Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/34352e3233342e37322e302f32322d3232203d3e20323637333634.roa
File:                     34352e3233342e37322e302f32322d3232203d3e20323637333634.roa (raw, json)
Hash identifier:          CmvUQlgL9Egs3Y3J1PHQLeSCAXlG0EORCHCR9VLzFAA=
Subject key identifier:   71:EA:45:5B:EC:2B:FD:30:0E:DD:8C:EB:93:EB:2C:F0:0D:7D:A6:22
Certificate issuer:       /CN=EE908CF6B5C6DE896D19822212A8E9D12A806EA3
Certificate serial:       404B87C503B9B9547877AF362943646865B46E81
Authority key identifier: EE:90:8C:F6:B5:C6:DE:89:6D:19:82:22:12:A8:E9:D1:2A:80:6E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/34352e3233342e37322e302f32322d3232203d3e20323637333634.roa
Signing time:             Sat 12 Jul 2025 16:44:00 +0000
ROA not before:           Sat 12 Jul 2025 16:39:00 +0000
ROA not after:            Sat 11 Jul 2026 16:44:00 +0000
asID:                     267364
IP address blocks:        45.234.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.crl
                          rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4b:87:c5:03:b9:b9:54:78:77:af:36:29:43:64:68:65:b4:6e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE908CF6B5C6DE896D19822212A8E9D12A806EA3
        Validity
            Not Before: Jul 12 16:39:00 2025 GMT
            Not After : Jul 11 16:44:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:74:05:23:15:31:dd:14:76:6b:4a:92:39:
                    d9:5c:38:bf:9e:e5:5c:f5:8c:f5:31:11:6c:55:61:
                    e2:08:74:a9:2f:a8:e2:0d:f6:06:65:26:ca:36:4b:
                    17:80:65:2b:5a:22:51:7a:6c:fe:fd:84:36:34:91:
                    4a:76:00:f3:56:cd:c6:81:02:22:e4:64:e0:58:ff:
                    05:b6:2e:6b:90:94:fa:31:de:d7:28:7e:93:2f:13:
                    67:58:04:2f:a6:b5:7f:12:3f:df:3f:49:07:8b:22:
                    7f:da:23:b1:0b:b9:17:d4:e2:3d:ac:4c:31:9f:a6:
                    8c:12:2c:7c:60:8b:2f:c9:50:2b:bc:79:3d:8c:33:
                    1c:05:cf:fa:43:95:40:6d:33:16:ab:db:7a:e5:97:
                    76:c9:f4:37:80:68:e5:0b:f5:ce:ec:a0:9d:a8:10:
                    a7:f1:af:48:2f:1c:da:b5:cd:9f:ba:2f:67:31:44:
                    f8:3e:94:dc:40:51:c2:b2:4f:9e:bc:b8:28:35:47:
                    fe:7d:ae:7d:e5:4c:17:83:b7:6e:7e:78:d6:71:14:
                    b4:f0:32:b4:c7:31:7b:d5:a0:5e:c6:3f:61:62:ca:
                    63:02:fb:68:56:f0:c2:bf:b5:d7:c8:ae:d3:cd:4d:
                    68:15:47:fa:bc:cd:08:c5:99:d2:29:44:2e:64:1e:
                    1b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EA:45:5B:EC:2B:FD:30:0E:DD:8C:EB:93:EB:2C:F0:0D:7D:A6:22
            X509v3 Authority Key Identifier:
                keyid:EE:90:8C:F6:B5:C6:DE:89:6D:19:82:22:12:A8:E9:D1:2A:80:6E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/34352e3233342e37322e302f32322d3232203d3e20323637333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:fe:a2:46:2a:93:85:b7:4d:4c:ba:4b:3a:8c:6e:45:f8:64:
         a0:ce:fd:0f:1d:8e:d7:67:3c:8f:91:a2:82:96:19:0d:09:d6:
         9e:a6:a9:6f:fc:4c:f3:d2:fa:41:dd:e7:50:b5:ec:0e:19:52:
         bf:c4:33:ef:cd:4b:50:c6:d2:93:c3:df:8f:0b:d7:4a:a7:97:
         97:1b:46:f6:f2:75:ca:03:99:bc:a7:7f:13:8a:77:e1:98:63:
         12:80:0d:d0:f5:55:c6:c6:f7:e7:ac:70:74:71:77:d0:94:22:
         9c:a7:e7:6a:b4:97:71:96:4d:10:ec:46:3d:14:54:e1:a1:4d:
         d0:6f:69:23:cf:c8:50:83:f4:f9:ff:cb:96:d1:33:35:b9:6c:
         a7:64:6e:d7:1e:dc:75:3e:0e:f8:01:e3:bd:83:d8:3e:3e:cb:
         2e:c4:00:20:be:ea:3d:86:4d:04:73:04:0f:b3:67:17:94:1c:
         b6:e1:d4:0d:be:44:32:f7:45:52:94:6f:11:29:8e:11:98:f0:
         88:cf:a2:25:5f:d7:5a:39:f6:3a:b0:19:6a:68:43:36:37:75:
         17:88:3d:c2:fd:63:96:08:54:27:7e:21:4f:32:70:97:d3:34:
         cc:0d:35:49:88:39:70:21:2b:d3:bb:31:61:62:f8:66:b5:9d:
         08:e4:52:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:05:21 2025 by rpki-client