Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134342e302f32322d3332203d3e20323632373733.roa
File:                     34352e3232382e3134342e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          H5Fq8Ab5JsNXNs5pFnUfXUW5xWCJAj2O8nDkXIDYZvs=
Subject key identifier:   87:AD:0E:7C:09:5E:CD:3E:6C:B4:49:60:F2:42:10:CC:3D:CB:95:0C
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       7BD61BCD3DA0D894F888AD8BCC1B9A5FBBEC3913
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134342e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 14:46:57 +0000
ROA not before:           Mon 11 Aug 2025 14:41:57 +0000
ROA not after:            Mon 10 Aug 2026 14:46:57 +0000
asID:                     262773
IP address blocks:        45.228.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d6:1b:cd:3d:a0:d8:94:f8:88:ad:8b:cc:1b:9a:5f:bb:ec:39:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 14:41:57 2025 GMT
            Not After : Aug 10 14:46:57 2026 GMT
        Subject: CN=87AD0E7C095ECD3E6CB44960F24210CC3DCB950C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:23:7d:1e:2e:1b:90:06:84:c5:4c:46:80:
                    48:c9:e0:bb:be:bf:fe:70:92:d9:f9:2d:b1:20:49:
                    b4:f2:f0:de:c4:d4:25:6a:19:63:a9:a9:10:26:00:
                    89:1c:62:93:f1:e4:3f:6d:68:f2:8b:d5:5c:28:31:
                    98:9f:6c:5f:64:31:58:2f:d9:0a:69:86:74:22:fc:
                    4b:2b:8a:2b:2d:62:8c:11:e4:e3:a5:fe:65:13:0e:
                    5b:fe:6d:33:a3:e2:5c:91:a1:5f:c9:60:03:9e:6f:
                    4b:42:fd:eb:ab:f4:f2:86:b7:c7:78:56:a1:76:3c:
                    23:fa:8f:6e:3c:16:f6:19:41:79:63:02:dc:7f:be:
                    8b:35:05:68:63:bd:d9:fd:eb:08:4d:e2:c4:fc:76:
                    43:cb:1d:d3:25:a8:dc:4d:1d:63:a1:70:7d:69:c1:
                    6c:54:cb:de:07:6e:1e:c7:8f:31:11:78:ef:73:7a:
                    58:72:ea:02:d5:f2:37:a2:61:80:d1:f8:2a:f1:7b:
                    cb:7e:c1:e3:a9:b5:0e:99:71:6b:93:e0:f6:f3:0d:
                    01:7a:9a:99:16:91:c9:83:8c:a9:4b:87:d8:76:1f:
                    fc:2c:df:bf:0a:19:de:9c:70:44:1a:bf:e3:6c:00:
                    fc:3b:53:07:db:47:87:92:ca:b0:08:5f:bc:94:4d:
                    34:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AD:0E:7C:09:5E:CD:3E:6C:B4:49:60:F2:42:10:CC:3D:CB:95:0C
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134342e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:e7:9b:3c:33:8c:9e:d0:ee:3f:65:b2:28:2e:9a:86:12:
         94:59:51:5b:d4:25:0d:e6:24:72:31:5f:90:00:69:84:9b:d6:
         4d:ca:ed:38:0f:af:7d:98:8e:24:38:d8:dd:85:de:d4:46:4c:
         8e:4e:17:26:c4:c3:3a:9f:21:13:29:55:62:14:ea:5c:92:e9:
         7f:03:3e:56:d4:8a:3b:aa:07:30:5b:e8:f2:01:52:2e:0b:dc:
         21:19:c0:6a:fb:2f:7a:2c:2d:27:fa:53:04:b0:02:93:f4:a0:
         f5:df:f1:27:b4:41:db:39:b7:56:22:18:7b:9e:7a:b4:ad:f2:
         58:dd:b9:d2:c7:60:e4:0e:b2:59:e1:a1:83:25:17:38:85:d8:
         ed:1d:78:2d:68:ce:d6:29:ba:83:a1:d3:e5:6d:61:77:17:7b:
         31:a8:2f:85:55:11:a9:b6:0e:88:52:9f:78:48:10:93:de:72:
         56:1d:d8:ef:05:55:1a:dd:61:da:9d:a1:f0:08:a6:6a:67:88:
         40:3e:b8:20:39:76:f7:94:5a:08:6b:3a:1b:7c:6c:4c:c4:4d:
         54:da:f3:4f:2c:2e:10:cd:6b:27:ed:a0:e1:2f:47:5d:7f:08:
         fc:4c:3b:97:00:b7:16:f1:ee:fb:63:22:3f:0a:79:db:a4:10:
         51:f7:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:15:42 2025 by rpki-client