Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/34352e3138372e31312e302f32342d3234203d3e20323639343630.roa
File:                     34352e3138372e31312e302f32342d3234203d3e20323639343630.roa (raw, json)
Hash identifier:          Y0A8df5KMuaRSw1JD3j8FShhZt3nQOGtotZNUQfmcwE=
Subject key identifier:   6D:BC:2C:7F:06:70:6E:B7:8C:07:1E:7F:F9:31:8E:C9:52:B7:E7:0D
Certificate issuer:       /CN=7EE0E237BA83B6E5F7FFA4C779A448AD72D24453
Certificate serial:       526DA8CA9CFCF60BB8978F19D250D668F2A089F7
Authority key identifier: 7E:E0:E2:37:BA:83:B6:E5:F7:FF:A4:C7:79:A4:48:AD:72:D2:44:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/34352e3138372e31312e302f32342d3234203d3e20323639343630.roa
Signing time:             Mon 20 Oct 2025 17:38:58 +0000
ROA not before:           Mon 20 Oct 2025 17:33:58 +0000
ROA not after:            Mon 19 Oct 2026 17:38:58 +0000
asID:                     269460
IP address blocks:        45.187.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.crl
                          rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6d:a8:ca:9c:fc:f6:0b:b8:97:8f:19:d2:50:d6:68:f2:a0:89:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EE0E237BA83B6E5F7FFA4C779A448AD72D24453
        Validity
            Not Before: Oct 20 17:33:58 2025 GMT
            Not After : Oct 19 17:38:58 2026 GMT
        Subject: CN=6DBC2C7F06706EB78C071E7FF9318EC952B7E70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:20:62:91:d7:8e:27:b9:c4:48:d3:d5:1a:
                    ff:b8:79:42:94:ea:e9:9c:ee:0c:db:cd:1f:78:20:
                    16:e2:e7:ff:fb:d6:ea:e2:9f:3f:91:a2:6f:4f:a7:
                    e1:35:1a:dc:26:cc:aa:87:bb:bd:30:0d:41:3b:db:
                    91:42:70:85:56:be:bb:ae:e3:fd:8a:7f:38:3a:65:
                    f7:90:8d:06:44:ca:4a:c0:1b:f1:c2:8a:8c:7e:ac:
                    b7:24:cf:dc:69:83:42:6d:ba:8e:3b:c7:e0:ef:61:
                    61:e3:72:54:4e:30:3c:75:4b:19:45:88:e4:d6:63:
                    8b:cb:c8:cb:90:f0:55:97:59:6a:90:68:56:df:67:
                    8b:5f:f0:3d:49:9c:77:a8:c5:ea:5b:8e:03:79:d8:
                    60:bf:b5:f3:9b:10:ee:ad:2c:08:39:2c:71:ac:fd:
                    b9:46:07:bd:61:a0:b6:da:40:83:d8:40:c9:d3:66:
                    2c:9a:47:5f:17:ab:c5:f4:f4:5b:32:18:56:5e:02:
                    d4:4d:f4:e0:db:ee:4a:ee:04:6f:49:c7:cc:4e:f2:
                    c6:e8:0a:e8:79:83:61:b7:3e:4e:0e:3f:26:86:e8:
                    4b:d0:8c:f5:33:0f:cc:00:62:ab:1f:9e:96:50:eb:
                    d9:70:b8:17:57:2d:55:b6:ca:c7:73:98:ba:66:75:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BC:2C:7F:06:70:6E:B7:8C:07:1E:7F:F9:31:8E:C9:52:B7:E7:0D
            X509v3 Authority Key Identifier:
                keyid:7E:E0:E2:37:BA:83:B6:E5:F7:FF:A4:C7:79:A4:48:AD:72:D2:44:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/34352e3138372e31312e302f32342d3234203d3e20323639343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:3f:68:26:a3:c4:64:3e:5e:7a:82:1c:39:e3:8e:44:24:5d:
         4e:38:56:e9:99:4e:47:a0:93:80:fd:87:82:32:b4:16:19:4a:
         f8:3f:4c:19:2a:2b:66:25:d9:d5:ce:25:3b:7a:e0:1d:4b:fe:
         77:12:57:a5:2c:91:b6:85:0b:6f:95:a7:d8:a3:93:cf:be:91:
         f2:16:76:82:ec:87:ca:99:5f:24:3b:3f:28:82:c3:af:60:4d:
         fb:28:81:d1:5e:63:fe:c8:a0:90:f8:cf:45:48:b4:8b:38:44:
         3e:3b:09:63:17:d6:47:f7:dd:45:17:1e:98:ce:60:cd:69:6c:
         b3:f7:d2:07:6e:24:d8:50:62:f8:2e:75:11:61:d5:8d:34:87:
         1a:1c:56:26:fb:c5:bb:77:44:c1:9d:b5:b3:52:bf:01:ce:e4:
         a7:85:7a:98:55:94:e8:e1:09:c6:3f:57:80:7c:85:62:b2:ab:
         f1:29:b6:96:75:08:75:84:9e:0d:ef:67:83:df:0f:98:48:37:
         c5:40:a7:8f:f5:3d:b2:cb:32:c6:a9:68:01:d7:67:9d:e5:af:
         5d:77:0b:f2:2c:3b:d8:78:f7:5e:cb:ad:33:f7:29:51:6a:83:
         19:08:18:4b:97:a1:48:8e:1c:d0:92:a3:37:30:98:8e:e0:6e:
         9d:5c:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:41 2025 by rpki-client