Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/34352e372e3135322e302f32322d3332203d3e20323636353933.roa
File:                     34352e372e3135322e302f32322d3332203d3e20323636353933.roa (raw, json)
Hash identifier:          Og2f/8dn0pkXb6hU3XgHXQ/m2prHVa/iV42xbgRYR34=
Subject key identifier:   04:64:39:E1:B2:8E:85:8F:6B:EC:03:CF:87:6B:B1:64:57:E8:1B:94
Certificate issuer:       /CN=A336F0307373D367E106ACE4C73B22A06BB50DDA
Certificate serial:       07E2CF3FEEF3AEB6EC64AFD70E3F18CAD09DA050
Authority key identifier: A3:36:F0:30:73:73:D3:67:E1:06:AC:E4:C7:3B:22:A0:6B:B5:0D:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A336F0307373D367E106ACE4C73B22A06BB50DDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/34352e372e3135322e302f32322d3332203d3e20323636353933.roa
Signing time:             Sat 27 Sep 2025 16:11:12 +0000
ROA not before:           Sat 27 Sep 2025 16:06:12 +0000
ROA not after:            Sat 26 Sep 2026 16:11:12 +0000
asID:                     266593
IP address blocks:        45.7.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/A336F0307373D367E106ACE4C73B22A06BB50DDA.crl
                          rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/A336F0307373D367E106ACE4C73B22A06BB50DDA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A336F0307373D367E106ACE4C73B22A06BB50DDA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 16:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e2:cf:3f:ee:f3:ae:b6:ec:64:af:d7:0e:3f:18:ca:d0:9d:a0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A336F0307373D367E106ACE4C73B22A06BB50DDA
        Validity
            Not Before: Sep 27 16:06:12 2025 GMT
            Not After : Sep 26 16:11:12 2026 GMT
        Subject: CN=046439E1B28E858F6BEC03CF876BB16457E81B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:bd:ce:96:1a:b7:ab:4d:34:cf:ca:11:69:
                    3e:93:f4:82:d0:9f:a6:70:53:e3:66:13:7b:aa:b1:
                    24:61:bf:92:b1:d1:71:18:d7:a4:e2:44:9e:7f:a9:
                    b1:3d:4b:5a:dd:28:12:1a:a6:aa:8e:92:54:4f:a1:
                    d7:f0:7a:f0:26:bb:e5:71:0f:53:c3:7d:35:45:58:
                    9d:17:26:94:4d:ef:14:33:06:3d:87:a3:4f:e7:48:
                    27:09:66:da:7c:0c:05:9c:8c:11:a1:3a:88:4e:73:
                    ee:b2:84:07:b5:57:40:6b:3c:a6:98:fa:96:3e:75:
                    5c:7c:e9:25:c6:d4:40:50:f8:d7:4b:de:6c:28:71:
                    bf:b2:33:cd:87:4a:e0:b6:af:ee:2b:75:2b:43:b9:
                    06:52:98:8d:77:d6:e1:87:d3:22:3f:d2:7d:3c:fe:
                    10:7b:11:5a:ec:e9:25:8b:77:f0:d8:4c:c0:41:27:
                    89:f8:83:e5:a5:1f:25:ba:4e:7b:97:70:05:de:dd:
                    71:5f:e8:97:cd:56:d4:9b:d9:f7:85:f0:29:28:11:
                    6a:b1:e7:b3:e7:6f:b0:53:36:ce:d8:9b:32:10:7e:
                    5d:87:f9:3b:65:ff:11:c8:f5:90:22:e1:04:b7:19:
                    ae:f5:e5:d5:d8:47:e1:cc:0d:3c:01:3a:85:23:43:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:64:39:E1:B2:8E:85:8F:6B:EC:03:CF:87:6B:B1:64:57:E8:1B:94
            X509v3 Authority Key Identifier:
                keyid:A3:36:F0:30:73:73:D3:67:E1:06:AC:E4:C7:3B:22:A0:6B:B5:0D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/A336F0307373D367E106ACE4C73B22A06BB50DDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A336F0307373D367E106ACE4C73B22A06BB50DDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/34352e372e3135322e302f32322d3332203d3e20323636353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:c1:2d:d5:ba:2c:9c:c6:c2:71:4b:a7:63:81:f2:2a:5f:11:
         74:78:82:0a:93:9d:1f:1a:dc:59:3e:95:7a:d9:bc:89:87:70:
         fc:31:f4:b1:7c:f1:ac:40:93:3b:f6:a9:f5:d3:53:07:75:e8:
         86:b3:16:68:72:2a:3f:40:a1:05:32:48:61:20:50:32:15:50:
         b2:61:e6:db:73:b2:f2:de:1e:43:26:f5:1a:d5:be:55:4b:9f:
         e5:d4:18:ae:5f:3d:3b:62:46:a4:cb:c4:90:24:19:87:fd:20:
         bf:e4:c8:a4:46:64:eb:7c:4e:f1:13:85:62:89:e2:49:20:d0:
         6e:7a:85:35:e7:b7:1d:61:fb:6c:9f:fc:46:42:42:45:de:8f:
         c2:49:41:fd:6e:ac:bc:32:c3:1c:4d:15:52:4b:8e:86:53:e5:
         dd:1e:e8:6e:8f:6e:07:c3:a8:40:63:08:83:71:ab:ef:d1:23:
         bd:c7:10:83:38:4a:99:aa:13:45:fd:1d:22:50:6c:66:e7:0d:
         71:69:f4:4d:9a:c6:26:d6:01:80:39:5d:3d:55:97:d0:29:14:
         66:c1:8b:1c:dd:24:e7:2d:c9:41:b0:24:90:15:9b:a4:f1:e6:
         09:1e:52:18:d7:0e:c5:c1:69:02:00:54:ae:2b:02:a7:a1:b0:
         d6:73:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:16:20 2025 by rpki-client