Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/34352e3138392e34342e302f32322d3332203d3e20323639353737.roa
File:                     34352e3138392e34342e302f32322d3332203d3e20323639353737.roa (raw, json)
Hash identifier:          WZx5i/TW0m/ZYOZTy094vtIw4be/X8WNFuv/13kVI4w=
Subject key identifier:   3F:FE:AD:20:D9:3A:3C:84:7B:ED:B6:8E:48:5A:D9:F5:15:07:DA:88
Certificate issuer:       /CN=F27F97DDE32D8C91FD89D5F30108BB0E32194AD9
Certificate serial:       16E45879CB9DAB220CEE4EDDBA4FC9627B41C2D0
Authority key identifier: F2:7F:97:DD:E3:2D:8C:91:FD:89:D5:F3:01:08:BB:0E:32:19:4A:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/34352e3138392e34342e302f32322d3332203d3e20323639353737.roa
Signing time:             Fri 12 Sep 2025 01:07:10 +0000
ROA not before:           Fri 12 Sep 2025 01:02:10 +0000
ROA not after:            Fri 11 Sep 2026 01:07:10 +0000
asID:                     269577
IP address blocks:        45.189.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.crl
                          rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e4:58:79:cb:9d:ab:22:0c:ee:4e:dd:ba:4f:c9:62:7b:41:c2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27F97DDE32D8C91FD89D5F30108BB0E32194AD9
        Validity
            Not Before: Sep 12 01:02:10 2025 GMT
            Not After : Sep 11 01:07:10 2026 GMT
        Subject: CN=3FFEAD20D93A3C847BEDB68E485AD9F51507DA88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:e4:61:f8:8f:00:ca:2a:79:5e:1d:a5:6b:
                    92:80:51:54:7b:90:84:82:dc:65:f4:e0:68:09:bc:
                    54:45:1e:c6:9a:aa:ca:a9:1e:03:10:1f:3e:ac:f1:
                    1a:a9:91:53:d0:ee:17:56:20:6e:59:ef:1a:a9:3a:
                    f8:f5:a7:ca:95:3b:44:a8:ac:36:c3:c3:29:ad:26:
                    4e:1a:c6:90:ca:11:0c:20:a2:33:2e:52:9e:03:6b:
                    17:64:e5:00:95:59:e2:70:5b:7e:ef:d8:41:22:8b:
                    c8:fc:55:5c:39:be:09:43:c7:c7:c9:ba:a7:03:89:
                    2f:f0:74:96:ed:44:c1:4c:54:4d:6e:78:06:2a:81:
                    ca:92:59:c5:fe:04:ec:a3:52:fb:4d:77:b6:27:0e:
                    e0:0e:3b:56:f7:58:bb:8b:dc:01:4b:de:a8:01:35:
                    87:47:01:bb:c9:56:8c:20:01:d1:45:e4:71:ac:c2:
                    b5:1a:5c:cb:65:26:38:2d:ab:da:f7:f0:11:79:87:
                    15:4c:94:f9:78:fc:b2:2a:04:8e:e2:75:3b:2e:22:
                    2c:25:1b:75:3c:b2:b7:81:24:8e:8e:82:c4:38:20:
                    39:e5:df:99:06:c5:c8:94:1a:91:83:44:92:0e:93:
                    6d:7f:a4:ce:f6:ed:a7:c4:50:4d:98:9c:d9:2b:80:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FE:AD:20:D9:3A:3C:84:7B:ED:B6:8E:48:5A:D9:F5:15:07:DA:88
            X509v3 Authority Key Identifier:
                keyid:F2:7F:97:DD:E3:2D:8C:91:FD:89:D5:F3:01:08:BB:0E:32:19:4A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/34352e3138392e34342e302f32322d3332203d3e20323639353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:e3:f2:47:42:39:c8:15:67:4b:f3:bf:70:97:0d:84:f1:56:
         61:aa:bd:9e:4d:8d:09:ee:51:34:af:0b:1c:fe:58:44:04:ed:
         69:ce:40:3d:ab:fd:80:c6:ce:20:37:c4:ed:5e:33:25:92:be:
         cd:d5:32:5e:1d:38:bf:a1:e9:ff:3c:09:16:8a:e3:09:d5:84:
         56:ee:3f:7a:56:64:c0:fa:a6:04:22:fd:f5:ca:ff:86:20:0e:
         31:f5:b6:a0:d3:09:12:e2:31:82:b7:ab:f9:55:94:0f:f0:85:
         47:d5:9b:d6:10:11:95:00:ca:ab:4b:0a:81:7f:87:49:f7:97:
         98:42:4e:32:82:86:27:1b:fe:af:6c:33:96:2d:3c:88:9a:6e:
         f0:6e:8c:6b:25:9e:9a:31:2e:b4:73:a5:50:2a:b2:1e:24:ea:
         69:e3:38:08:aa:1c:ce:ad:1d:8c:64:f4:fc:f6:31:bc:85:e5:
         21:07:1a:76:04:88:99:d5:05:b1:94:e9:d1:d0:22:2d:cd:6c:
         b8:9b:24:c4:a3:c2:f0:31:e9:8a:1f:94:98:6c:1d:93:9f:72:
         72:d6:1c:5a:a1:ab:dc:26:6b:0c:19:7b:08:77:e9:13:73:af:
         80:c1:9c:c0:39:83:11:de:0b:31:2e:98:48:7b:06:a8:24:ff:
         83:d8:4d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:36:41 2025 by rpki-client