Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/34352e3136352e3139322e302f32322d3234203d3e20323637393337.roa
File:                     34352e3136352e3139322e302f32322d3234203d3e20323637393337.roa (raw, json)
Hash identifier:          bahpbjyN1mrqz8LjJR7OQuiQh30B5MaxUE3e+/WyIm4=
Subject key identifier:   A8:B5:F3:35:D0:3A:83:E1:22:DB:B8:CC:9B:F7:11:68:78:C0:7C:66
Certificate issuer:       /CN=46F24D803C58D84B40547B9D4586598137D71935
Certificate serial:       0EA086A443127B8B6E161987CA6956694847A683
Authority key identifier: 46:F2:4D:80:3C:58:D8:4B:40:54:7B:9D:45:86:59:81:37:D7:19:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46F24D803C58D84B40547B9D4586598137D71935.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/34352e3136352e3139322e302f32322d3234203d3e20323637393337.roa
Signing time:             Tue 21 Oct 2025 13:09:16 +0000
ROA not before:           Tue 21 Oct 2025 13:04:16 +0000
ROA not after:            Tue 20 Oct 2026 13:09:16 +0000
asID:                     267937
IP address blocks:        45.165.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/46F24D803C58D84B40547B9D4586598137D71935.crl
                          rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/46F24D803C58D84B40547B9D4586598137D71935.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46F24D803C58D84B40547B9D4586598137D71935.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a0:86:a4:43:12:7b:8b:6e:16:19:87:ca:69:56:69:48:47:a6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46F24D803C58D84B40547B9D4586598137D71935
        Validity
            Not Before: Oct 21 13:04:16 2025 GMT
            Not After : Oct 20 13:09:16 2026 GMT
        Subject: CN=A8B5F335D03A83E122DBB8CC9BF7116878C07C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:21:8c:10:f3:89:cb:f9:c0:71:6f:0c:cc:
                    39:6c:67:0e:dc:0e:7d:b9:e5:cf:8e:bf:db:9f:7a:
                    28:6c:f3:f8:44:33:83:38:a7:7c:c7:40:89:05:f4:
                    07:05:31:5a:34:c3:30:bf:ea:fc:94:57:68:37:d8:
                    53:07:80:e6:86:20:49:1c:ee:a6:a3:f3:ec:c3:74:
                    81:af:09:8e:af:ca:bd:c1:be:6d:a6:02:3c:ca:93:
                    8a:43:96:d7:c1:fc:2d:57:08:49:99:89:6d:8d:18:
                    f4:88:12:f7:a0:00:a5:d5:c9:5f:fb:b6:9d:d9:ee:
                    e9:ae:a2:19:a9:3e:19:03:99:aa:a7:c2:56:30:3b:
                    14:12:6b:3f:5c:63:df:90:c5:17:5f:b0:6d:a8:2f:
                    5d:98:fe:83:20:37:44:ce:3c:f8:df:00:a7:75:7d:
                    bc:21:ff:a3:f0:7e:f7:f5:ae:06:87:d0:e8:e8:c3:
                    35:76:d7:83:ac:fa:3f:d9:71:f3:9f:f3:47:d6:d4:
                    0e:ee:db:07:49:42:da:b4:9a:25:b5:f7:e6:5b:9f:
                    7d:e3:12:05:03:83:13:80:c4:18:91:0f:a1:75:57:
                    47:a5:02:ae:84:0f:15:9a:97:46:2e:f1:e9:5a:85:
                    a0:49:8a:ad:d4:5a:00:b6:9d:c1:03:67:95:37:ef:
                    bb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B5:F3:35:D0:3A:83:E1:22:DB:B8:CC:9B:F7:11:68:78:C0:7C:66
            X509v3 Authority Key Identifier:
                keyid:46:F2:4D:80:3C:58:D8:4B:40:54:7B:9D:45:86:59:81:37:D7:19:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/46F24D803C58D84B40547B9D4586598137D71935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46F24D803C58D84B40547B9D4586598137D71935.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/34352e3136352e3139322e302f32322d3234203d3e20323637393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:46:78:5e:35:a4:8f:08:e2:73:ad:c9:55:fd:b3:64:a2:8b:
         23:86:8a:ec:04:00:cf:b8:51:db:c7:3c:ce:a2:a2:d3:b7:f0:
         a1:f6:3f:28:99:df:ef:82:1b:92:a6:a4:1b:e7:ae:c0:02:26:
         bb:35:bb:1b:a4:89:36:29:0f:3c:57:63:b8:75:a9:5f:f2:bd:
         6e:54:32:95:b0:6d:6e:11:27:0b:65:8d:d4:d9:a5:4a:b1:db:
         57:aa:9f:c5:ab:56:d3:00:86:2a:a3:ae:20:ca:14:f5:bf:c4:
         29:f3:85:04:ea:cc:09:a8:96:a2:a6:2b:1d:03:25:64:f5:ea:
         a9:31:28:b0:24:fc:b2:41:48:bf:e5:f4:80:27:08:d6:32:f0:
         7f:c5:af:69:4a:a7:b5:01:9b:7e:4e:5c:c3:84:43:d1:f9:0d:
         d6:3a:60:32:09:35:77:08:de:33:11:cc:af:03:c4:42:e2:ee:
         36:c9:9a:fa:c3:5e:f5:21:3b:ad:fa:60:23:1d:97:f7:e4:29:
         d5:43:c0:75:ba:90:3f:d9:76:90:25:b2:90:9f:91:c9:c0:f9:
         74:dd:c3:1e:19:e7:fe:2c:9b:22:61:d7:b3:a4:3f:5e:4d:e8:
         02:5f:27:16:16:15:84:f0:84:ac:01:01:06:ae:0d:07:85:d2:
         9f:9e:8b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:37:01 2025 by rpki-client