Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/34352e3138382e3132302e302f32322d3332203d3e203533303035.roa
File:                     34352e3138382e3132302e302f32322d3332203d3e203533303035.roa (raw, json)
Hash identifier:          HzUuZYq1WN2de0h/TzWG2VIrJ7aabikiyxG898vUfG4=
Subject key identifier:   E6:E7:5C:2B:5B:97:2E:4D:BB:04:A5:61:D1:A2:BF:50:B6:DE:65:42
Certificate issuer:       /CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
Certificate serial:       0DF56310182D769BE4C4CC04E389E30404E8752F
Authority key identifier: E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/34352e3138382e3132302e302f32322d3332203d3e203533303035.roa
Signing time:             Fri 31 Oct 2025 14:17:26 +0000
ROA not before:           Fri 31 Oct 2025 14:12:26 +0000
ROA not after:            Fri 30 Oct 2026 14:17:26 +0000
asID:                     53005
IP address blocks:        45.188.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl
                          rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 08:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f5:63:10:18:2d:76:9b:e4:c4:cc:04:e3:89:e3:04:04:e8:75:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
        Validity
            Not Before: Oct 31 14:12:26 2025 GMT
            Not After : Oct 30 14:17:26 2026 GMT
        Subject: CN=E6E75C2B5B972E4DBB04A561D1A2BF50B6DE6542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:71:f3:13:f6:b6:31:1f:87:52:ca:68:50:
                    1f:2a:bd:fc:1d:58:e7:f7:46:f9:0b:f7:14:fa:6c:
                    75:83:8d:90:38:ed:88:99:85:f8:55:b4:cd:a1:3e:
                    ce:6b:26:07:11:e4:fb:a6:1e:f4:7a:fa:ac:b6:a9:
                    08:a1:64:2b:af:54:2b:df:c5:bf:c4:b3:37:a6:d8:
                    33:ff:43:96:b5:35:85:53:77:77:6a:59:4a:9f:6c:
                    41:55:11:ce:6a:22:4d:59:0e:1b:24:73:d3:43:21:
                    44:13:35:ea:04:8f:26:52:98:ab:4c:e4:8e:7e:a4:
                    0b:4a:01:2f:48:a5:b4:86:f0:90:4d:09:56:8d:be:
                    24:d4:22:87:48:ee:68:f2:f0:78:62:f1:9b:47:2a:
                    22:f1:27:95:f6:ba:a8:a8:9f:e2:5b:1a:69:40:55:
                    e9:ba:7d:85:9c:3b:98:15:fe:65:7c:59:ce:5b:66:
                    74:70:cf:9c:aa:cc:d4:dd:02:33:af:25:e6:9b:ae:
                    a7:6c:b4:33:d9:f4:ef:7c:58:80:53:01:bb:f8:e9:
                    bb:56:ef:b7:83:35:c3:5a:6f:15:bd:06:6e:de:1d:
                    66:24:b1:0f:39:b1:56:36:ed:fe:b5:d7:b0:9b:07:
                    22:79:da:86:8a:99:1d:4a:5c:c6:c0:55:a4:99:b5:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E7:5C:2B:5B:97:2E:4D:BB:04:A5:61:D1:A2:BF:50:B6:DE:65:42
            X509v3 Authority Key Identifier:
                keyid:E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/34352e3138382e3132302e302f32322d3332203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:44:d4:13:ca:62:86:fc:55:32:7f:69:31:fb:39:1c:f6:7d:
         da:1f:9e:f9:4b:6e:c5:f4:58:f9:3f:2f:b1:3f:40:9d:cd:0e:
         1a:97:29:be:e8:71:a0:40:55:c7:29:c5:0c:25:30:9c:db:87:
         52:98:c8:74:b4:12:20:b3:b8:12:08:1f:4c:fc:0d:a6:de:39:
         52:d7:5a:51:a4:40:be:8c:81:7f:3c:bb:c6:26:a0:4c:1c:59:
         a8:9c:73:07:40:72:02:2b:80:de:49:3c:4a:99:a3:b7:51:a2:
         7a:16:b4:d4:5a:56:3f:5f:af:43:2b:0d:30:82:ae:54:9d:57:
         a0:b1:57:3d:f3:47:2d:a1:08:4b:a2:92:68:54:45:c2:e8:82:
         d7:df:c5:28:c5:a7:d3:73:09:b3:b3:9d:4d:af:67:4e:be:cf:
         dd:09:08:68:87:75:1b:ca:57:92:df:e5:9d:e8:c8:ed:2f:42:
         cf:bb:58:70:35:68:92:fa:6b:88:5b:d1:73:3d:28:80:38:26:
         cc:54:68:1a:65:67:27:d7:cb:37:50:04:0c:e5:53:d2:f8:05:
         fd:6d:f4:31:d1:83:ae:f8:05:ff:cf:ba:7f:95:dc:7b:b1:66:
         d4:df:13:7c:72:72:83:52:50:3f:39:70:eb:4d:20:53:35:0a:
         19:a0:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:21:21 2025 by rpki-client