Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32322d3234203d3e20323638333038.roa
File:                     34352e3233382e342e302f32322d3234203d3e20323638333038.roa (raw, json)
Hash identifier:          DutqlQXTwf1VWhUlYafGwbj+5RFq8PoDVpZ8OQPMAT4=
Subject key identifier:   20:86:BD:DE:84:70:AD:CF:48:2B:09:3D:C1:8F:A5:F5:31:6E:B9:D0
Certificate issuer:       /CN=6238C4C1BE653DF0767CE659E0182021C7A17537
Certificate serial:       0B44C7A3BBE79B928E3FD2031E52056E02212E67
Authority key identifier: 62:38:C4:C1:BE:65:3D:F0:76:7C:E6:59:E0:18:20:21:C7:A1:75:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6238C4C1BE653DF0767CE659E0182021C7A17537.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32322d3234203d3e20323638333038.roa
Signing time:             Wed 08 Oct 2025 22:15:58 +0000
ROA not before:           Wed 08 Oct 2025 22:10:58 +0000
ROA not after:            Wed 07 Oct 2026 22:15:58 +0000
asID:                     268308
IP address blocks:        45.238.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/6238C4C1BE653DF0767CE659E0182021C7A17537.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/6238C4C1BE653DF0767CE659E0182021C7A17537.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6238C4C1BE653DF0767CE659E0182021C7A17537.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 20:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:44:c7:a3:bb:e7:9b:92:8e:3f:d2:03:1e:52:05:6e:02:21:2e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6238C4C1BE653DF0767CE659E0182021C7A17537
        Validity
            Not Before: Oct  8 22:10:58 2025 GMT
            Not After : Oct  7 22:15:58 2026 GMT
        Subject: CN=2086BDDE8470ADCF482B093DC18FA5F5316EB9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:25:0c:64:c7:59:8e:e7:5d:7d:6a:4e:3e:
                    fe:e3:1b:ed:21:ac:cc:e8:29:e1:18:08:82:9f:6e:
                    d8:3e:41:bf:ca:70:6c:98:a7:f4:34:5c:47:21:bd:
                    f9:9b:e2:94:25:49:38:18:f3:14:fe:f2:9d:80:a0:
                    fd:20:0f:1e:ae:01:65:b3:a5:af:da:f7:38:2d:81:
                    29:73:f5:de:0f:e2:1f:cb:d0:b5:4a:bf:f5:b3:b4:
                    43:23:c2:01:a1:cb:d9:a3:30:a6:bf:c3:fd:dc:e4:
                    4b:21:a4:c1:83:2c:2d:bc:49:59:82:a1:a8:3a:59:
                    e5:61:11:8c:b5:22:97:74:cf:29:86:06:25:94:c1:
                    56:3d:38:8b:f1:bd:a7:5d:0d:89:65:8f:52:04:8c:
                    4d:32:ab:37:0d:d8:b7:c4:a1:cb:0c:ca:69:7b:cd:
                    6b:8f:f4:c9:11:a0:d9:2f:e8:7b:db:16:fe:98:c7:
                    7a:6d:b2:f3:1b:03:f6:60:d3:7a:84:f4:a7:39:09:
                    09:95:9a:c0:75:89:7f:d4:d8:97:66:f7:47:9d:ef:
                    36:7f:d0:d9:f9:5a:41:51:6e:50:1c:9c:c2:d5:52:
                    3c:03:5c:5b:27:b8:27:2f:81:9b:73:93:65:ef:29:
                    ab:e0:9a:9a:22:fa:53:29:c0:9f:54:01:67:e4:a9:
                    42:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:86:BD:DE:84:70:AD:CF:48:2B:09:3D:C1:8F:A5:F5:31:6E:B9:D0
            X509v3 Authority Key Identifier:
                keyid:62:38:C4:C1:BE:65:3D:F0:76:7C:E6:59:E0:18:20:21:C7:A1:75:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/6238C4C1BE653DF0767CE659E0182021C7A17537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6238C4C1BE653DF0767CE659E0182021C7A17537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32322d3234203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:ab:d7:b4:7a:d8:df:2a:41:68:e8:4e:cd:11:7c:0c:83:48:
         66:b4:3d:53:d0:e8:c4:13:df:2b:3c:8a:69:0b:b9:12:83:23:
         d5:a5:aa:e1:8a:ea:a5:7a:62:0e:8b:5c:ef:f6:2c:24:04:c2:
         1b:38:8d:af:f1:66:d8:76:ab:4d:7a:cb:aa:1d:d9:54:88:62:
         52:1a:28:06:b5:64:ae:b8:6e:c1:e5:18:37:d3:23:7d:69:89:
         ad:0b:a6:0f:40:09:90:b9:d9:bd:ff:ab:37:7a:b0:90:0f:3b:
         2d:66:d2:c0:5a:d9:a8:c7:1d:91:1c:61:92:c5:db:8e:3a:d2:
         52:76:c5:e0:67:d9:14:00:5d:3c:04:9e:2d:c2:87:87:28:ab:
         f3:e2:7b:b0:7c:4b:f7:49:83:aa:fb:5c:02:28:c6:1e:ba:52:
         dc:a6:b0:d9:5c:c4:35:a8:b2:72:2e:7e:62:0a:a0:f1:df:55:
         13:ab:e0:cb:c8:4f:b8:0a:77:4a:ce:03:07:c5:4a:18:13:13:
         e5:76:75:13:de:09:b8:1f:5f:53:eb:32:80:ac:86:3b:40:ea:
         bd:97:49:4c:90:3d:3e:b9:58:e8:cb:e3:51:35:b3:74:ac:42:
         39:bd:77:b0:86:7c:13:96:f8:0c:ba:3e:d3:6f:2c:00:bf:a7:
         70:9e:c2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:29:06 2025 by rpki-client