Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa
File:                     34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa (raw, json)
Hash identifier:          diYAEr+7pzbASb3Epz1+kGDz2IRV0f/PthbAxQoiHxg=
Subject key identifier:   83:07:54:68:C4:3C:83:60:50:04:D0:93:DD:96:15:B5:4A:00:A0:D8
Certificate issuer:       /CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
Certificate serial:       35006D7E1AFAAA37A78E482999B62661F949F1C6
Authority key identifier: 22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa
Signing time:             Thu 16 Oct 2025 01:03:43 +0000
ROA not before:           Thu 16 Oct 2025 00:58:43 +0000
ROA not after:            Thu 15 Oct 2026 01:03:43 +0000
asID:                     268360
IP address blocks:        45.238.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl
                          rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:00:6d:7e:1a:fa:aa:37:a7:8e:48:29:99:b6:26:61:f9:49:f1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
        Validity
            Not Before: Oct 16 00:58:43 2025 GMT
            Not After : Oct 15 01:03:43 2026 GMT
        Subject: CN=83075468C43C83605004D093DD9615B54A00A0D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:68:c0:40:0c:24:00:56:d7:ec:b5:16:b6:
                    37:fb:e6:fe:ab:45:3f:d2:51:73:a8:19:c9:41:60:
                    cf:6c:2a:24:b1:35:eb:3e:81:1e:9d:85:6f:77:f9:
                    9a:85:ce:f9:37:d1:34:86:08:52:9f:69:b5:fe:be:
                    43:e2:d3:42:3c:cd:1b:9f:f0:e1:1f:7d:bf:f7:d2:
                    59:1a:17:bc:56:64:10:17:f3:0c:56:33:f9:88:ff:
                    01:0b:33:dc:81:66:59:0e:44:04:9f:12:ad:c9:e2:
                    e8:c8:36:1a:9d:93:05:f0:fa:4b:4c:c0:ad:4f:5b:
                    ff:a1:5c:df:43:a3:41:5a:48:71:c1:37:07:be:1e:
                    23:93:5b:56:48:fb:f1:f0:ca:5a:a5:08:01:a5:ba:
                    48:5c:8f:58:53:55:42:74:d9:54:5d:dc:c5:4c:7c:
                    50:53:db:35:d8:c8:f9:b2:3b:14:03:01:c7:9a:48:
                    f0:75:bf:56:ef:39:c5:64:68:72:37:0e:91:5d:d1:
                    87:c3:2f:79:28:f2:08:b7:27:14:66:ed:5e:ac:8b:
                    a1:16:bb:fd:6d:a1:b6:cc:b7:95:90:14:61:9b:60:
                    e4:42:67:7f:ab:99:31:ad:ed:3c:55:26:03:46:73:
                    b8:33:0a:27:f6:18:99:1e:8d:87:75:41:35:88:a6:
                    60:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:07:54:68:C4:3C:83:60:50:04:D0:93:DD:96:15:B5:4A:00:A0:D8
            X509v3 Authority Key Identifier:
                keyid:22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:43:7b:01:78:d4:41:7f:8b:18:14:68:2c:07:ae:0e:54:c9:
         f8:72:99:00:e4:86:81:da:cc:91:9f:49:0d:45:db:80:b7:a1:
         08:91:82:0b:14:e9:c6:2e:e3:72:2b:70:a0:bc:6d:e3:85:f5:
         95:25:24:62:d1:2c:e0:5e:5f:d2:5f:ad:87:1f:67:82:18:25:
         16:b6:b0:7e:11:b9:b8:9b:f4:6d:6a:95:f5:86:30:67:de:fe:
         fb:87:6c:44:25:af:c2:ff:8a:76:2c:17:0b:c3:85:4b:81:7c:
         b9:8b:8d:6b:4e:79:05:f2:d0:67:dd:81:90:28:d2:7d:fd:42:
         63:6e:c5:bf:f7:5a:3e:72:40:75:35:0b:ad:33:9c:7d:ab:d1:
         ea:c3:6f:39:c6:e7:bc:a6:4d:12:a6:09:4e:0e:74:4d:69:e6:
         20:3e:03:d7:ff:c2:b1:9c:d7:aa:47:48:75:8e:e9:97:72:56:
         ad:19:11:a8:cd:d5:29:ec:05:69:0a:ec:20:0c:90:5c:0b:24:
         c6:85:3b:b5:4e:3c:77:29:4b:0c:0e:4f:82:f4:ed:91:7c:a5:
         42:0b:2e:37:14:48:7d:d5:c0:dd:cb:f4:e7:bc:b5:d0:13:2d:
         3b:2c:11:7d:cb:df:25:a7:a2:cc:c0:22:71:5d:41:52:a0:84:
         61:92:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:26:17 2025 by rpki-client