Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/34352e3232382e32382e302f32342d3234203d3e20323637303838.roa
File:                     34352e3232382e32382e302f32342d3234203d3e20323637303838.roa (raw, json)
Hash identifier:          GSQOTDhsPCE47AOehVvQ3hcX7gk+u6GzpB0it9Lo+y4=
Subject key identifier:   0F:43:C8:10:56:D4:E4:36:E0:A0:54:1B:75:67:45:03:A5:D3:24:D3
Certificate issuer:       /CN=C72086566EE782E49254BF59EB3177E027E3F1E6
Certificate serial:       203CE75380BD17C0AE121DDFE1F1C9055DD74709
Authority key identifier: C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/34352e3232382e32382e302f32342d3234203d3e20323637303838.roa
Signing time:             Wed 08 Oct 2025 11:44:52 +0000
ROA not before:           Wed 08 Oct 2025 11:39:52 +0000
ROA not after:            Wed 07 Oct 2026 11:44:52 +0000
asID:                     267088
IP address blocks:        45.228.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.crl
                          rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 19:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3c:e7:53:80:bd:17:c0:ae:12:1d:df:e1:f1:c9:05:5d:d7:47:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C72086566EE782E49254BF59EB3177E027E3F1E6
        Validity
            Not Before: Oct  8 11:39:52 2025 GMT
            Not After : Oct  7 11:44:52 2026 GMT
        Subject: CN=0F43C81056D4E436E0A0541B75674503A5D324D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:0e:a4:26:8d:8d:00:29:98:d4:7f:88:cc:
                    d8:c1:fa:69:48:33:ae:8b:f6:9c:d8:60:08:e8:68:
                    ca:91:2a:e1:5c:a9:6f:b7:b6:88:ad:02:40:b6:8b:
                    7a:02:81:a6:04:24:67:8a:fe:58:70:ca:d3:e9:ad:
                    01:8c:43:16:18:fe:35:db:ef:93:a5:84:5e:14:55:
                    bb:46:30:cb:58:64:34:cd:99:f8:90:c7:72:91:53:
                    81:60:50:ef:19:4d:96:01:68:8f:97:5e:16:2b:81:
                    58:5e:09:4c:95:42:89:cd:40:b3:7a:e5:d9:7f:c0:
                    29:2c:2b:c6:0c:e7:a1:e1:9d:95:0c:2d:bc:2e:b4:
                    e9:f8:38:0b:93:1e:6b:0b:34:06:18:44:51:41:9b:
                    00:ec:61:84:3a:c0:71:e2:64:d4:3b:a2:75:33:d3:
                    38:08:46:b9:fe:17:4b:d5:4b:4d:79:aa:86:ed:c9:
                    ad:11:b7:9b:a9:95:61:0b:08:c0:af:da:c6:94:83:
                    2f:66:59:fa:11:9d:f7:09:23:57:1b:84:31:8c:a6:
                    32:cf:88:92:c2:1b:ef:45:86:63:94:ae:96:d0:a8:
                    82:29:4b:3a:b2:c6:e2:9a:fc:88:e9:1f:8c:ed:ec:
                    a3:ad:2d:a0:38:1d:f9:61:1d:b7:73:b8:09:b2:1c:
                    a7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:43:C8:10:56:D4:E4:36:E0:A0:54:1B:75:67:45:03:A5:D3:24:D3
            X509v3 Authority Key Identifier:
                keyid:C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/34352e3232382e32382e302f32342d3234203d3e20323637303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ee:d8:01:a8:cc:1a:80:87:f0:e7:5d:ba:60:fc:15:ce:af:
         84:f0:85:bc:60:65:5f:a0:73:1f:11:6b:ff:da:6d:15:25:52:
         ad:6e:a5:b2:0e:a9:fa:77:1f:04:fc:f1:0d:a9:11:6d:32:ba:
         22:71:d8:b1:58:64:a0:13:57:b2:69:3a:44:bf:1c:55:76:c7:
         79:9b:57:6b:f8:03:4b:fc:2a:5e:99:36:93:39:92:c3:9c:46:
         7e:21:d3:54:5d:04:3c:a2:5d:57:5b:1a:b6:63:b8:ba:c9:2e:
         b6:d4:aa:bc:ea:6c:af:7d:cb:26:c7:1e:54:31:55:0c:7a:6f:
         46:a5:09:2c:a2:42:2f:b8:b0:d0:8c:fe:7f:f2:37:40:e7:89:
         23:1e:62:e0:27:42:37:dc:96:8d:c4:7d:64:4a:2b:bf:81:34:
         5f:71:b7:af:c4:58:ff:8e:fe:64:48:df:6d:ee:f2:20:37:e7:
         80:ad:35:eb:50:2d:e8:c4:e3:0a:4f:01:9a:fc:51:2c:86:e3:
         41:4a:f6:32:1f:11:41:9e:47:c4:28:e7:39:0a:f5:14:ea:a3:
         33:81:44:0d:d3:e7:ec:56:d6:1b:61:94:85:a6:42:b4:f6:f4:
         e5:49:22:83:43:03:bb:ab:d9:ab:5a:04:0b:8c:e4:d4:a4:37:
         9c:2a:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:00:19 2025 by rpki-client