Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233322e302f32322d3234203d3e20323636393634.roa
File:                     34352e3232352e3233322e302f32322d3234203d3e20323636393634.roa (raw, json)
Hash identifier:          b4w8mDNwS0+Na1MhaNlPRrgM12JfDzc3tSD6KMYNr+E=
Subject key identifier:   71:51:23:2A:37:FA:0F:40:31:81:AF:2B:F4:7E:DF:34:FE:6C:62:9E
Certificate issuer:       /CN=1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5
Certificate serial:       2EA7419B8333F0152CB86D962439D78A801212EE
Authority key identifier: 1C:73:23:8E:F4:8C:6C:F6:BC:E0:C9:D7:5B:33:87:FE:DA:A0:75:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233322e302f32322d3234203d3e20323636393634.roa
Signing time:             Thu 21 Aug 2025 18:43:43 +0000
ROA not before:           Thu 21 Aug 2025 18:38:43 +0000
ROA not after:            Thu 20 Aug 2026 18:43:43 +0000
asID:                     266964
IP address blocks:        45.225.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.crl
                          rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a7:41:9b:83:33:f0:15:2c:b8:6d:96:24:39:d7:8a:80:12:12:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5
        Validity
            Not Before: Aug 21 18:38:43 2025 GMT
            Not After : Aug 20 18:43:43 2026 GMT
        Subject: CN=7151232A37FA0F403181AF2BF47EDF34FE6C629E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:9e:9a:ea:9e:78:c0:65:d7:d2:48:5a:f1:
                    96:73:98:a3:62:3b:c6:a7:ab:96:9e:f7:94:5f:d8:
                    a3:eb:38:03:34:cb:ba:3f:5f:c3:c9:84:26:4c:22:
                    79:08:d2:ac:8c:ef:bf:2f:59:ba:1c:67:9a:1c:18:
                    10:37:ff:b2:36:f0:00:bd:04:5f:d0:bb:1a:29:ec:
                    b2:5f:5e:e7:97:8f:15:df:ef:bf:d8:88:3d:cb:f3:
                    8e:70:75:ec:1e:77:16:62:42:e6:9b:14:0b:7d:c7:
                    e1:fb:6e:ea:3c:f0:40:c1:d9:75:26:af:bd:c5:af:
                    c6:61:a0:80:48:54:78:62:67:6b:3f:08:f4:56:a1:
                    78:79:4d:4b:f5:3b:9a:a0:7e:6b:8f:ed:a6:53:ed:
                    b8:29:bf:41:e6:f9:9f:92:3c:b7:c6:ad:9d:90:1d:
                    d3:0c:05:f3:8f:f3:42:c5:af:da:bb:7e:60:2d:a4:
                    05:9d:3a:13:7f:54:dc:85:d5:75:83:da:29:a1:23:
                    90:2e:36:ea:08:bc:89:7c:8d:d5:9a:c2:3c:5a:9c:
                    89:53:68:55:94:66:64:80:9d:e4:a4:cf:bd:6c:07:
                    55:0a:d1:6a:ce:f1:79:c4:a8:81:d3:2f:79:bf:f8:
                    92:71:34:b0:ef:be:b8:53:87:3f:8b:72:6f:d1:9e:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:23:2A:37:FA:0F:40:31:81:AF:2B:F4:7E:DF:34:FE:6C:62:9E
            X509v3 Authority Key Identifier:
                keyid:1C:73:23:8E:F4:8C:6C:F6:BC:E0:C9:D7:5B:33:87:FE:DA:A0:75:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C73238EF48C6CF6BCE0C9D75B3387FEDAA075C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/1/34352e3232352e3233322e302f32322d3234203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:d3:10:f1:3d:87:9b:62:83:0c:9b:b8:de:47:8f:99:41:b0:
         b7:d0:6c:e8:64:84:73:6f:c0:cf:de:3b:99:36:e9:29:1e:7a:
         cd:cd:67:b6:ce:86:3e:94:1d:c2:47:50:97:b9:b1:37:68:09:
         d0:3e:eb:54:94:bf:3b:38:93:38:98:f4:2c:cb:e4:79:60:72:
         4c:0d:b2:ca:e2:43:03:c8:9c:f0:ae:db:9c:a3:be:e6:94:fe:
         cb:91:04:ab:6f:96:d6:84:29:e3:05:c6:b9:f9:dd:ed:cb:25:
         4e:ba:1c:7b:51:cf:27:d7:e8:50:f0:6d:75:5e:07:48:d1:c8:
         40:ab:f9:f7:96:a6:9d:28:94:70:11:5d:f6:43:45:71:af:35:
         e2:19:6f:97:9a:c7:d3:d5:95:e3:68:15:ca:e3:01:04:56:6e:
         9c:0c:0e:d6:1d:cc:12:5a:56:9d:1a:c8:1e:f7:44:96:cb:86:
         a8:bc:1d:eb:1d:ad:60:94:df:40:a5:31:02:b6:5e:12:06:1a:
         fb:68:b9:a1:71:ea:0a:f5:39:ac:17:f3:d0:c0:50:6f:3b:26:
         65:d2:30:96:2c:d0:79:ca:61:76:c7:f5:eb:b3:f4:b7:d5:45:
         32:0d:bb:0c:ea:7f:e3:7c:68:cb:17:56:16:4a:d5:d2:e9:ce:
         92:d8:b2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:26:51 2025 by rpki-client