Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/34352e3232382e33312e302f32342d3234203d3e20323637303838.roa
File:                     34352e3232382e33312e302f32342d3234203d3e20323637303838.roa (raw, json)
Hash identifier:          RH5bG/p4xVevs2LXjguLGIZMpRQiTpW5fR6q7R7E8YQ=
Subject key identifier:   C3:24:49:79:62:C1:44:C9:4C:A4:69:7E:80:91:2D:E2:64:3F:09:9E
Certificate issuer:       /CN=C72086566EE782E49254BF59EB3177E027E3F1E6
Certificate serial:       63E9E6E64286B38F20BFCAAD89B8812E9CD6C820
Authority key identifier: C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/34352e3232382e33312e302f32342d3234203d3e20323637303838.roa
Signing time:             Wed 08 Oct 2025 11:46:17 +0000
ROA not before:           Wed 08 Oct 2025 11:41:17 +0000
ROA not after:            Wed 07 Oct 2026 11:46:17 +0000
asID:                     267088
IP address blocks:        45.228.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.crl
                          rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 19:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e9:e6:e6:42:86:b3:8f:20:bf:ca:ad:89:b8:81:2e:9c:d6:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C72086566EE782E49254BF59EB3177E027E3F1E6
        Validity
            Not Before: Oct  8 11:41:17 2025 GMT
            Not After : Oct  7 11:46:17 2026 GMT
        Subject: CN=C324497962C144C94CA4697E80912DE2643F099E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:9d:54:75:d5:ab:9d:0e:01:70:68:9c:8c:
                    3b:88:a9:c9:2f:3a:22:8d:63:46:5e:59:4a:2f:08:
                    2c:c5:96:09:0a:ce:97:e6:66:17:81:1c:b9:ed:d6:
                    6b:8e:e2:ae:1f:bc:5b:fa:92:4a:57:76:00:24:7d:
                    f9:ec:c6:c8:8d:23:84:bf:5e:d9:2b:73:42:eb:f1:
                    f4:95:a8:4e:ea:e7:00:3b:22:a5:c7:db:2d:8b:73:
                    20:12:1a:0a:d8:19:51:3f:e0:71:3d:58:3f:13:96:
                    82:ef:87:7f:21:24:5b:d6:35:78:ae:a4:0e:34:92:
                    1c:0c:ef:91:b2:50:92:7f:df:ba:5c:23:1d:cd:4b:
                    04:c2:ba:ee:8a:47:65:b9:5b:41:aa:99:9d:2f:ba:
                    a1:77:19:68:28:53:bb:00:84:05:3e:26:62:03:a5:
                    39:0e:d9:f5:0d:48:91:10:a7:81:1f:dc:4f:74:75:
                    a9:f3:ee:50:00:a8:66:eb:02:3f:aa:f5:34:fb:7d:
                    7a:04:4a:ee:00:cd:62:63:64:6e:e9:2d:a7:51:c3:
                    17:3b:7a:70:c6:ff:ad:4b:e4:9f:a8:5a:d0:19:ad:
                    e3:45:bc:43:4d:a2:92:af:ee:2e:45:0b:02:7d:2a:
                    ec:02:2e:56:c2:a3:49:88:d5:61:c7:00:07:c4:62:
                    4d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:24:49:79:62:C1:44:C9:4C:A4:69:7E:80:91:2D:E2:64:3F:09:9E
            X509v3 Authority Key Identifier:
                keyid:C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/34352e3232382e33312e302f32342d3234203d3e20323637303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:95:30:c0:25:66:b6:35:04:46:40:93:fc:e5:ff:97:9a:cf:
         b0:2e:ea:14:b6:fd:4f:85:38:52:7c:20:5e:f6:9b:a0:5c:0c:
         65:89:e8:b3:d6:fd:c4:03:bd:0a:cc:18:0b:c9:46:b6:3d:da:
         c8:d2:8b:43:80:d6:71:77:96:a6:8f:75:7a:c7:23:ba:16:68:
         d7:8e:63:34:30:c5:f1:22:22:91:ae:a4:ab:60:d0:1c:e7:8b:
         57:2f:62:1c:e8:a6:01:c8:4f:14:8a:27:35:ea:bf:f2:cb:46:
         e5:4e:d7:e7:92:3a:1f:a9:62:f0:5f:26:31:07:26:45:a8:35:
         5c:b4:5f:60:4e:f7:68:73:93:0a:7a:1b:56:6f:0e:5d:88:5d:
         0e:f7:64:40:02:1b:c3:9b:c0:cc:54:f3:da:c7:7c:6e:78:bf:
         3e:89:a2:7a:a5:bd:7f:fa:40:65:78:91:64:1e:f5:f5:9b:5d:
         7d:95:3c:79:93:4c:c3:26:67:55:e9:19:c9:fb:15:c1:3c:82:
         77:ca:53:4f:24:cf:4c:a3:47:57:b2:c1:06:25:3c:49:8e:65:
         5c:75:d6:a5:e7:ef:6c:34:1d:0a:90:08:c7:8a:7e:3b:49:94:
         f9:94:14:48:45:31:21:8c:48:f5:bd:e4:1e:fb:42:c4:16:6c:
         55:0d:c8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:01:36 2025 by rpki-client