Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/34352e3233312e32382e302f32322d3332203d3e20323637313838.roa
File:                     34352e3233312e32382e302f32322d3332203d3e20323637313838.roa (raw, json)
Hash identifier:          q0SSCewKM+7yAOzk0lXvEvokyW2ke+FkprhgsRFOP4I=
Subject key identifier:   24:A4:4E:3E:1B:FB:4D:E8:A8:BE:76:3C:73:78:84:00:F9:50:73:47
Certificate issuer:       /CN=AF4C197F3665205A2C9EDF8E680E8AE575AF97D9
Certificate serial:       276854E968DD030D0D0C7B544BB82654E706BC94
Authority key identifier: AF:4C:19:7F:36:65:20:5A:2C:9E:DF:8E:68:0E:8A:E5:75:AF:97:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/34352e3233312e32382e302f32322d3332203d3e20323637313838.roa
Signing time:             Mon 30 Jun 2025 15:49:24 +0000
ROA not before:           Mon 30 Jun 2025 15:44:24 +0000
ROA not after:            Mon 29 Jun 2026 15:49:24 +0000
asID:                     267188
IP address blocks:        45.231.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.crl
                          rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:68:54:e9:68:dd:03:0d:0d:0c:7b:54:4b:b8:26:54:e7:06:bc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4C197F3665205A2C9EDF8E680E8AE575AF97D9
        Validity
            Not Before: Jun 30 15:44:24 2025 GMT
            Not After : Jun 29 15:49:24 2026 GMT
        Subject: CN=24A44E3E1BFB4DE8A8BE763C73788400F9507347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:17:38:d5:1f:9d:31:1c:70:24:3e:18:3b:
                    5e:fc:4f:85:e0:50:dd:09:42:d9:ca:10:e8:0b:9c:
                    8b:d3:53:e4:65:8f:b4:47:f4:b7:63:16:8c:27:a1:
                    13:4b:33:32:38:7e:1b:1c:e4:c0:e0:f5:2e:81:2d:
                    42:b4:5e:2c:69:70:f1:b1:51:60:0b:b6:4d:b6:1c:
                    b2:cf:a5:0c:1e:b1:74:58:4f:e3:d2:b7:ff:f9:60:
                    ec:75:50:84:b7:d6:ce:1d:b4:1b:37:b1:22:1e:81:
                    37:e6:d8:4b:31:d2:c0:15:40:9c:41:c0:20:b7:fb:
                    25:86:ab:3a:1f:69:bf:3d:85:e4:75:0d:52:3a:b7:
                    99:61:ba:b9:ae:4f:24:2c:c0:4c:e2:6e:5b:ca:7a:
                    79:5e:94:7e:d1:35:a5:9e:bd:25:e6:b8:3f:6d:af:
                    dc:a4:81:ad:b8:04:a5:92:39:e9:55:61:42:9b:88:
                    e5:0b:d0:63:52:69:97:50:2c:20:13:05:9a:ae:de:
                    71:70:14:26:28:88:f5:1f:8e:3e:cb:b1:53:7a:d3:
                    3d:0e:4e:80:2a:cd:00:24:ef:e2:7d:3e:6a:95:49:
                    3f:90:a1:a2:b9:40:04:b8:40:5a:3b:ee:91:9c:a7:
                    b4:a3:b6:78:1f:aa:3f:4a:5a:ff:ac:0d:ce:4b:39:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A4:4E:3E:1B:FB:4D:E8:A8:BE:76:3C:73:78:84:00:F9:50:73:47
            X509v3 Authority Key Identifier:
                keyid:AF:4C:19:7F:36:65:20:5A:2C:9E:DF:8E:68:0E:8A:E5:75:AF:97:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/34352e3233312e32382e302f32322d3332203d3e20323637313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:b6:aa:da:98:25:6c:91:ee:7d:11:5a:11:66:29:d5:43:ba:
         86:d5:58:23:c9:04:9b:9f:c5:b4:8d:07:58:b6:99:0b:e3:2e:
         08:0d:55:2f:4c:1e:a4:89:2a:0e:70:5a:eb:1f:ea:f7:95:24:
         b0:4c:ed:b4:30:a9:cb:d7:71:17:0e:ea:21:a2:90:50:64:89:
         42:98:0b:c3:fb:df:3a:52:7e:37:35:19:93:78:fe:08:4a:88:
         63:d4:6d:ad:e6:2d:b5:bc:9f:5b:8c:d6:97:a7:bf:e7:fb:d4:
         35:7a:52:71:01:db:73:62:17:b5:df:69:c5:25:11:4d:a3:65:
         00:3e:d4:1f:a0:ef:83:f0:d3:9a:a5:be:08:c8:15:84:14:88:
         ad:da:b4:7a:c0:4f:b4:c3:2f:30:04:bc:7f:c6:5b:fe:8a:e7:
         f9:40:68:92:8f:08:cb:ca:89:8f:8c:c8:39:8f:ff:b4:ac:5d:
         2b:d4:b9:da:9f:a1:ce:6a:26:66:77:f5:9b:de:63:12:92:44:
         90:dd:e3:ee:6d:6c:69:53:64:8e:c0:86:02:c7:1e:b6:d7:3f:
         9b:4b:3f:4d:05:5e:b3:ce:54:41:df:18:a3:4f:14:b0:8f:de:
         79:b7:d0:da:80:fa:fc:15:a6:9e:84:34:12:7d:40:dd:e5:08:
         6a:b9:87:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:49:28 2025 by rpki-client