Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32302e302f32322d3232203d3e20323637303038.roa
File:                     34352e3232372e32302e302f32322d3232203d3e20323637303038.roa (raw, json)
Hash identifier:          df/dVy17E+1zdyhn/1GcTSHYuWATIP5F0GAzwDjWZzo=
Subject key identifier:   C7:E0:F6:77:AD:91:05:15:9D:C1:AD:4C:3A:F5:BC:D0:0B:02:25:74
Certificate issuer:       /CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
Certificate serial:       3D7970804B98D6F1E6EBECC5632D8E88BF6C79DB
Authority key identifier: F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32302e302f32322d3232203d3e20323637303038.roa
Signing time:             Mon 22 Sep 2025 14:36:54 +0000
ROA not before:           Mon 22 Sep 2025 14:31:54 +0000
ROA not after:            Mon 21 Sep 2026 14:36:54 +0000
asID:                     267008
IP address blocks:        45.227.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl
                          rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:79:70:80:4b:98:d6:f1:e6:eb:ec:c5:63:2d:8e:88:bf:6c:79:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
        Validity
            Not Before: Sep 22 14:31:54 2025 GMT
            Not After : Sep 21 14:36:54 2026 GMT
        Subject: CN=C7E0F677AD9105159DC1AD4C3AF5BCD00B022574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:06:70:f8:11:0e:0c:d2:4c:ce:e9:6b:fd:
                    57:6a:6b:4e:35:1b:2c:a1:e6:b8:78:40:83:ad:19:
                    84:bd:51:bb:b7:14:76:81:ef:19:89:e4:78:5a:ba:
                    eb:55:1c:01:06:cb:ce:85:eb:33:da:7c:4d:ef:10:
                    4c:af:ed:f5:58:b2:bc:95:d6:29:01:07:b2:91:8e:
                    e4:e6:3b:04:d5:40:41:15:d4:08:fc:06:d6:ab:02:
                    54:89:0b:ec:bc:ac:96:cf:23:43:97:d1:df:c1:ef:
                    93:ad:cf:25:c2:7d:08:fe:c3:49:ec:ee:43:61:1b:
                    cc:17:e2:a8:19:68:9f:7f:e1:7b:64:45:87:fb:19:
                    18:b6:45:f1:88:bd:94:51:27:11:f3:6a:79:67:60:
                    dd:f1:58:c6:17:44:6d:3b:2b:b2:92:ca:1c:bf:aa:
                    7a:ce:17:fa:48:3b:dc:d8:0b:1a:03:e4:b3:0d:92:
                    f9:03:bc:9a:e8:55:fe:3f:81:a3:03:74:31:d8:e4:
                    12:22:a7:b3:04:80:05:ca:58:60:14:ab:a2:df:06:
                    14:5e:84:eb:3d:7d:96:ec:01:29:58:1f:c2:50:2c:
                    21:b1:3f:93:a2:c1:63:d2:9d:c9:45:47:cb:bf:08:
                    5e:01:16:07:2b:71:99:69:ae:b9:74:4c:6d:ec:99:
                    be:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E0:F6:77:AD:91:05:15:9D:C1:AD:4C:3A:F5:BC:D0:0B:02:25:74
            X509v3 Authority Key Identifier:
                keyid:F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32302e302f32322d3232203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:20:79:28:0f:b9:cb:c3:c3:1a:21:e8:d6:f3:5d:22:6f:0f:
         60:68:bb:03:8a:2b:7d:2f:9a:fd:83:e0:80:44:87:3c:cd:47:
         61:8e:55:17:b4:66:2d:43:7f:8d:8d:ed:cc:52:ae:22:bd:70:
         d0:ae:4e:e5:d5:22:fe:3e:26:ca:af:33:a3:34:11:f6:47:38:
         e0:40:f8:71:9c:dd:52:76:2d:4f:f2:38:5b:4b:87:45:4a:51:
         9f:7b:8d:f4:4d:13:ca:18:4a:d4:69:1c:83:9a:39:90:ca:f3:
         57:d0:44:4f:50:0f:97:2b:b9:87:cc:a3:22:62:c0:3c:cf:24:
         43:86:12:48:27:de:aa:66:0a:d6:f2:3d:54:9f:da:51:70:b3:
         28:95:7c:5c:4b:22:e8:a4:73:8a:71:7c:6b:c2:46:3a:ac:ab:
         85:9f:5e:76:a1:a3:5d:f6:67:a0:67:24:b5:07:af:ef:63:46:
         02:d8:04:ca:6b:d6:d1:67:db:7c:52:a0:74:bd:d4:a8:51:11:
         a0:0c:e1:d7:24:33:2f:19:5d:b8:dd:7b:62:45:c0:4c:4b:e6:
         8d:db:25:35:78:94:1a:c3:91:10:ac:70:1e:eb:ee:da:87:f1:
         0f:de:ec:41:39:3a:f3:19:ef:51:7e:8d:12:fa:ba:c7:81:27:
         0f:f2:09:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:13 2025 by rpki-client