4:9d:06:27:3b:2e:67:2b:84:
         1f:3e:03:c7:90:d0:1d:84:31:b0:dd:95:f7:4b:9d:b9:b5:39:
         13:2e:84:52:c2:3b:a4:21:f8:d2:85:65:3f:33:63:21:b1:53:
         05:17:49:5b:f2:a6:21:cb:85:d9:a6:a0:27:a8:d8:cf:38:c9:
         cc:53:4f:de:c2:cb:27:c4:6a:64:10:42:30:92:20:c4:9b:19:
         6a:71:c2:cb:62:49:a6:e4:9a:e3:41:26:6a:fb:5b:a0:bc:d3:
         41:aa:b4:dc:af:95:50:84:ed:d4:aa:dc:cb:f4:ed:d3:69:b3:
         7c:0e:25:02:20:83:13:8a:ec:66:f0:9e:4b:2b:6e:3e:c2:18:
         02:39:87:f8:27:c5:fa:aa:06:90:5a:71:0f:6c:b3:9e:27:e2:
         d7:38:f5:2d:c3:d7:0f:79:d5:22:bc:24:4a:f9:7d:8c:af:01:
         bb:c3:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:31:44 2025 by rpki-client