Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33342e302f32342d3234203d3e20323634353530.roa
File:                     3137302e302e33342e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          NfY/MKou3LhTHndIzh+LlK0+2I0J51Yk4WudkYzZ8B0=
Subject key identifier:   97:9D:7B:DE:03:74:0F:F5:5C:61:BD:7E:56:59:FE:33:95:64:CF:73
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       763DE6291E5FB35116F74C482B0F42E2D4048770
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33342e302f32342d3234203d3e20323634353530.roa
Signing time:             Tue 23 Sep 2025 00:04:54 +0000
ROA not before:           Mon 22 Sep 2025 23:59:54 +0000
ROA not after:            Tue 22 Sep 2026 00:04:54 +0000
asID:                     264550
IP address blocks:        170.0.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3d:e6:29:1e:5f:b3:51:16:f7:4c:48:2b:0f:42:e2:d4:04:87:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Sep 22 23:59:54 2025 GMT
            Not After : Sep 22 00:04:54 2026 GMT
        Subject: CN=979D7BDE03740FF55C61BD7E5659FE339564CF73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:e0:22:a8:86:ac:c2:ad:2b:0f:dd:eb:17:
                    38:c3:8b:6a:31:3c:51:67:f6:8f:49:53:4a:dd:f9:
                    31:94:21:f3:f5:bb:3e:ba:73:45:dc:29:04:f7:cb:
                    00:c2:c0:8c:19:9e:c2:26:67:67:a6:0a:e9:fd:ee:
                    ea:a0:7a:bc:b9:63:6b:5b:f1:5f:08:11:bd:48:e9:
                    73:bb:14:8c:09:95:11:aa:c2:16:3f:75:06:a6:ed:
                    51:1c:dd:9f:75:aa:55:3d:7c:8e:5c:ed:06:aa:65:
                    28:60:ae:61:c0:6e:8b:cd:07:21:47:cb:be:a9:9f:
                    c4:0f:1c:b7:20:31:c7:1a:c7:0d:6f:ba:55:0f:76:
                    69:14:5c:ef:35:2d:e0:c3:b3:0b:65:19:83:cf:cc:
                    7e:8e:50:f2:db:9c:5e:f4:8f:0b:05:e7:ed:cb:31:
                    71:29:03:f9:08:e4:7e:a2:5f:3e:e5:80:00:7a:18:
                    e6:86:e8:94:f9:f2:5a:97:9a:85:b0:f7:60:47:5c:
                    46:8a:42:b9:e5:9d:4c:20:7f:b4:3a:75:6c:70:17:
                    07:ab:1e:31:8e:67:47:6a:d6:59:10:18:10:45:c8:
                    da:1c:85:d7:df:85:38:55:2c:dd:8b:54:b9:6a:d6:
                    32:f3:38:6d:66:d0:32:08:bf:92:e7:15:20:eb:e3:
                    a6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9D:7B:DE:03:74:0F:F5:5C:61:BD:7E:56:59:FE:33:95:64:CF:73
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33342e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:8f:cf:20:f9:b9:55:21:88:3d:fa:8b:79:ee:8b:db:66:8b:
         04:4d:15:f4:3d:fc:08:10:24:77:d9:15:26:2f:fa:6c:fc:d2:
         da:15:b9:90:8f:94:17:d6:3f:4d:d8:93:63:b0:b0:f8:b6:63:
         83:5a:a0:6a:f0:34:75:08:55:41:80:ec:c7:df:d9:82:99:3c:
         46:52:94:12:5d:c3:67:2b:ea:a6:0a:d5:9e:e0:c0:c7:57:93:
         77:2f:2c:f6:1d:67:4d:31:5c:86:b2:27:c7:50:e6:bb:b8:6a:
         3e:2c:8c:54:a7:c5:3f:6b:6b:3b:0d:16:bd:31:95:d6:e9:f8:
         a1:3f:54:1a:31:51:d0:d4:77:08:46:7c:da:6b:d9:38:ac:f3:
         af:8b:46:e4:71:b5:f0:35:37:b9:13:f1:97:b8:29:fa:e0:51:
         dc:4c:70:ed:71:28:6d:78:11:9d:c3:87:b7:4f:82:5d:e7:a7:
         8b:66:49:08:70:ae:60:94:40:99:50:b5:ae:63:67:03:6c:86:
         67:78:30:b8:dd:b2:b2:66:e3:1d:75:db:68:ca:b6:35:a3:63:
         68:2a:9e:41:ac:e4:16:91:fc:c6:ce:dd:81:bc:cc:6e:dc:3b:
         d1:fe:d9:d5:2d:54:82:ec:cc:57:de:62:23:1a:6d:6d:7b:e2:
         9e:2a:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:32 2025 by rpki-client