Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/34352e3233352e3133322e302f32322d3234203d3e20323637343232.roa
File:                     34352e3233352e3133322e302f32322d3234203d3e20323637343232.roa (raw, json)
Hash identifier:          fwixdrQWEPst8s+eVaUhnE8mUnCaPHjzEVa6AGdzW3U=
Subject key identifier:   A1:54:D1:1F:48:B3:E4:20:94:24:7A:43:94:61:65:25:24:45:1B:DE
Certificate issuer:       /CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2
Certificate serial:       6B7526BA89D694E68D5F5C840C8B8243AC8DFD79
Authority key identifier: 8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/34352e3233352e3133322e302f32322d3234203d3e20323637343232.roa
Signing time:             Thu 07 Aug 2025 16:52:07 +0000
ROA not before:           Thu 07 Aug 2025 16:47:07 +0000
ROA not after:            Thu 06 Aug 2026 16:52:07 +0000
asID:                     267422
IP address blocks:        45.235.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl
                          rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 16:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:75:26:ba:89:d6:94:e6:8d:5f:5c:84:0c:8b:82:43:ac:8d:fd:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2
        Validity
            Not Before: Aug  7 16:47:07 2025 GMT
            Not After : Aug  6 16:52:07 2026 GMT
        Subject: CN=A154D11F48B3E42094247A439461652524451BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b4:ae:58:e8:0e:3c:c6:f4:03:fb:1a:2b:c4:
                    b5:b3:1b:60:d6:c4:9c:12:12:1f:77:fd:4b:28:a8:
                    21:9d:9d:0c:66:36:0a:85:45:2c:da:46:3b:4e:ce:
                    59:fa:55:48:af:41:7a:8e:62:b4:26:c0:c7:a2:9c:
                    c0:81:0b:d8:8f:ad:cb:ba:c0:f4:10:96:b0:b7:32:
                    ae:bf:97:3b:9b:70:e2:10:cc:0f:c8:8f:8f:45:37:
                    c5:13:d2:93:10:27:26:ae:e1:cc:ae:0b:6f:c9:ec:
                    72:2d:7c:b7:1e:7f:66:05:c9:c8:76:0c:58:43:c1:
                    fd:11:41:78:63:29:39:b1:d0:dd:52:0e:6e:9f:1e:
                    3a:36:76:5e:e6:b5:26:9b:18:18:61:5d:85:76:59:
                    b4:10:f3:a0:ef:ca:15:7c:51:56:a1:9a:fd:44:ac:
                    87:06:d9:ad:d9:08:08:84:dd:08:e1:d0:e4:d8:f8:
                    10:ca:a1:04:b1:61:29:41:37:fa:d6:ce:ca:e9:5e:
                    84:c8:e1:13:56:c0:b0:1b:d0:0e:0c:53:17:b4:bd:
                    de:5d:2e:94:08:c7:94:67:9a:1e:36:b7:f0:55:15:
                    36:43:af:23:46:fe:8f:51:e2:2c:65:3f:3a:2c:c0:
                    48:96:8e:12:78:d7:69:30:20:67:2e:9e:bf:48:f0:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:54:D1:1F:48:B3:E4:20:94:24:7A:43:94:61:65:25:24:45:1B:DE
            X509v3 Authority Key Identifier:
                keyid:8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/34352e3233352e3133322e302f32322d3234203d3e20323637343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:ee:a4:3d:27:d4:86:b6:c9:47:f1:f1:59:d3:9f:1a:46:a6:
         f5:6c:eb:18:06:19:0c:a9:cd:29:a9:f6:79:72:15:26:a9:e3:
         31:76:e1:a1:77:fb:af:d8:fa:84:9f:b5:48:e7:3b:bb:e2:45:
         fd:17:7a:14:2e:cf:70:f6:62:a6:57:c2:1d:3d:21:26:ec:49:
         f5:60:82:5a:5c:7e:71:4c:d1:6c:00:60:d6:e6:3d:63:c0:58:
         d9:af:9c:de:e7:7b:37:10:73:9c:a7:ed:ae:c1:58:70:ae:97:
         7d:cc:44:c0:6d:0c:d1:32:6b:f2:c9:98:89:4c:4b:dc:d2:55:
         1a:21:4b:72:15:f6:36:8b:84:c6:bd:bf:ad:6b:38:e6:83:c3:
         10:d3:8b:fc:fd:0d:91:84:d7:ae:0e:2c:09:6e:9d:56:a1:16:
         2d:84:1e:aa:c7:e9:02:72:54:72:78:e2:16:26:bb:41:16:e8:
         e9:16:3b:a3:47:13:b5:89:80:94:38:ec:91:12:18:80:a7:dc:
         97:09:1f:2f:bf:36:30:8b:72:79:a7:44:91:f6:20:53:94:b8:
         c1:28:98:f6:2a:54:d1:96:0b:d3:b0:b3:bd:d5:e3:a9:b6:89:
         d7:c0:5b:df:d1:1e:bc:31:a5:42:51:83:41:41:6b:39:f3:50:
         60:df:9f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:26:46 2025 by rpki-client