Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa
File:                     34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa (raw, json)
Hash identifier:          1fsdSmR4TdjbL1xr7Loe4KWvKXQMJAqt1mSxZ8Jgpyo=
Subject key identifier:   B9:66:92:74:59:30:88:78:21:B8:5B:1C:AB:00:FF:58:FA:F1:C3:76
Certificate issuer:       /CN=721FDEF0EC64EC9ECB8963D4279535836A0A16EB
Certificate serial:       3B41F9128C8BF3EBF333E31F756C3950E2EA89FA
Authority key identifier: 72:1F:DE:F0:EC:64:EC:9E:CB:89:63:D4:27:95:35:83:6A:0A:16:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa
Signing time:             Wed 22 Oct 2025 16:35:37 +0000
ROA not before:           Wed 22 Oct 2025 16:30:37 +0000
ROA not after:            Wed 21 Oct 2026 16:35:37 +0000
asID:                     268993
IP address blocks:        45.177.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl
                          rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 19:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:41:f9:12:8c:8b:f3:eb:f3:33:e3:1f:75:6c:39:50:e2:ea:89:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721FDEF0EC64EC9ECB8963D4279535836A0A16EB
        Validity
            Not Before: Oct 22 16:30:37 2025 GMT
            Not After : Oct 21 16:35:37 2026 GMT
        Subject: CN=B96692745930887821B85B1CAB00FF58FAF1C376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:ca:06:7d:91:ea:85:bf:89:da:92:03:7b:
                    7b:93:5e:32:ef:b0:f4:08:0e:41:13:ab:40:8b:50:
                    d1:49:1b:d0:96:42:7f:93:ba:c5:9b:1f:db:44:a9:
                    77:17:7d:e6:cc:24:39:20:99:2b:07:05:a4:bd:b2:
                    fd:b8:80:93:9f:8c:88:dd:ae:c0:47:15:fb:b1:64:
                    f6:36:d1:df:7a:82:24:f9:93:73:7d:62:8a:94:46:
                    bd:c2:d0:cc:1c:54:4f:86:7f:1f:98:92:18:71:0e:
                    79:63:5f:74:4a:7d:3a:6b:ee:5b:aa:9e:e2:48:e3:
                    6d:b3:53:bc:79:1f:b7:0f:9d:2f:ec:25:a8:19:ee:
                    39:cd:70:81:53:36:b9:95:e3:c6:11:2a:39:c0:92:
                    96:cf:33:6b:0c:2a:5d:ff:8c:a0:55:e4:94:fe:ed:
                    1d:0e:97:8b:df:c2:5f:d2:67:92:12:9e:53:a6:58:
                    5a:c9:27:d6:a0:98:cc:77:53:7f:c2:16:cb:07:68:
                    8c:65:2a:c7:87:a9:5e:53:4d:4e:de:be:95:ba:06:
                    16:86:22:8d:0d:df:2d:b5:93:eb:b3:e4:a1:ab:e4:
                    86:72:70:4c:0e:14:de:98:09:e5:67:d2:ab:47:cd:
                    27:26:f1:8b:89:e2:53:f1:48:1e:9c:6a:e2:2b:1e:
                    24:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:66:92:74:59:30:88:78:21:B8:5B:1C:AB:00:FF:58:FA:F1:C3:76
            X509v3 Authority Key Identifier:
                keyid:72:1F:DE:F0:EC:64:EC:9E:CB:89:63:D4:27:95:35:83:6A:0A:16:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:d3:70:89:c7:e7:a1:95:7e:8b:d6:d5:7e:b4:5c:9f:80:b1:
         77:33:a5:e1:a3:9c:d3:c4:8b:0d:94:5c:ca:9e:8b:48:09:3a:
         47:e8:80:fb:66:e7:72:2a:18:33:66:a5:a4:2d:fd:73:47:b2:
         32:d9:b1:dc:39:d7:b6:85:eb:a6:a6:87:81:78:83:33:c8:51:
         b3:c5:54:cf:63:d8:b4:2a:73:88:96:c0:73:c9:61:84:5f:37:
         51:0d:a7:60:42:9a:e2:4e:07:aa:3f:93:04:56:ad:df:c8:ef:
         d5:a3:ee:10:4c:f8:ee:88:4d:11:77:2a:e6:69:94:2d:57:54:
         f1:04:07:ba:0d:1e:ab:e9:77:8c:26:3e:c7:08:dd:93:70:14:
         a3:5e:c7:7b:61:7f:c8:58:73:3d:e2:2c:4d:78:66:8d:81:d9:
         3f:7d:d1:ec:ff:8f:22:3e:6b:ce:e1:0f:3d:37:ac:0c:7c:cc:
         ee:b7:8c:95:c5:9d:2a:9a:27:3c:5a:20:b3:05:63:16:5c:03:
         51:69:b7:5c:3c:fd:c8:4d:b7:11:7a:78:b7:20:62:dd:92:f1:
         18:68:43:f9:f0:62:78:7c:21:89:06:96:67:6b:da:5d:52:e2:
         f4:05:31:5d:16:74:98:af:b7:82:f9:03:a2:a9:c5:75:a3:40:
         52:cd:00:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:04:32 2025 by rpki-client