Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33352e302f32342d3234203d3e20323634353530.roa
File:                     3137302e302e33352e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          J/a/OajP6UEikhADfXaPCAmS0T9+gXsgcwPNP4wdFpU=
Subject key identifier:   50:84:9A:E8:5A:E0:F6:22:77:F8:8D:86:6A:0E:2A:54:10:42:9B:35
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       578D1EB62751C43E9584E5B7C2BD368EBE8AE1D3
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33352e302f32342d3234203d3e20323634353530.roa
Signing time:             Tue 23 Sep 2025 00:04:48 +0000
ROA not before:           Mon 22 Sep 2025 23:59:48 +0000
ROA not after:            Tue 22 Sep 2026 00:04:48 +0000
asID:                     264550
IP address blocks:        170.0.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8d:1e:b6:27:51:c4:3e:95:84:e5:b7:c2:bd:36:8e:be:8a:e1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Sep 22 23:59:48 2025 GMT
            Not After : Sep 22 00:04:48 2026 GMT
        Subject: CN=50849AE85AE0F62277F88D866A0E2A5410429B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:b1:cc:e4:90:1b:b3:e0:4e:49:f6:0d:14:
                    8e:36:38:33:81:28:ff:b3:bc:35:73:2d:76:a2:11:
                    1f:46:cc:67:d7:e3:32:11:94:7b:35:72:93:20:dc:
                    7c:92:8c:28:d3:80:0a:78:06:38:88:dd:cd:95:5a:
                    22:b7:f1:df:af:69:e4:04:79:7f:cc:98:86:db:b9:
                    47:52:47:8e:02:fa:9f:0d:d4:76:f9:3e:5b:b2:c4:
                    92:59:24:10:a3:69:54:61:6f:8a:c7:80:dc:c0:3e:
                    a7:c9:5f:e9:bd:e0:aa:86:d8:13:12:90:07:08:26:
                    e7:4b:0f:bc:67:7d:77:da:ae:ac:1c:02:7a:f7:7a:
                    ac:de:f8:c1:fa:cc:ea:bd:92:9f:8d:69:31:f6:30:
                    52:17:a3:78:8f:82:86:c9:24:d1:7d:f1:b0:fc:73:
                    42:6b:fd:40:0a:50:9f:f8:c5:88:50:62:0f:01:51:
                    31:d6:d7:dc:56:9e:a7:64:b9:fe:e0:21:04:67:f9:
                    09:79:49:ea:17:91:c8:42:9d:2b:27:a6:e7:5b:5b:
                    6d:22:c9:2a:4e:dd:ff:6e:53:8c:7f:56:f6:5e:c7:
                    04:e5:81:c7:01:86:9c:52:8e:94:ce:e7:c2:bb:9c:
                    10:0e:95:79:ff:9b:c2:68:e3:01:f8:22:a1:98:a2:
                    77:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:84:9A:E8:5A:E0:F6:22:77:F8:8D:86:6A:0E:2A:54:10:42:9B:35
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33352e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d5:b7:53:23:b8:45:e2:e8:f2:f3:c9:df:53:c9:59:24:cc:
         12:7a:61:5a:eb:54:42:13:0d:37:d5:c8:0a:11:0a:58:d4:7b:
         1c:52:94:14:aa:e6:14:4a:e0:45:f9:b1:3a:39:ff:4c:04:c7:
         50:73:55:ea:e0:e2:a5:2d:a6:5b:86:b0:7b:d8:6a:14:64:92:
         63:71:e0:47:f9:c2:e1:71:3f:f2:a6:32:3e:97:9f:b6:61:fd:
         0f:5b:7e:38:26:dd:5e:9b:54:23:e8:7a:b8:3d:4d:0b:85:f1:
         6b:c2:00:05:cb:27:40:33:52:e3:62:b5:83:d9:36:f8:88:78:
         bb:3b:22:90:66:65:8e:dc:30:e5:bd:c0:5b:46:bf:28:14:20:
         fb:14:fd:95:65:ef:89:80:a4:4a:38:63:3e:1e:5e:1d:68:9d:
         ae:53:79:56:89:7b:ed:6a:c9:73:17:4d:17:b5:c3:c8:a7:45:
         b9:fa:67:39:dc:25:64:e3:01:69:47:66:d7:fe:ee:6f:8e:54:
         39:39:16:f9:46:0a:23:cf:30:c9:92:36:f0:fb:59:14:c8:74:
         b5:7e:69:23:24:3c:9c:88:0f:83:36:d4:a2:af:c5:89:57:58:
         43:40:2c:07:97:4d:cf:df:1a:2b:39:7c:f7:ab:06:a1:d2:46:
         8a:ea:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:44 2025 by rpki-client