Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhuTddBwDs7ffBHAwyjTZV7uQ12R2jYfBbd71fmU7Nrm/0/34352e3136352e32352e302f32342d3332203d3e20323638363634.roa
File:                     34352e3136352e32352e302f32342d3332203d3e20323638363634.roa (raw, json)
Hash identifier:          V7HFKyVn6lQj2ZnJDDPJvbB+NWN7xMS8oiT26C2QZjk=
Subject key identifier:   3B:17:32:A5:E9:D2:F5:D5:E4:37:61:44:86:DF:06:CA:DF:0E:05:B2
Certificate issuer:       /CN=D55E674215EE542E9D4827F104BC0D0E56C73788
Certificate serial:       444F75099423B5A4197D512B49DDE1A8E5748900
Authority key identifier: D5:5E:67:42:15:EE:54:2E:9D:48:27:F1:04:BC:0D:0E:56:C7:37:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55E674215EE542E9D4827F104BC0D0E56C73788.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhuTddBwDs7ffBHAwyjTZV7uQ12R2jYfBbd71fmU7Nrm/0/34352e3136352e32352e302f32342d3332203d3e20323638363634.roa
Signing time:             Tue 21 Oct 2025 23:35:41 +0000
ROA not before:           Tue 21 Oct 2025 23:30:41 +0000
ROA not after:            Tue 20 Oct 2026 23:35:41 +0000
asID:                     268664
IP address blocks:        45.165.25.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhuTddBwDs7ffBHAwyjTZV7uQ12R2jYfBbd71fmU7Nrm/0/D55E674215EE542E9D4827F104BC0D0E56C73788.crl
                          rsync://rpki-repo.registro.br/repo/HhuTddBwDs7ffBHAwyjTZV7uQ12R2jYfBbd71fmU7Nrm/0/D55E674215EE542E9D4827F104BC0D0E56C73788.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55E674215EE542E9D4827F104BC0D0E56C73788.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4f:75:09:94:23:b5:a4:19:7d:51:2b:49:dd:e1:a8:e5:74:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55E674215EE542E9D4827F104BC0D0E56C73788
        Validity
            Not Before: Oct 21 23:30:41 2025 GMT
            Not After : Oct 20 23:35:41 2026 GMT
        Subject: CN=3B1732A5E9D2F5D5E437614486DF06CADF0E05B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:0f:31:c2:e5:a4:cd:78:91:74:43:4d:3d:
                    33:a7:c6:97:ba:00:9a:b1:17:f3:5e:22:26:ad:56:
                    c7:d0:db:ac:39:ef:8e:7c:13:be:bd:ca:a1:7f:4c:
                    cf:6b:d8:00:e0:8e:35:20:b8:e3:93:d6:53:56:7a:
                    2e:92:60:58:3c:e4:04:40:e2:09:36:33:e7:44:04:
                    7a:ff:be:e6:6f:88:b7:f7:26:11:39:a7:24:6f:24:
                    41:57:79:c6:6a:db:21:0e:5d:50:29:86:98:16:61:
                    02:78:e1:a9:1c:1d:26:e6:94:87:fb:18:76:95:de:
                    1f:88:5a:48:23:05:d9:c7:39:ea:4a:bc:50:21:11:
                    0a:ef:4a:2b:ca:69:9b:a2:8d:e7:d9:04:98:d9:74:
                    6c:0d:bc:92:78:e0:89:e6:4b:ed:25:e4:2e:4c:24:
                    5d:83:6a:eb:e1:ad:cb:0b:78:f6:62:a7:79:54:58:
                    64:d4:c8:fe:ce:95:40:f8:29:2a:91:af:ec:45:01:
                    b0:ac:60:8c:13:38:c8:c4:1b:75:f6:a0:07:33:51:
                    68:5c:b5:b9:cd:3b:75:5f:a7:d1:17:b7:39:01:ac:
                    64:19:4f:10:7e:13:69:18:d0:08:73:1c:97:7f:17:
                    3c:2a:7a:c8:b8:37:f0:38:9e:65:b4:dc:26:44:b8:
                    75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:17:32:A5:E9:D2:F5:D5:E4:37:61:44:86:DF:06:CA:DF:0E:05:B2
            X509v3 Authority Key Identifier:
                keyid:D5:5E:67:42:15:EE:54:2E:9D:48:27:F1:04:BC:0D:0E:56:C7:37:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhuTddBwDs7ffBHAwyjTZV7uQ12R2jYfBbd71fmU7Nrm/0/D55E674215EE542E9D4827F104BC0D0E56C73788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55E674215EE542E9D4827F104BC0D0E56C73788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhuTddBwDs7ffBHAwyjTZV7uQ12R2jYfBbd71fmU7Nrm/0/34352e3136352e32352e302f32342d3332203d3e20323638363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:cf:ca:e2:8f:56:11:30:ff:0b:82:9e:ac:80:42:55:c8:a8:
         47:d0:25:89:db:cb:8a:10:51:12:57:8c:16:d1:6c:fc:fe:4a:
         0b:80:b9:1b:9e:b4:70:e2:06:e1:80:1d:99:32:af:fc:9c:92:
         e5:ec:de:25:d8:b8:a2:07:ca:15:23:a2:f5:08:e0:bf:92:6f:
         f9:b1:0e:c9:4c:14:7f:46:a1:83:9a:c2:2f:3b:f2:8f:bb:e9:
         1c:de:a0:db:a6:2a:a3:ca:47:93:13:27:78:87:aa:65:7b:29:
         5d:cb:bb:b0:59:6a:cd:b3:e4:8d:c5:ae:77:2d:0b:e1:5e:14:
         8f:f4:f9:25:eb:88:e7:54:51:9c:16:9f:3d:5e:40:0d:9e:13:
         09:d2:2a:71:cf:84:5e:f1:e4:ec:bc:0a:51:07:c9:f3:80:40:
         6b:62:bb:02:3b:67:6f:e8:04:0d:5c:c1:59:90:7b:4d:64:ff:
         bd:df:fb:2f:c6:ae:b0:60:45:7d:79:f2:ca:85:64:6b:10:52:
         01:67:a1:55:58:9b:ce:48:41:e8:e3:62:00:bd:04:c0:c2:bb:
         83:1d:d1:c8:ac:6c:c6:bd:aa:35:a0:ae:34:b2:3d:75:bc:47:
         a2:c8:a8:1c:b9:10:31:e8:f6:9a:ad:4c:ca:09:80:d5:33:5b:
         1e:bf:90:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:35:08 2025 by rpki-client