Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139332e302f32342d3234203d3e20323636393438.roa
File:                     34352e3232352e3139332e302f32342d3234203d3e20323636393438.roa (raw, json)
Hash identifier:          wDDmrutUKWhwVbNPpfR2zb98vTSiIFhEziJNbD1iFpk=
Subject key identifier:   83:16:BA:EC:B4:8B:D1:A6:11:B7:B6:74:5D:97:96:37:A8:E3:7D:69
Certificate issuer:       /CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
Certificate serial:       665854C0B935BB7F0F2C02432B581F05229595ED
Authority key identifier: C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139332e302f32342d3234203d3e20323636393438.roa
Signing time:             Mon 08 Sep 2025 19:01:56 +0000
ROA not before:           Mon 08 Sep 2025 18:56:56 +0000
ROA not after:            Mon 07 Sep 2026 19:01:56 +0000
asID:                     266948
IP address blocks:        45.225.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl
                          rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 09:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:58:54:c0:b9:35:bb:7f:0f:2c:02:43:2b:58:1f:05:22:95:95:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
        Validity
            Not Before: Sep  8 18:56:56 2025 GMT
            Not After : Sep  7 19:01:56 2026 GMT
        Subject: CN=8316BAECB48BD1A611B7B6745D979637A8E37D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:de:fe:1e:e2:81:ef:7f:e5:ad:21:3a:41:
                    f3:f0:4e:57:d4:3a:a7:11:a4:39:50:07:7d:61:b8:
                    e3:c0:df:46:b5:f8:f5:7b:2c:d6:a8:da:d1:ca:5e:
                    29:fe:87:f6:4d:52:c1:b5:60:f7:8a:33:01:48:c2:
                    62:30:70:d2:5d:f4:ae:98:19:e0:2d:e8:6c:f5:f3:
                    86:09:e5:a1:54:bc:4e:4c:5e:9b:c5:74:d4:cc:1e:
                    c2:8b:80:75:39:4b:91:aa:33:ef:5d:3b:d7:a0:0b:
                    6c:42:8a:a4:25:27:71:1f:b6:f1:2a:5e:f2:1d:96:
                    20:85:07:74:65:f8:20:d7:f8:cf:f6:26:3a:b9:22:
                    6b:26:ea:35:10:1a:05:cd:56:17:a5:83:cd:4c:b0:
                    5c:c7:7e:c4:52:7e:86:3f:cf:b2:f2:ad:9b:84:04:
                    9e:c2:71:57:1a:4e:c4:94:be:b3:55:4f:fb:76:16:
                    6f:05:80:0c:0c:2d:a5:bd:37:be:82:b9:d7:0c:72:
                    38:ae:2a:d0:15:73:45:85:1d:f5:13:59:c7:60:c6:
                    57:25:91:ea:a5:8b:27:e3:e5:35:1a:cb:87:1d:8a:
                    07:c9:7c:2e:32:89:ea:a4:95:38:75:4b:4d:b7:8f:
                    0f:0c:d0:c2:c8:90:86:5f:e8:60:ad:48:59:99:c9:
                    e8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:16:BA:EC:B4:8B:D1:A6:11:B7:B6:74:5D:97:96:37:A8:E3:7D:69
            X509v3 Authority Key Identifier:
                keyid:C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139332e302f32342d3234203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:bb:6e:73:52:66:d2:a5:c6:34:2a:64:63:14:98:0b:a6:07:
         c6:e8:7b:36:d0:46:2b:fd:eb:fd:7f:ed:0b:a5:17:5e:40:a0:
         a4:51:12:64:5f:3d:8e:58:86:fd:30:cd:59:6b:b7:88:56:ed:
         9c:ea:47:73:18:cc:d1:60:e0:02:cb:08:e8:63:d6:e7:bc:83:
         8c:ed:06:12:6a:d4:9d:9f:c2:6f:4e:34:8a:69:e3:72:86:b7:
         14:e6:09:3a:78:71:42:92:2b:c3:bc:d8:bd:7a:03:d6:1b:fd:
         ca:a6:f0:f8:7c:d6:3f:6f:f1:3c:db:40:76:48:cd:cc:63:75:
         e3:24:98:7e:03:20:af:5d:e2:0f:90:ca:13:90:46:36:4c:be:
         75:e3:20:8a:06:13:9a:03:c7:31:f0:5a:8d:ac:43:69:41:69:
         cc:a3:a0:e1:fb:7b:cc:3d:cf:52:a2:37:44:c9:f6:7c:5e:25:
         38:f9:82:07:fe:e5:ba:a1:6c:4b:6b:f9:f3:fe:96:dc:f5:e1:
         eb:c7:fc:12:52:95:47:7e:fe:bc:ae:c2:68:3d:5d:c9:8e:2e:
         b7:6e:d2:b7:77:90:62:8c:8e:e0:13:04:a2:96:f3:92:3b:a9:
         02:0e:be:d9:05:82:b4:03:f2:a4:b8:89:be:9c:ba:b5:df:55:
         55:cc:32:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:06:29 2025 by rpki-client