Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e322e302f32342d3234203d3e20323639353032.roa
File:                     34352e3138362e322e302f32342d3234203d3e20323639353032.roa (raw, json)
Hash identifier:          b+D02tI08tcWSQtsvQ10aJHY8uFNCaGl450KEOPJW3s=
Subject key identifier:   9C:30:DF:CA:F8:4A:D9:0C:D3:23:D8:97:A8:B5:B8:9D:AD:07:D6:1F
Certificate issuer:       /CN=B65E7DF05538E025E5EF0533E401B97A4458BF8C
Certificate serial:       5516DC4C7AC01E7AFD4CD2D5A22428C9A957C00E
Authority key identifier: B6:5E:7D:F0:55:38:E0:25:E5:EF:05:33:E4:01:B9:7A:44:58:BF:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e322e302f32342d3234203d3e20323639353032.roa
Signing time:             Sun 02 Nov 2025 13:50:59 +0000
ROA not before:           Sun 02 Nov 2025 13:45:59 +0000
ROA not after:            Sun 01 Nov 2026 13:50:59 +0000
asID:                     269502
IP address blocks:        45.186.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 06:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:16:dc:4c:7a:c0:1e:7a:fd:4c:d2:d5:a2:24:28:c9:a9:57:c0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65E7DF05538E025E5EF0533E401B97A4458BF8C
        Validity
            Not Before: Nov  2 13:45:59 2025 GMT
            Not After : Nov  1 13:50:59 2026 GMT
        Subject: CN=9C30DFCAF84AD90CD323D897A8B5B89DAD07D61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:ba:66:6f:25:9e:44:64:10:4c:bb:99:41:
                    47:e1:45:5a:62:18:05:49:1f:e9:6b:e8:90:8b:6c:
                    d1:a5:3e:0f:88:42:5b:5d:03:ad:0b:2f:97:92:84:
                    9b:90:01:c9:89:ef:8d:e6:85:a1:e7:f6:16:a0:6c:
                    d4:e1:a4:a4:06:b4:57:cc:9b:20:d8:3d:99:00:70:
                    ef:cc:f8:1e:f9:7b:e6:bc:e2:92:13:76:0f:78:a4:
                    9f:fa:5c:7e:4f:cc:3a:65:a7:39:86:ae:42:d6:b5:
                    5b:50:90:21:6f:f3:8c:e3:bd:c7:4e:a9:90:98:d9:
                    4d:bf:02:22:2e:4f:24:68:39:09:ef:37:ca:7e:4d:
                    1f:3c:19:28:69:87:78:0a:24:0b:00:e9:5d:ba:c5:
                    b4:f3:5b:62:d4:00:0c:dd:51:58:81:8a:85:60:4a:
                    29:1a:65:85:42:e6:3f:61:50:a5:3a:f3:de:e8:94:
                    f7:3f:cb:58:76:a8:55:a7:2a:5f:19:6d:7d:9b:4d:
                    5e:17:da:b4:25:93:c3:8e:66:10:5a:82:b4:b1:9b:
                    3c:fb:1b:f5:b1:b4:78:74:39:41:47:8f:f1:05:06:
                    78:2b:28:ac:f8:06:d0:a1:f8:a0:84:30:04:fb:de:
                    2d:1d:df:b4:33:b1:03:8c:83:0a:dc:cc:47:fc:16:
                    57:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:30:DF:CA:F8:4A:D9:0C:D3:23:D8:97:A8:B5:B8:9D:AD:07:D6:1F
            X509v3 Authority Key Identifier:
                keyid:B6:5E:7D:F0:55:38:E0:25:E5:EF:05:33:E4:01:B9:7A:44:58:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e322e302f32342d3234203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:d1:8b:39:18:39:49:b7:c1:db:7c:06:77:40:a6:93:94:b8:
         85:a0:03:04:94:74:7d:dd:0f:84:67:23:f1:93:02:77:ce:ae:
         31:2b:35:3f:71:04:88:ff:51:63:86:51:5c:9d:18:b6:d9:6f:
         6b:72:50:8b:87:de:16:f1:a0:88:02:66:91:17:bc:2d:6a:3d:
         d3:9d:1b:e6:39:5d:e3:ba:55:a3:a6:bf:15:a5:45:26:38:df:
         d2:1f:1c:97:a7:74:7a:23:27:c7:36:31:9a:1c:37:82:f1:60:
         8c:1e:77:5e:e5:d2:6b:2e:fc:c0:2e:02:9a:e1:66:36:59:d5:
         76:8c:c6:41:53:64:f8:16:0a:ec:a0:2a:ef:bd:3b:be:af:15:
         d7:27:e8:15:da:b9:1c:8a:1f:08:b0:3d:4c:f2:cb:f9:c4:f6:
         22:ad:9f:39:e7:65:f5:ed:21:49:72:93:33:0f:63:86:76:b0:
         d0:70:25:b5:3f:c2:3f:41:9b:1a:28:b2:9a:d2:ca:59:3a:db:
         7e:c0:4e:8b:94:78:bb:28:6f:1d:fc:fa:89:45:2c:86:fa:dd:
         00:dd:a8:79:fd:7a:f3:f1:7f:bd:06:93:c2:77:49:68:50:6c:
         fc:a6:dd:cb:f2:45:9a:86:0b:4c:0c:82:17:e6:c9:38:9c:97:
         72:49:7b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:18:40 2025 by rpki-client