Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/34352e3138372e3133362e302f32322d3332203d3e20323633343935.roa
File:                     34352e3138372e3133362e302f32322d3332203d3e20323633343935.roa (raw, json)
Hash identifier:          5+XifBwmtLaxgxPNk24Mw53jD9cQeXM5iNuXn7nfl3g=
Subject key identifier:   FE:21:7E:77:CB:C7:B7:E3:30:AB:B5:EF:9A:7D:29:7A:7F:C2:E4:1C
Certificate issuer:       /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
Certificate serial:       6663B735CD9E82698DF2881F744643778735F477
Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/34352e3138372e3133362e302f32322d3332203d3e20323633343935.roa
Signing time:             Thu 23 Oct 2025 19:17:30 +0000
ROA not before:           Thu 23 Oct 2025 19:12:30 +0000
ROA not after:            Thu 22 Oct 2026 19:17:30 +0000
asID:                     263495
IP address blocks:        45.187.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl
                          rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:63:b7:35:cd:9e:82:69:8d:f2:88:1f:74:46:43:77:87:35:f4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
        Validity
            Not Before: Oct 23 19:12:30 2025 GMT
            Not After : Oct 22 19:17:30 2026 GMT
        Subject: CN=FE217E77CBC7B7E330ABB5EF9A7D297A7FC2E41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:50:ca:aa:5e:f7:68:a0:86:66:36:80:d9:
                    12:2b:d8:ca:b3:86:6a:52:4e:f3:74:a2:7a:33:d3:
                    fe:ed:76:24:bd:c4:bc:32:f4:31:78:4a:b1:f4:e8:
                    23:85:21:70:92:83:5b:5a:d7:7f:d2:ec:82:31:29:
                    a6:ec:4e:cb:2c:65:5f:14:a8:d3:b3:37:b5:82:32:
                    da:ca:42:b4:f5:4d:82:23:05:25:69:3e:42:f8:0e:
                    d0:b3:a0:2c:e4:1c:bd:5a:8a:f9:f9:4f:e7:9d:4a:
                    f0:e7:d5:80:6e:52:07:3e:0a:62:5e:f1:d3:d0:9d:
                    52:13:9f:b3:35:97:48:10:65:e8:aa:de:44:67:58:
                    52:3a:a6:73:21:c2:57:d4:eb:b3:21:02:1e:81:b8:
                    01:58:41:87:ca:e7:5d:d2:57:c0:95:ab:6f:8a:8d:
                    aa:a6:17:06:f2:27:9c:f5:f8:9b:e7:51:b6:84:83:
                    e7:25:d1:69:d2:d2:e9:57:fb:fb:b9:ae:e0:bb:d2:
                    05:ad:77:a5:43:60:ac:b8:ca:90:fe:9b:ae:67:87:
                    49:44:06:cb:38:3d:01:1e:5c:e5:70:c2:0d:2a:fe:
                    e0:50:a8:c9:0b:42:5f:5a:4c:7a:fe:0c:2e:eb:61:
                    9a:5f:4e:88:df:b6:97:cd:86:e8:89:8f:c2:06:d5:
                    bf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:21:7E:77:CB:C7:B7:E3:30:AB:B5:EF:9A:7D:29:7A:7F:C2:E4:1C
            X509v3 Authority Key Identifier:
                keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/34352e3138372e3133362e302f32322d3332203d3e20323633343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:56:17:fb:c3:b0:89:7e:1a:8e:52:b8:0c:eb:ce:0f:e0:bc:
         3b:ca:24:d2:28:1a:03:6f:3c:ee:a9:12:02:7e:d3:b4:67:02:
         29:ce:9d:81:f9:5f:fb:96:1e:93:f5:e0:c0:9f:43:83:4b:e8:
         a8:42:01:a9:e9:84:b3:c4:89:e0:c7:db:30:63:05:c6:21:4e:
         10:7e:46:91:a3:6e:81:93:52:1f:75:73:91:8a:0a:38:e2:2b:
         cf:5e:0c:25:ea:89:9d:84:f3:f3:d3:b3:2a:5c:70:93:8a:0b:
         76:ec:ac:cb:0f:a2:e0:21:6e:e6:5e:f2:bc:ae:f6:2a:6b:64:
         1b:17:0d:b3:ee:8c:c6:fc:87:b6:d3:07:56:89:e6:3e:d4:f8:
         05:b1:a2:e1:30:ab:3d:4f:a4:26:bc:df:82:99:3c:f7:cb:ec:
         a6:b8:d7:a2:85:86:88:57:b1:7e:8a:07:47:a4:fb:fa:1f:36:
         92:a0:2e:f6:58:74:02:aa:66:66:5f:0c:a9:3d:3d:14:42:1c:
         61:24:35:77:1e:48:ae:0b:0a:21:f8:81:40:98:9c:ff:43:a4:
         b1:73:84:48:bf:af:05:6a:21:57:9e:ae:62:58:4e:bd:e1:93:
         88:b9:c5:17:06:05:29:fc:57:ec:e0:3c:a6:89:af:eb:eb:79:
         ea:af:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:51:33 2025 by rpki-client