Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/34352e3233332e3234382e302f32322d3332203d3e203533303635.roa
File:                     34352e3233332e3234382e302f32322d3332203d3e203533303635.roa (raw, json)
Hash identifier:          U8YANUXkWG+2nU+8OZLTotRxiXqaZ7ih+Xsj11etgNo=
Subject key identifier:   13:72:8F:EB:EE:49:28:C5:39:28:D5:5D:7A:FF:68:D0:48:28:10:E1
Certificate issuer:       /CN=4C774192AB5886D743BDEAE813B49508256649E8
Certificate serial:       64A913000EDBF7559BDFFDAD1D66DBC4E27BAA8D
Authority key identifier: 4C:77:41:92:AB:58:86:D7:43:BD:EA:E8:13:B4:95:08:25:66:49:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/34352e3233332e3234382e302f32322d3332203d3e203533303635.roa
Signing time:             Wed 01 Oct 2025 20:26:59 +0000
ROA not before:           Wed 01 Oct 2025 20:21:59 +0000
ROA not after:            Wed 30 Sep 2026 20:26:59 +0000
asID:                     53065
IP address blocks:        45.233.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.crl
                          rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a9:13:00:0e:db:f7:55:9b:df:fd:ad:1d:66:db:c4:e2:7b:aa:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C774192AB5886D743BDEAE813B49508256649E8
        Validity
            Not Before: Oct  1 20:21:59 2025 GMT
            Not After : Sep 30 20:26:59 2026 GMT
        Subject: CN=13728FEBEE4928C53928D55D7AFF68D0482810E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:20:f4:1d:a0:8d:c6:17:cf:9e:05:b4:e4:85:
                    f3:54:fa:d1:e8:a8:15:d1:4d:98:76:4b:a6:4c:2c:
                    a6:0c:aa:f4:8d:04:04:b5:4d:37:95:a9:c0:da:a3:
                    90:a7:1f:86:4a:88:89:a2:57:c0:39:39:36:00:12:
                    e8:73:b4:c6:2f:f2:aa:3b:7a:fd:40:0f:13:d0:1c:
                    95:69:d6:a0:57:6b:7f:61:11:d2:37:5d:76:e1:ec:
                    ac:62:0c:ca:d6:76:69:01:a5:54:54:3c:bb:22:ba:
                    f4:ab:73:de:4b:65:83:30:f6:4e:01:c2:dd:e7:de:
                    3c:98:be:7e:92:e9:cb:94:59:af:59:b8:9d:39:bf:
                    bd:9b:49:bf:7a:34:67:95:a0:e5:8a:2d:ba:bd:b4:
                    45:2d:7c:d7:2f:bf:7f:93:3f:f9:ec:9c:24:f4:a5:
                    66:9e:61:eb:f2:98:c3:43:ed:ef:73:74:b9:a4:67:
                    b2:f2:d5:c3:86:56:c8:bd:fe:12:83:ff:73:24:4f:
                    6d:99:d4:8b:2c:c6:49:58:45:c8:46:99:1a:30:f3:
                    86:3b:56:d4:3b:15:85:ff:6e:64:dd:35:42:98:0e:
                    0f:9d:8d:50:8e:9d:95:98:47:77:e3:88:27:42:b2:
                    f2:6e:f4:59:6f:59:1e:e2:65:17:86:97:e1:53:da:
                    9b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:72:8F:EB:EE:49:28:C5:39:28:D5:5D:7A:FF:68:D0:48:28:10:E1
            X509v3 Authority Key Identifier:
                keyid:4C:77:41:92:AB:58:86:D7:43:BD:EA:E8:13:B4:95:08:25:66:49:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/34352e3233332e3234382e302f32322d3332203d3e203533303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:fc:50:de:7a:e0:46:a9:c3:89:96:ed:99:e4:cd:b6:c1:f4:
         a1:4e:1c:cb:15:92:52:da:b4:22:5f:40:f4:b1:b5:99:9b:17:
         af:88:6e:91:67:77:39:fb:a3:cb:da:36:1f:2d:d6:71:47:99:
         04:da:09:d5:53:83:51:3c:7c:0f:aa:0e:7c:b5:aa:ed:77:31:
         61:b7:e7:ee:9a:0e:f7:f0:e8:86:c3:a8:1f:52:b6:3e:41:ca:
         cf:00:d9:cf:50:c7:a1:c6:d4:f4:2a:d1:a1:fe:85:dc:b1:a8:
         3a:f3:29:e6:40:46:e8:26:d3:28:10:0d:a9:73:2a:e9:24:0d:
         f1:79:f2:a1:31:5f:3e:4e:44:67:19:36:f2:c0:ef:5c:e0:0f:
         b7:8d:e3:71:3d:5f:5c:19:c6:a8:b2:be:68:db:8c:df:6d:05:
         0b:ae:33:31:67:c1:c7:a7:3e:01:74:57:df:a0:36:64:f1:bd:
         0a:7b:83:c0:27:d4:9a:eb:32:c6:c6:8a:0c:dc:c7:41:75:70:
         3b:6e:17:3a:60:a0:ac:85:ce:54:12:61:a3:2c:2e:10:11:f5:
         7e:2e:d5:b0:c2:28:1c:5a:a6:c9:92:03:5d:6d:28:20:8c:ee:
         57:f5:09:74:2c:c9:37:6c:f0:4b:51:65:50:12:7b:7b:51:d3:
         41:3e:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:45 2025 by rpki-client