Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa
File:                     34352e3232382e33372e302f32342d3234203d3e20323731363939.roa (raw, json)
Hash identifier:          B6DpnpOH+ugWf0IHQuX/ZwsDc08HUlxD9Z17efEW95g=
Subject key identifier:   3C:8E:AE:36:28:93:7C:AE:A7:FF:04:E6:55:1C:CB:BF:D8:B8:EF:BF
Certificate issuer:       /CN=F292A8F647A00800145AA8D3CD40704C603AE5A7
Certificate serial:       2A6ADAEE41EF6ECD6D03627BD81D92A61E530F7F
Authority key identifier: F2:92:A8:F6:47:A0:08:00:14:5A:A8:D3:CD:40:70:4C:60:3A:E5:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F292A8F647A00800145AA8D3CD40704C603AE5A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa
Signing time:             Wed 20 Aug 2025 16:48:33 +0000
ROA not before:           Wed 20 Aug 2025 16:43:33 +0000
ROA not after:            Wed 19 Aug 2026 16:48:33 +0000
asID:                     271699
IP address blocks:        45.228.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/F292A8F647A00800145AA8D3CD40704C603AE5A7.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/F292A8F647A00800145AA8D3CD40704C603AE5A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F292A8F647A00800145AA8D3CD40704C603AE5A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 19:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6a:da:ee:41:ef:6e:cd:6d:03:62:7b:d8:1d:92:a6:1e:53:0f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F292A8F647A00800145AA8D3CD40704C603AE5A7
        Validity
            Not Before: Aug 20 16:43:33 2025 GMT
            Not After : Aug 19 16:48:33 2026 GMT
        Subject: CN=3C8EAE3628937CAEA7FF04E6551CCBBFD8B8EFBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:4f:93:e6:27:cb:e3:16:9a:9d:db:ee:2c:
                    15:08:e9:13:83:55:69:0d:2c:45:a1:12:59:15:6f:
                    83:3e:80:3a:be:92:3e:de:9d:c7:2c:6c:8d:56:93:
                    3e:8c:57:92:bf:29:3d:79:96:93:f2:2d:a1:d6:27:
                    f6:7a:4b:85:98:e8:33:b7:2f:06:35:78:a7:7e:95:
                    70:e9:66:05:ee:5e:2b:25:5a:27:70:92:00:15:cf:
                    86:ff:5b:e6:46:ba:45:5a:40:41:b8:7e:fe:2e:2e:
                    33:8a:58:2a:58:45:93:8b:44:a6:fb:03:39:59:1d:
                    5d:0e:bf:f9:63:fb:15:9e:b0:25:fd:77:d3:60:02:
                    dd:f3:ba:a5:25:b3:72:2d:c8:d2:f8:17:b7:f9:dd:
                    e5:1b:9f:79:c4:76:ed:5c:2b:82:f9:cf:74:64:9b:
                    bb:82:57:b3:bd:be:c2:ac:6a:a7:6b:ab:37:d1:95:
                    6e:93:c9:72:fd:17:21:05:31:c0:7f:99:ed:84:00:
                    01:a4:c6:b7:b1:67:6b:16:b0:79:26:cf:75:54:7e:
                    93:84:14:8e:25:b8:d5:58:59:97:f3:24:44:20:f3:
                    20:5f:fa:2d:f9:f4:bd:3d:f1:8b:6a:8b:90:54:b8:
                    c5:0d:f4:17:45:bb:71:b0:de:f5:8d:2e:aa:b5:a5:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8E:AE:36:28:93:7C:AE:A7:FF:04:E6:55:1C:CB:BF:D8:B8:EF:BF
            X509v3 Authority Key Identifier:
                keyid:F2:92:A8:F6:47:A0:08:00:14:5A:A8:D3:CD:40:70:4C:60:3A:E5:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/F292A8F647A00800145AA8D3CD40704C603AE5A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F292A8F647A00800145AA8D3CD40704C603AE5A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:2a:6b:7b:b9:eb:32:2c:84:ca:78:9a:27:c1:aa:5b:eb:16:
         1c:e7:7d:1a:53:96:2d:4b:5a:ee:e7:a2:4c:3e:d9:04:ee:f6:
         f9:7c:4c:d8:ec:6c:56:b5:f4:fc:c8:d3:3b:74:0e:49:3b:50:
         43:38:43:cc:0c:b3:bc:77:4d:6d:5f:fd:e3:72:bf:d9:05:dc:
         88:82:19:19:be:bf:96:bb:ec:d4:25:c3:29:e6:d3:89:64:23:
         26:4c:22:0b:83:91:be:95:1f:46:f2:c0:52:eb:e4:5a:b6:7f:
         00:b5:3e:a2:1c:26:3c:e5:b5:f7:2f:5a:cd:02:94:b3:3b:f1:
         4e:cc:41:ba:d9:a9:c1:4a:3f:86:40:13:e2:64:04:dd:f4:1a:
         2c:81:bf:41:03:ca:f0:f2:3a:43:9e:11:7f:e5:0b:cd:80:b5:
         54:b2:df:86:9f:b5:0e:c8:56:43:e8:3c:f4:6b:95:83:7e:0c:
         96:23:a6:ce:5d:b9:97:d6:70:19:54:03:fc:41:01:ca:68:af:
         e2:50:83:68:e4:50:99:1b:7c:24:29:aa:99:22:3f:0e:3c:f3:
         48:4f:d1:18:fd:cb:50:ab:33:8c:74:72:d8:a2:50:a9:5d:59:
         8a:e8:61:f8:6b:63:99:1d:4c:25:de:8e:49:15:91:57:0f:35:
         b8:b0:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:11:07 2025 by rpki-client