Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33342e302f32342d3235203d3e20323634353530.roa
File:                     3137302e302e33342e302f32342d3235203d3e20323634353530.roa (raw, json)
Hash identifier:          8psl5H5lC9whj8NN4Mm3oR8SlrgPiDMp1RgsT0usA4Q=
Subject key identifier:   01:A2:30:A6:74:72:94:5E:66:53:6F:8F:5E:C6:F5:0B:89:F4:2C:9C
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       1F81C4FC314B9B7FA3B5B45B0CA462A6452D9D27
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33342e302f32342d3235203d3e20323634353530.roa
Signing time:             Tue 23 Sep 2025 15:19:41 +0000
ROA not before:           Tue 23 Sep 2025 15:14:41 +0000
ROA not after:            Tue 22 Sep 2026 15:19:41 +0000
asID:                     264550
IP address blocks:        170.0.34.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:81:c4:fc:31:4b:9b:7f:a3:b5:b4:5b:0c:a4:62:a6:45:2d:9d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Sep 23 15:14:41 2025 GMT
            Not After : Sep 22 15:19:41 2026 GMT
        Subject: CN=01A230A67472945E66536F8F5EC6F50B89F42C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:54:4d:62:f8:bb:6b:37:b7:95:e3:b3:2b:
                    40:e1:7c:59:8f:e0:31:14:96:76:91:5a:f2:ca:0c:
                    e0:69:4c:46:ad:59:0c:cc:84:43:41:4a:76:d7:be:
                    be:81:37:88:45:d7:5c:c0:54:58:99:c5:e1:31:a5:
                    80:6f:77:67:97:be:d8:ff:72:ff:ff:0b:a2:88:1f:
                    81:93:74:3b:ad:cf:f2:37:e4:ea:3f:ce:d3:f9:32:
                    43:d7:e8:e4:10:dd:29:06:4f:19:55:27:e1:ad:f3:
                    a8:08:94:06:b4:b7:95:54:f0:79:b3:cf:50:93:38:
                    6e:d9:41:e8:4a:d8:51:c8:4f:7e:f3:29:84:ac:0c:
                    da:df:5b:38:bb:0f:0a:7f:51:a1:34:4e:ec:eb:f3:
                    6b:05:cd:5b:ba:bb:23:e1:6a:f6:95:4d:15:dc:86:
                    95:e9:13:c8:09:f1:e0:6b:f0:7a:f5:36:9a:c0:13:
                    2b:fc:e5:97:96:4e:21:06:c1:65:14:3f:3d:03:62:
                    5c:77:cf:f1:1b:26:f5:60:f7:11:d7:79:89:88:2f:
                    7b:89:74:ba:56:70:ef:cd:75:75:c8:7d:04:28:97:
                    83:b7:f2:f8:1b:3f:c8:7e:b9:80:71:dc:09:59:e2:
                    4a:5a:f0:95:9a:22:e8:9c:d6:c6:ea:73:e7:0a:ff:
                    ba:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A2:30:A6:74:72:94:5E:66:53:6F:8F:5E:C6:F5:0B:89:F4:2C:9C
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33342e302f32342d3235203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:bb:0d:b6:c3:b3:58:8b:af:ce:55:c4:f1:ba:e6:cf:cc:3a:
         29:41:8b:31:1c:72:8e:52:a1:d4:ce:71:d1:b2:50:42:4d:de:
         08:3d:d6:03:5e:ae:aa:65:49:10:7e:a5:40:5c:e0:68:23:d4:
         e8:d3:f0:79:e9:2a:5e:8a:63:ab:e5:83:df:df:ae:dd:69:67:
         94:a9:1f:a9:61:04:d2:f6:c3:0a:ea:01:ba:08:ac:84:3f:05:
         b0:9f:f5:7a:ee:08:0b:05:38:06:c3:e2:49:73:32:14:62:ea:
         c8:b1:e0:83:d5:2a:2b:5f:fd:6b:5c:75:dd:d9:43:1b:75:22:
         b7:12:cd:17:fd:d6:c3:f0:92:e6:f1:3a:b7:f4:47:02:22:65:
         db:d7:59:8e:28:3e:3c:ef:23:4e:d0:fc:2c:69:e2:5e:40:44:
         d6:ed:c9:5d:25:43:70:4e:49:85:86:68:d5:b1:9e:25:60:89:
         11:2b:24:be:dc:1c:f8:ee:7e:f7:84:a7:a3:52:9b:df:93:c1:
         a2:89:2b:a1:47:e0:eb:6d:0b:2a:07:e3:ef:c0:7b:00:d2:1e:
         fc:cf:d1:ba:b3:23:c5:74:7f:f7:6e:38:02:d6:f4:e4:42:d0:
         a7:59:64:39:23:42:63:9e:11:0b:76:7a:cb:03:5f:39:74:bb:
         7d:72:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:36:27 2025 by rpki-client