Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/34352e3233342e37342e302f32342d3234203d3e20323637333634.roa
File:                     34352e3233342e37342e302f32342d3234203d3e20323637333634.roa (raw, json)
Hash identifier:          2DCf6N/EX8MVNHwzYA5GTk7YLm6ru1JScTqZQ3KEgcU=
Subject key identifier:   1C:8E:8F:58:C7:96:34:1E:FD:23:52:28:D8:13:A9:08:32:F2:CE:BF
Certificate issuer:       /CN=EE908CF6B5C6DE896D19822212A8E9D12A806EA3
Certificate serial:       3180BD2EA9223FC930DC92246667E4D401A8FAB2
Authority key identifier: EE:90:8C:F6:B5:C6:DE:89:6D:19:82:22:12:A8:E9:D1:2A:80:6E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/34352e3233342e37342e302f32342d3234203d3e20323637333634.roa
Signing time:             Sat 12 Jul 2025 16:44:03 +0000
ROA not before:           Sat 12 Jul 2025 16:39:03 +0000
ROA not after:            Sat 11 Jul 2026 16:44:03 +0000
asID:                     267364
IP address blocks:        45.234.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.crl
                          rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:80:bd:2e:a9:22:3f:c9:30:dc:92:24:66:67:e4:d4:01:a8:fa:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE908CF6B5C6DE896D19822212A8E9D12A806EA3
        Validity
            Not Before: Jul 12 16:39:03 2025 GMT
            Not After : Jul 11 16:44:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:7b:b7:ad:39:9d:a1:e3:c0:dc:20:3f:2a:
                    3b:00:1d:ff:23:25:5e:76:98:e8:0e:41:b6:b4:75:
                    64:bd:c3:da:10:ae:a9:79:3e:4f:84:d0:72:97:a0:
                    03:c3:ea:68:86:db:22:2f:a1:e5:17:ff:bf:7a:0d:
                    3a:c5:6a:d5:f9:3e:59:a7:f4:56:64:23:6b:9d:74:
                    8f:a6:8b:51:8f:c1:62:f7:ca:89:0b:b8:b5:80:4f:
                    f3:f5:b7:2a:17:d9:d3:83:d6:17:2f:5d:48:14:ee:
                    5a:63:4b:22:0b:9f:52:01:a6:47:6c:83:3d:73:98:
                    4c:55:ed:cf:49:46:93:b8:b2:38:20:e6:d0:d3:bf:
                    93:60:6c:c4:6d:0e:e3:e6:05:46:ea:3f:66:f0:7e:
                    60:00:d3:9d:dc:2b:d7:c2:22:6e:99:e1:a2:dd:f2:
                    b3:db:8c:5e:2b:8a:90:8e:16:5c:c5:ad:a1:c5:63:
                    e9:f8:27:5f:34:26:ee:de:84:39:d2:9c:aa:0e:5e:
                    e4:12:23:87:c9:e9:b8:5f:9c:20:e3:6f:8e:21:2e:
                    29:db:3d:f8:f3:f4:7d:00:54:5f:43:20:e3:c5:53:
                    fe:c0:11:84:59:1f:de:af:35:60:0b:d1:b3:2a:cb:
                    68:23:4c:4f:4e:e7:97:21:60:e7:12:f2:42:47:2b:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8E:8F:58:C7:96:34:1E:FD:23:52:28:D8:13:A9:08:32:F2:CE:BF
            X509v3 Authority Key Identifier:
                keyid:EE:90:8C:F6:B5:C6:DE:89:6D:19:82:22:12:A8:E9:D1:2A:80:6E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/34352e3233342e37342e302f32342d3234203d3e20323637333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:e1:f8:a4:82:48:0e:6f:04:93:bc:ee:e5:41:b3:ca:ce:
         30:1e:8f:de:1f:e4:fe:37:ef:77:ec:1e:8d:e6:47:67:cf:f1:
         f7:c3:13:a8:86:70:8e:89:f1:e0:d7:e7:c8:83:af:53:e2:21:
         15:19:3c:4e:d1:a1:9e:33:18:cd:ef:91:de:61:13:39:5d:0c:
         ab:c3:0d:5a:69:b1:e9:91:69:56:db:7f:aa:db:db:ec:62:1b:
         28:0b:61:61:76:b0:7b:56:ac:6a:dd:ae:59:36:06:19:5e:b3:
         b1:b1:c6:fd:a4:64:a7:f8:8a:d3:c8:e1:26:c5:d4:a5:36:ad:
         02:22:e6:6b:51:a6:57:95:5a:04:5e:54:4a:9d:7e:9c:9f:04:
         1e:c3:6c:43:79:87:83:67:84:2e:b5:d0:5e:2b:a4:f6:c8:8d:
         bd:19:77:95:e8:88:4a:e8:4b:d7:54:f2:7a:0e:03:f9:5b:75:
         5c:52:be:7c:d8:81:9e:16:42:d5:a5:27:41:2f:b9:5a:25:43:
         b9:0b:ad:92:5f:49:32:54:70:77:ff:f1:ab:dd:8f:55:f3:25:
         33:cd:0e:3e:63:2d:93:5d:7c:fd:88:e9:66:10:60:51:63:38:
         a0:aa:50:1a:41:f5:c6:5f:44:66:c9:99:87:d8:fb:ea:00:b1:
         6e:8b:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:02:38 2025 by rpki-client