Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/34352e3137362e3231382e302f32342d3234203d3e20323638393534.roa
File:                     34352e3137362e3231382e302f32342d3234203d3e20323638393534.roa (raw, json)
Hash identifier:          X9EqGMexEsZYRHX1DeZtwUzUnWddTl91pwxnlVo5oX4=
Subject key identifier:   F8:E2:03:C8:A8:7E:12:AE:1C:F2:93:46:56:EC:18:9D:A3:90:C2:D5
Certificate issuer:       /CN=FF0BEEF86816A988DAE50E54112CB228061C7D50
Certificate serial:       1410E5CF9DD1EB900F93826A0BA950485D564004
Authority key identifier: FF:0B:EE:F8:68:16:A9:88:DA:E5:0E:54:11:2C:B2:28:06:1C:7D:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0BEEF86816A988DAE50E54112CB228061C7D50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/34352e3137362e3231382e302f32342d3234203d3e20323638393534.roa
Signing time:             Wed 05 Nov 2025 11:37:06 +0000
ROA not before:           Wed 05 Nov 2025 11:32:06 +0000
ROA not after:            Wed 04 Nov 2026 11:37:06 +0000
asID:                     268954
IP address blocks:        45.176.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/FF0BEEF86816A988DAE50E54112CB228061C7D50.crl
                          rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/FF0BEEF86816A988DAE50E54112CB228061C7D50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0BEEF86816A988DAE50E54112CB228061C7D50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 19:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:10:e5:cf:9d:d1:eb:90:0f:93:82:6a:0b:a9:50:48:5d:56:40:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF0BEEF86816A988DAE50E54112CB228061C7D50
        Validity
            Not Before: Nov  5 11:32:06 2025 GMT
            Not After : Nov  4 11:37:06 2026 GMT
        Subject: CN=F8E203C8A87E12AE1CF2934656EC189DA390C2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:aa:1e:60:2a:45:33:8b:ad:af:97:75:98:
                    9c:86:b2:dd:a9:f9:62:67:7e:80:2d:f4:65:e8:8d:
                    37:00:70:33:57:92:cb:f3:e0:2d:9c:54:dc:21:45:
                    37:f9:53:7b:ab:6e:ad:0b:fb:7f:70:90:c7:a7:38:
                    dd:c6:a1:00:46:7a:b8:3d:89:65:b7:f3:fe:58:de:
                    3e:c5:94:d7:9f:87:d6:3c:b7:45:26:45:3e:b7:fc:
                    a4:4c:00:1a:e4:70:ab:fc:6d:57:41:ee:ae:a7:61:
                    6f:8a:9a:7b:98:fd:fc:74:ee:5c:92:8a:cf:02:58:
                    eb:bc:48:60:b5:9b:fe:20:6a:0f:16:71:09:6a:ca:
                    f9:5f:22:5c:2f:8e:8a:eb:58:7a:2e:5f:07:36:5b:
                    50:61:8b:02:11:ee:30:ed:13:94:84:52:5e:48:06:
                    85:48:56:12:88:5d:d0:83:37:e2:30:37:aa:47:56:
                    33:05:66:fd:4e:08:d9:58:82:8c:5b:54:4e:c1:4e:
                    31:2b:b4:3a:da:86:e7:44:20:75:48:a9:42:89:0e:
                    d5:db:02:49:8d:b4:bc:8d:0e:8a:3c:b5:e5:83:df:
                    08:98:ec:c5:1b:ac:46:9d:dd:e5:b3:f6:d4:9b:d1:
                    5f:8f:86:9d:38:85:50:88:fe:07:dd:fb:75:ed:7f:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E2:03:C8:A8:7E:12:AE:1C:F2:93:46:56:EC:18:9D:A3:90:C2:D5
            X509v3 Authority Key Identifier:
                keyid:FF:0B:EE:F8:68:16:A9:88:DA:E5:0E:54:11:2C:B2:28:06:1C:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/FF0BEEF86816A988DAE50E54112CB228061C7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0BEEF86816A988DAE50E54112CB228061C7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/34352e3137362e3231382e302f32342d3234203d3e20323638393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ff:54:e9:a6:c4:b5:7e:ac:f6:38:39:64:dc:d3:2e:5b:fc:
         b7:2e:71:94:8a:c7:5e:bb:1a:3a:57:aa:bd:22:26:59:42:2c:
         0a:58:f6:ae:78:47:ed:2a:12:db:02:16:91:e4:40:20:d4:05:
         f4:4b:a8:00:c3:46:19:9c:bd:2c:9b:45:0f:b1:a8:a1:e7:e0:
         3e:d2:56:9e:40:bd:35:39:2a:52:1e:56:44:8d:d6:4a:6c:7a:
         7e:ef:a1:ea:d1:ee:72:42:d9:30:c0:24:46:c4:e0:be:3f:39:
         cc:3a:3d:91:4b:ae:b8:9c:d6:bd:9a:21:ca:59:ec:48:c2:92:
         a6:13:ce:ab:77:5c:b0:21:98:df:0d:e7:98:ae:84:6d:cf:18:
         a2:c1:ff:00:ab:b9:88:f0:02:31:e8:54:4d:ef:e5:7f:33:47:
         28:08:ab:56:91:a3:5e:db:a9:dc:5d:15:af:00:95:c8:f6:78:
         2b:e7:97:76:88:7f:4c:5a:e3:2d:c4:4f:8d:a7:cb:3e:85:48:
         cf:e4:8b:db:31:18:26:11:a8:5b:b0:6e:d1:cb:44:92:39:d1:
         81:e6:8e:49:6b:b8:1c:8e:8f:8d:e8:7b:f8:4d:5f:15:56:4c:
         60:fb:3e:d8:ba:d6:64:19:40:32:b8:8d:ea:f1:3d:ec:f5:c0:
         24:72:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:32:05 2025 by rpki-client