Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233322e302f32322d3332203d3e20323636393634.roa
File:                     34352e3232352e3233322e302f32322d3332203d3e20323636393634.roa (raw, json)
Hash identifier:          IFF4egpbI/lP4ZhMwbVlolLPpyzn4ab2BQwDgFL7fnw=
Subject key identifier:   2F:39:4B:9F:E2:A0:10:60:6C:55:D8:FB:13:EE:1D:0D:07:D7:1D:76
Certificate issuer:       /CN=FBD3E36E99438BA7302F250CEE3673B235F797AC
Certificate serial:       7B4F28AB577BEF5AD01F7633A91E50C9914C3FB3
Authority key identifier: FB:D3:E3:6E:99:43:8B:A7:30:2F:25:0C:EE:36:73:B2:35:F7:97:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBD3E36E99438BA7302F250CEE3673B235F797AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233322e302f32322d3332203d3e20323636393634.roa
Signing time:             Fri 19 Sep 2025 12:54:47 +0000
ROA not before:           Fri 19 Sep 2025 12:49:47 +0000
ROA not after:            Fri 18 Sep 2026 12:54:47 +0000
asID:                     266964
IP address blocks:        45.225.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/FBD3E36E99438BA7302F250CEE3673B235F797AC.crl
                          rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/FBD3E36E99438BA7302F250CEE3673B235F797AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBD3E36E99438BA7302F250CEE3673B235F797AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 13:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4f:28:ab:57:7b:ef:5a:d0:1f:76:33:a9:1e:50:c9:91:4c:3f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD3E36E99438BA7302F250CEE3673B235F797AC
        Validity
            Not Before: Sep 19 12:49:47 2025 GMT
            Not After : Sep 18 12:54:47 2026 GMT
        Subject: CN=2F394B9FE2A010606C55D8FB13EE1D0D07D71D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:aa:75:24:7d:53:df:2d:25:11:96:41:2d:
                    da:f3:5c:4a:3a:ba:e3:21:5f:36:ad:c5:5c:8a:70:
                    6c:f0:e9:62:5e:d0:33:66:ad:de:d3:ad:bc:d6:33:
                    f6:96:84:0b:5b:05:fd:06:27:01:e5:f1:61:8f:ff:
                    f5:d4:e4:ee:fc:bc:22:18:fb:9d:23:1c:e6:94:23:
                    99:de:31:4f:0b:d3:f4:de:70:dc:0c:c5:85:98:09:
                    59:01:de:88:ac:52:2c:7b:13:cf:06:b9:47:c9:4c:
                    58:e7:f0:86:c4:25:8c:c8:ea:f9:db:44:2f:09:f3:
                    17:2e:f3:66:46:08:b4:55:18:51:f3:60:79:ba:ae:
                    86:ab:68:ab:54:be:13:dd:6d:36:d3:39:7a:cd:85:
                    c5:82:f1:46:54:18:49:39:0d:d9:33:cd:e9:36:8a:
                    b5:66:3f:7b:a7:d2:b9:f6:56:76:a1:29:ae:a4:bb:
                    ad:83:a6:85:66:f3:ee:bc:44:7b:0c:95:53:fa:bd:
                    32:d7:78:b1:00:26:58:da:5e:50:a5:0a:3b:e1:8b:
                    e1:6b:b9:26:98:d4:30:b5:4f:70:e6:26:05:26:2b:
                    1c:3b:29:16:fe:16:28:00:7f:20:f5:a5:7a:c2:e4:
                    4c:9b:dc:0a:82:e9:66:db:2b:c3:ef:7e:34:19:96:
                    3b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:39:4B:9F:E2:A0:10:60:6C:55:D8:FB:13:EE:1D:0D:07:D7:1D:76
            X509v3 Authority Key Identifier:
                keyid:FB:D3:E3:6E:99:43:8B:A7:30:2F:25:0C:EE:36:73:B2:35:F7:97:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/FBD3E36E99438BA7302F250CEE3673B235F797AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBD3E36E99438BA7302F250CEE3673B235F797AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233322e302f32322d3332203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:91:97:aa:7f:33:03:c9:e5:86:48:4a:4b:4f:92:7d:f4:10:
         63:7d:0e:48:dc:9e:9c:65:0d:da:79:d3:5e:4e:4e:6c:5c:23:
         6e:2a:c8:13:6d:79:44:a3:18:09:eb:a6:33:a6:fb:be:f2:6e:
         5e:74:6d:99:59:93:f9:50:d2:ca:b1:af:02:14:af:29:75:b6:
         5e:70:44:42:35:4b:a8:f0:50:50:b4:68:cf:24:5f:c9:1f:40:
         8c:24:25:bd:f0:29:b9:27:5b:8e:59:d4:75:58:46:d9:9c:1e:
         a0:3c:f1:42:aa:a8:2d:08:c9:14:e6:38:b8:8c:aa:a0:22:ce:
         96:c6:14:db:f9:01:42:e0:59:50:35:c7:a5:e7:86:a6:c3:9d:
         5d:a4:6e:82:f4:06:6d:d6:15:7e:7c:5c:27:7c:fc:9c:d4:15:
         ba:d7:7c:51:cf:51:f5:1b:fb:5f:0b:53:b0:da:6a:d5:0c:a2:
         8c:47:e7:22:1b:af:53:64:23:b2:6b:eb:1f:17:5d:af:2a:0c:
         5c:ac:d2:d1:3e:ec:d2:94:07:ed:aa:c5:82:71:ba:e8:aa:13:
         0b:ba:7a:87:ba:88:40:46:59:c3:a3:b2:84:b8:cb:a5:bd:fe:
         7e:b0:a4:1c:40:33:76:1d:1a:ec:eb:99:b6:7f:10:d8:06:f6:
         a3:93:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 23:13:09 2025 by rpki-client