Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32322d3234203d3e20323637313234.roa
File:                     34352e3232392e35322e302f32322d3234203d3e20323637313234.roa (raw, json)
Hash identifier:          /uc6c7XyiXCTAIBhDpl5LyVPPQopAFXX1/L/0TTtV8c=
Subject key identifier:   70:B8:F3:4A:70:D0:EE:83:1B:5F:9F:AE:D7:2B:06:E8:74:DB:B4:49
Certificate issuer:       /CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
Certificate serial:       26C53626EEB1D21C5EE996360844601DEA587C43
Authority key identifier: EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32322d3234203d3e20323637313234.roa
Signing time:             Wed 23 Jul 2025 15:40:33 +0000
ROA not before:           Wed 23 Jul 2025 15:35:33 +0000
ROA not after:            Wed 22 Jul 2026 15:40:33 +0000
asID:                     267124
IP address blocks:        45.229.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl
                          rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 08:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c5:36:26:ee:b1:d2:1c:5e:e9:96:36:08:44:60:1d:ea:58:7c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
        Validity
            Not Before: Jul 23 15:35:33 2025 GMT
            Not After : Jul 22 15:40:33 2026 GMT
        Subject: CN=70B8F34A70D0EE831B5F9FAED72B06E874DBB449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:62:5d:bf:e3:e5:64:63:73:a5:01:2f:2d:
                    e3:45:8d:10:26:21:c7:6b:c6:af:cc:5b:ff:1e:2b:
                    a6:d4:7f:31:be:a3:69:25:3d:6c:15:9b:17:75:78:
                    68:55:fe:db:c6:5f:18:98:67:e2:13:37:d6:15:2d:
                    1b:29:19:fa:3c:27:ea:ec:45:88:f7:d4:69:4f:f2:
                    d9:c4:35:11:56:b1:f6:9a:f7:53:c7:21:25:10:88:
                    8e:79:78:aa:7f:0b:ea:0d:59:93:1c:f7:c8:80:7f:
                    cc:96:7e:cb:57:1e:ff:30:b6:ba:73:83:26:36:01:
                    24:a0:4c:3d:4b:92:d0:2e:b9:bd:53:f0:73:72:9c:
                    87:39:97:45:71:ca:f1:1f:4c:9c:81:dd:43:04:e5:
                    8f:8d:2a:ac:fc:b7:ab:70:4a:8c:7b:a2:f7:80:47:
                    fc:4e:43:b3:0d:e5:e1:b2:24:59:1a:ad:d3:1b:c8:
                    a1:f0:9e:94:d3:60:61:8f:44:dd:3b:5f:ea:a8:ec:
                    b6:51:bd:cb:9e:f6:95:f5:b1:ea:0a:d8:f8:86:66:
                    65:05:b4:ef:14:1d:1d:d3:73:5e:6a:be:77:e3:b2:
                    b4:5d:10:a8:cc:65:78:c4:29:bb:82:c8:7c:a3:89:
                    19:8e:63:ed:d6:ec:d8:a8:c6:ed:ae:fc:51:0f:a1:
                    18:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B8:F3:4A:70:D0:EE:83:1B:5F:9F:AE:D7:2B:06:E8:74:DB:B4:49
            X509v3 Authority Key Identifier:
                keyid:EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/34352e3232392e35322e302f32322d3234203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:8d:16:fe:2a:0d:8e:e8:3e:78:8a:5a:8d:26:2a:f1:a3:12:
         f3:3c:70:7e:07:85:6e:0b:8c:9f:85:c3:46:77:f2:08:7a:2e:
         58:15:b0:23:95:14:a1:14:a3:ad:62:7e:98:b5:75:28:1d:1a:
         23:af:46:28:08:c5:dd:d4:39:86:28:06:ae:9f:b5:fc:0e:5a:
         8f:f5:14:e1:9c:10:86:af:2c:23:65:dd:d3:1e:29:91:fd:08:
         4b:3b:02:bf:df:0f:96:ef:09:21:d7:d3:28:0f:33:a6:a3:e9:
         0a:d2:29:72:7f:2c:82:d1:c9:54:5a:52:e8:2b:8e:11:53:9b:
         f9:9b:a1:2f:88:e4:70:9b:fa:a9:bc:16:bb:61:86:a5:9a:8d:
         a0:f7:7b:b4:97:b4:b7:55:e4:f5:61:2c:58:75:0e:86:29:b6:
         11:50:e3:b8:3c:15:f5:70:0b:72:54:05:c3:5a:40:10:df:07:
         a2:c9:c0:c6:7e:04:8b:64:0d:e7:ef:86:a8:d1:53:cf:97:c6:
         31:12:84:8b:fa:74:1a:ae:a4:02:88:5f:de:05:b7:9a:aa:99:
         a4:4a:75:df:ad:e6:90:84:9c:30:1e:db:fd:be:36:e6:d2:c7:
         c9:7b:bb:d2:9f:f8:eb:f2:e6:03:25:b4:c2:46:f1:07:b0:e3:
         bb:4f:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:20:18 2025 by rpki-client