Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e33302e302f32342d3234203d3e20323637303437.roa
File:                     34352e3232372e33302e302f32342d3234203d3e20323637303437.roa (raw, json)
Hash identifier:          iVGIdfYxHnLAvBHpTo0D8qE4/0J28IX0SRneXe8zLeA=
Subject key identifier:   3C:17:43:C3:4D:1B:26:FE:71:F0:85:2C:76:F2:07:5C:62:23:16:19
Certificate issuer:       /CN=B0B7CC182286506A60C3582F880657A780AE1B77
Certificate serial:       0605EE4398525490963D4F9C89181AA5E17DF224
Authority key identifier: B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e33302e302f32342d3234203d3e20323637303437.roa
Signing time:             Fri 10 Oct 2025 22:03:01 +0000
ROA not before:           Fri 10 Oct 2025 21:58:01 +0000
ROA not after:            Fri 09 Oct 2026 22:03:01 +0000
asID:                     267047
IP address blocks:        45.227.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.crl
                          rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:05:ee:43:98:52:54:90:96:3d:4f:9c:89:18:1a:a5:e1:7d:f2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B7CC182286506A60C3582F880657A780AE1B77
        Validity
            Not Before: Oct 10 21:58:01 2025 GMT
            Not After : Oct  9 22:03:01 2026 GMT
        Subject: CN=3C1743C34D1B26FE71F0852C76F2075C62231619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:88:a1:ff:06:6c:86:a3:77:29:29:6b:2e:
                    00:f5:67:52:95:53:41:23:f6:ff:d0:f4:0c:e9:30:
                    ec:fe:32:73:a0:8f:e6:52:57:b9:a2:1a:8f:3d:86:
                    5f:e3:e4:fe:2c:99:ce:25:d0:9a:6f:4f:cb:53:49:
                    38:af:af:4f:53:d1:73:04:f2:bf:cf:9d:64:08:7b:
                    b0:38:1e:c9:cd:c6:2a:97:0b:8b:b8:cd:b7:87:5f:
                    0e:5b:2f:29:03:43:06:8f:05:14:82:b4:a6:b0:8f:
                    1e:9b:8a:1d:8f:7b:17:c5:49:cd:b8:cb:b6:5a:86:
                    7c:71:ab:fb:11:14:0f:60:a3:be:3b:cd:74:a4:19:
                    71:9e:da:f4:45:97:8e:09:eb:96:cb:89:8a:0a:a8:
                    05:88:bf:63:a2:25:5b:ab:ba:5e:4c:4c:80:4a:4c:
                    79:f1:66:a2:6e:f1:f6:32:74:19:cb:6c:ec:39:88:
                    11:fb:95:59:a1:b4:ff:0b:17:82:79:2b:7f:f3:65:
                    53:7f:9d:e6:44:72:60:93:75:f2:ed:80:5e:2c:59:
                    cd:ac:53:f7:11:85:a3:70:02:fc:f7:de:71:ad:8c:
                    7b:91:d7:9b:b2:c3:fc:94:72:c3:37:84:f4:73:08:
                    2f:4c:f8:a1:0d:dc:cc:e9:a4:89:89:a6:01:28:c3:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:17:43:C3:4D:1B:26:FE:71:F0:85:2C:76:F2:07:5C:62:23:16:19
            X509v3 Authority Key Identifier:
                keyid:B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e33302e302f32342d3234203d3e20323637303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:59:07:25:df:a7:07:e5:ad:ac:7b:e0:f1:fe:06:f2:eb:89:
         89:06:50:b5:c8:7d:9f:3d:51:bd:25:f4:3b:d3:8d:07:d7:97:
         d2:42:86:cd:d7:00:21:8a:5b:27:f7:dd:f2:3a:97:8d:65:f1:
         17:56:7b:b5:3a:e8:8f:d0:0e:49:76:4e:25:57:cf:30:52:0e:
         45:01:03:bc:b2:c8:02:78:5f:f8:1e:66:49:b7:b9:17:0c:72:
         74:57:43:8a:24:84:da:4e:39:dc:85:98:4a:c5:a8:24:c9:68:
         aa:0c:c4:c9:5e:06:67:a3:3b:15:14:5d:6e:02:51:0f:77:c3:
         e6:fc:e6:11:d8:c9:c8:85:04:28:06:73:a7:7b:1b:9d:b1:25:
         d1:79:a3:ad:bc:d1:48:85:2d:e0:9d:f4:3f:01:6c:e3:2c:8a:
         af:00:32:25:d6:7c:be:6e:63:12:eb:bb:fd:08:79:8b:3f:8d:
         98:83:84:9d:e3:0f:cf:6f:7b:ab:37:69:c3:be:2a:4d:ca:eb:
         55:a5:1a:71:f5:59:b8:06:57:c8:eb:9e:0c:8c:41:98:37:8a:
         10:25:12:8f:54:4f:da:9c:ff:b8:a4:9c:47:17:81:06:aa:4e:
         fd:f2:d1:85:51:3a:0e:7d:e3:71:e0:68:1d:e5:e9:3b:fc:57:
         56:fd:66:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:25 2025 by rpki-client