Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37332e302f32342d3234203d3e20323638333535.roa
File:                     34352e3233392e37332e302f32342d3234203d3e20323638333535.roa (raw, json)
Hash identifier:          8nLSYCsU/RguhB4raTXQB/UdGmMilCsobE34zpYNDlI=
Subject key identifier:   E5:AE:27:27:33:7A:D7:20:E5:F5:C3:D8:A6:95:79:3C:82:FF:E7:9A
Certificate issuer:       /CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
Certificate serial:       282947246074685FE94965EC2024B1F0D90F081E
Authority key identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37332e302f32342d3234203d3e20323638333535.roa
Signing time:             Thu 18 Sep 2025 11:36:12 +0000
ROA not before:           Thu 18 Sep 2025 11:31:12 +0000
ROA not after:            Thu 17 Sep 2026 11:36:12 +0000
asID:                     268355
IP address blocks:        45.239.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl
                          rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:29:47:24:60:74:68:5f:e9:49:65:ec:20:24:b1:f0:d9:0f:08:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
        Validity
            Not Before: Sep 18 11:31:12 2025 GMT
            Not After : Sep 17 11:36:12 2026 GMT
        Subject: CN=E5AE2727337AD720E5F5C3D8A695793C82FFE79A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0a:94:bb:26:6f:d9:dd:81:f3:c5:c3:21:df:
                    5c:3f:70:f5:76:4b:48:2c:db:06:fa:2a:17:bc:7f:
                    7b:ff:e4:f9:16:f2:9e:d3:a2:08:2b:76:10:f6:3d:
                    85:32:d2:cd:c2:34:fc:0b:e7:a6:f3:0f:ee:18:11:
                    12:5d:84:91:c6:dc:7c:57:e0:e4:41:95:ec:62:8e:
                    cc:e8:ad:9d:e3:22:27:a9:a2:4e:8a:4b:55:4b:45:
                    41:e2:0c:58:b9:65:fa:eb:01:da:1d:ff:f1:22:41:
                    12:12:9f:c7:d7:d0:5f:a8:9e:82:36:71:fa:ca:fd:
                    b4:1e:f5:3c:4f:72:72:4c:86:38:c0:e7:01:ef:9f:
                    e7:cc:6f:a5:42:b7:65:f0:4a:b3:5e:f9:ad:59:a2:
                    78:d8:eb:9d:18:d9:01:c1:fd:aa:dc:b6:99:8d:de:
                    07:4a:75:ec:c1:05:f3:0e:3e:90:c3:c4:f4:98:36:
                    a8:41:ac:da:96:3e:05:8e:86:82:d0:c8:2c:38:65:
                    85:a3:3e:44:41:27:c1:c5:7e:b5:b8:0e:67:d7:ae:
                    9f:f4:26:62:71:2e:d6:08:78:1e:7a:9f:62:1f:8e:
                    ef:69:2a:1e:e3:fb:fb:4f:ad:26:92:b1:b2:b9:30:
                    f8:8b:14:86:22:de:47:c5:74:93:38:5a:00:a0:6f:
                    31:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AE:27:27:33:7A:D7:20:E5:F5:C3:D8:A6:95:79:3C:82:FF:E7:9A
            X509v3 Authority Key Identifier:
                keyid:28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37332e302f32342d3234203d3e20323638333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e8:d5:e5:54:30:34:bf:3a:8f:2f:17:54:ed:48:bc:c4:c0:
         b3:66:8f:36:9c:92:e0:95:19:9c:03:34:b2:51:e4:97:47:1b:
         73:0e:05:f0:03:e7:23:75:4a:e7:2e:06:5a:64:2d:64:f3:04:
         c2:e7:df:b1:7b:38:ea:02:6c:60:f4:86:2c:f7:ad:30:63:5d:
         d8:ef:fb:cc:40:4f:1f:1e:ea:b5:7a:08:91:3c:16:48:02:f8:
         ef:c1:b3:fe:05:87:78:4b:5d:d6:63:5e:5b:e5:ca:ce:ca:a3:
         2f:e2:17:36:68:e6:24:ed:3b:dd:5e:a4:68:a0:d9:37:cb:c4:
         20:52:0a:4e:50:50:c5:a1:18:e9:d0:e4:31:05:ae:3a:a6:1a:
         0e:9d:1f:53:11:32:63:0e:51:6a:ef:57:07:a8:9a:e3:43:0f:
         38:b7:4a:b3:44:ee:8e:21:72:13:d3:ea:65:d6:28:57:8d:47:
         07:8c:98:59:50:1f:de:2b:c4:75:7a:86:8d:ee:50:4a:9e:a2:
         29:d9:dc:35:2c:ba:f0:61:22:1e:cf:9a:7f:60:64:10:e0:24:
         9c:f4:25:62:72:fb:f8:76:33:9e:b1:50:18:7a:b9:a5:20:44:
         5c:60:9f:11:a6:5b:cf:6f:bb:f6:31:ed:9d:01:94:0b:0b:bb:
         3e:fe:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:50:26 2025 by rpki-client