Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32342d3234203d3e20323636323638.roa
File:                     34352e36352e3230382e302f32342d3234203d3e20323636323638.roa (raw, json)
Hash identifier:          AEqC4q2hzzSr7+c8/Pbml7nFmcxg7VfmpXGeFI5M9No=
Subject key identifier:   29:6A:9B:40:44:72:1F:02:22:16:31:AC:52:FC:9A:EA:87:94:58:E3
Certificate issuer:       /CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
Certificate serial:       13C456004AED5F514649A9163C764D7C1D06FEE7
Authority key identifier: F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32342d3234203d3e20323636323638.roa
Signing time:             Mon 15 Sep 2025 23:58:42 +0000
ROA not before:           Mon 15 Sep 2025 23:53:42 +0000
ROA not after:            Mon 14 Sep 2026 23:58:42 +0000
asID:                     266268
IP address blocks:        45.65.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c4:56:00:4a:ed:5f:51:46:49:a9:16:3c:76:4d:7c:1d:06:fe:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
        Validity
            Not Before: Sep 15 23:53:42 2025 GMT
            Not After : Sep 14 23:58:42 2026 GMT
        Subject: CN=296A9B4044721F02221631AC52FC9AEA879458E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:26:43:98:c7:81:a1:f6:f0:a7:63:4d:1b:
                    90:a4:ee:1e:80:fe:be:49:ac:ed:fd:3a:07:a3:d2:
                    87:c0:af:22:b1:2c:48:24:28:a1:97:05:90:85:b8:
                    a3:22:2a:f7:87:fd:e5:cc:9c:b2:b9:50:84:6b:21:
                    1e:e8:3d:2c:07:30:fa:81:eb:39:01:b3:a8:7e:53:
                    7d:0d:2c:56:6c:f2:36:f9:3f:1f:29:0b:21:3f:22:
                    99:94:7c:13:7f:00:e8:72:cf:9c:03:0b:2b:5e:e3:
                    2e:e4:e1:ba:87:dc:2e:1b:96:cd:d2:de:9d:52:c1:
                    1f:2d:75:28:9f:76:16:99:61:4c:7c:0d:b7:ab:66:
                    b1:46:e3:ea:13:4c:06:f4:c0:35:30:32:06:11:1c:
                    ef:b5:7c:db:8a:d0:31:d0:09:aa:0f:ab:ad:4e:e9:
                    cf:e8:b7:d4:2e:83:60:2b:a9:b1:88:aa:94:f9:02:
                    9c:ba:d8:e6:64:fd:94:c1:61:6f:0c:f2:70:d5:62:
                    b9:bf:f5:91:25:bd:4f:b0:9e:4c:bd:63:5b:6c:a3:
                    4b:f8:51:cd:57:43:4c:2a:75:a2:bb:04:3e:82:31:
                    ad:b1:aa:88:8f:93:c9:5a:6a:9c:73:c0:b1:44:f1:
                    68:c4:67:49:40:ea:12:65:bc:3d:9a:6c:69:b6:1e:
                    86:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6A:9B:40:44:72:1F:02:22:16:31:AC:52:FC:9A:EA:87:94:58:E3
            X509v3 Authority Key Identifier:
                keyid:F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32342d3234203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:e9:b1:c1:67:3c:44:09:69:e2:19:be:b4:1c:20:0f:a7:35:
         ed:63:2b:b9:05:7f:4b:f7:44:74:d2:35:7a:f9:aa:e6:e3:31:
         fe:ee:18:f4:3d:15:7b:5c:68:15:bb:af:6f:24:53:8d:44:e6:
         47:f0:33:b3:28:5b:2c:88:21:12:fa:47:73:1f:ee:c5:36:4d:
         10:4b:8b:07:08:e2:a6:27:25:48:e0:d5:82:2d:5f:fc:69:bf:
         c0:7a:19:36:14:47:ae:b8:16:ae:59:25:55:fe:17:6a:39:96:
         71:49:02:6a:d9:b8:38:00:d3:6e:86:e5:3b:fa:cb:91:17:22:
         8a:f1:b5:ab:d9:98:5c:a1:ee:5a:2c:08:28:4c:24:28:44:80:
         d5:9a:9f:f4:75:0e:b7:f8:fc:58:52:74:ab:a7:70:c8:01:34:
         07:c9:d3:aa:59:2c:cb:0e:42:22:fb:3e:5c:96:1e:75:25:1b:
         8a:ed:e3:10:75:a5:c3:58:0f:d1:13:c6:b1:38:06:d8:f3:d7:
         79:64:f9:b3:5a:cd:8f:c5:41:56:7e:d6:bb:c2:9b:e7:1d:5f:
         ab:25:5d:0d:16:1b:80:5c:70:7e:61:72:0a:b2:c5:08:34:d7:
         6a:74:6f:ec:79:ca:47:cb:0b:eb:50:56:37:36:4c:aa:fc:e5:
         5a:8a:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:07:15 2025 by rpki-client