Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa
File:                     34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa (raw, json)
Hash identifier:          mCBvpoyfgGoDkGzjRzW7k2YPcx/Omv3Bdn7KgFhjsW4=
Subject key identifier:   A5:47:37:94:2D:B7:C9:19:E1:8C:F8:BF:29:CC:F9:CA:C7:4D:04:59
Certificate issuer:       /CN=A63E59320D484E59D867131E56F88337804F6F1A
Certificate serial:       3BEB22687FAA561697CA15F3421C65A376796751
Authority key identifier: A6:3E:59:32:0D:48:4E:59:D8:67:13:1E:56:F8:83:37:80:4F:6F:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63E59320D484E59D867131E56F88337804F6F1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa
Signing time:             Wed 05 Nov 2025 12:28:49 +0000
ROA not before:           Wed 05 Nov 2025 12:23:49 +0000
ROA not after:            Wed 04 Nov 2026 12:28:49 +0000
asID:                     267264
IP address blocks:        45.232.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/A63E59320D484E59D867131E56F88337804F6F1A.crl
                          rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/A63E59320D484E59D867131E56F88337804F6F1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63E59320D484E59D867131E56F88337804F6F1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 16:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:eb:22:68:7f:aa:56:16:97:ca:15:f3:42:1c:65:a3:76:79:67:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63E59320D484E59D867131E56F88337804F6F1A
        Validity
            Not Before: Nov  5 12:23:49 2025 GMT
            Not After : Nov  4 12:28:49 2026 GMT
        Subject: CN=A54737942DB7C919E18CF8BF29CCF9CAC74D0459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:19:10:10:cc:8f:b4:aa:f0:e7:44:3e:40:
                    5f:39:18:65:f9:2c:0c:45:80:65:d3:74:4c:05:59:
                    a1:e1:a3:d5:9f:ff:05:61:04:9d:f7:a0:e1:04:ae:
                    33:38:e3:3b:10:77:35:4f:57:51:24:05:90:19:d3:
                    0d:14:6a:de:84:f3:77:21:4d:24:08:bc:71:66:dc:
                    b1:6a:6d:ba:bb:ec:5d:e8:c4:9a:e5:2a:b8:a8:0a:
                    b9:25:29:28:e8:5d:4a:d7:3f:fe:bd:f8:d3:bd:9f:
                    2d:d0:b2:66:e4:c0:14:2a:a9:24:64:f3:fa:32:5d:
                    6c:2f:4e:bd:55:51:cc:99:59:f0:93:e2:aa:07:50:
                    0c:f9:35:e9:1a:15:f6:65:d9:93:3e:bd:b4:2d:ef:
                    a9:aa:28:2e:ed:7e:9b:89:c0:01:23:9b:80:a8:83:
                    f0:dd:07:5e:b8:d9:82:a0:d0:60:f9:f3:fb:0b:96:
                    1e:a8:3a:a5:82:02:30:67:80:7e:6d:14:1d:20:eb:
                    2d:8f:d9:c9:c4:a0:1c:57:39:1e:1c:93:ad:c4:18:
                    76:5a:2a:84:38:26:08:8d:35:ea:46:69:17:79:4e:
                    06:d4:9b:1f:a3:84:f0:bb:c2:89:0a:d9:c3:f3:8f:
                    0d:ed:d1:04:a6:21:4d:c4:6c:7f:90:b0:51:65:31:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:47:37:94:2D:B7:C9:19:E1:8C:F8:BF:29:CC:F9:CA:C7:4D:04:59
            X509v3 Authority Key Identifier:
                keyid:A6:3E:59:32:0D:48:4E:59:D8:67:13:1E:56:F8:83:37:80:4F:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/A63E59320D484E59D867131E56F88337804F6F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63E59320D484E59D867131E56F88337804F6F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:25:55:1e:2c:7c:6c:3f:95:2b:06:79:e1:41:04:cf:41:2d:
         c2:bd:ef:7a:f2:fa:f1:0c:50:84:fd:a8:f4:b5:4f:62:d1:1a:
         ef:45:29:1c:82:b2:df:92:a6:29:91:84:85:19:72:04:b3:6d:
         7c:76:10:ac:8c:0a:e3:db:3b:98:45:ed:3d:f3:1f:fa:87:20:
         a1:93:bd:92:a0:af:7d:0f:a3:17:51:87:a9:ae:80:02:f6:ce:
         15:cb:80:8a:f3:1a:e4:d0:67:f2:2d:c3:e0:e2:73:10:67:5f:
         a9:73:ac:61:b8:ea:b4:1b:3d:64:d7:0c:b1:57:b6:af:78:d8:
         af:de:26:15:91:4f:03:87:09:75:e4:be:f8:4e:0d:17:77:75:
         31:65:12:6d:f1:db:1e:5b:72:40:ee:ff:39:0a:f2:67:16:f6:
         67:12:54:55:04:b7:91:9d:7f:8b:3a:ad:7b:01:40:77:e9:bd:
         18:9c:db:ac:f3:ae:c3:dd:62:73:f1:d0:18:01:05:41:c7:4f:
         66:9c:b3:44:4f:67:9a:65:6c:21:16:07:22:15:10:55:26:fd:
         83:ef:85:f8:00:b3:fa:69:a6:29:7c:a6:a5:29:9a:7e:39:6e:
         88:4a:17:e4:67:c0:94:2d:3d:52:1e:28:30:ea:c2:25:0b:42:
         e0:2e:72:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:38:21 2025 by rpki-client