Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/34352e3136352e3131362e302f32322d3234203d3e20323639303938.roa
File:                     34352e3136352e3131362e302f32322d3234203d3e20323639303938.roa (raw, json)
Hash identifier:          pkduOKIvAv2Xzxhmj022BH7GMexRyjN9soBPbo4QueY=
Subject key identifier:   50:89:32:6C:BE:4F:2C:A9:1D:81:04:98:8F:80:C5:FB:53:61:CA:A2
Certificate issuer:       /CN=73777C12CA4BD8733B75D3010D997C91E776937F
Certificate serial:       652E971BD4CB0DFA455133E0F7A644A825309BE0
Authority key identifier: 73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/34352e3136352e3131362e302f32322d3234203d3e20323639303938.roa
Signing time:             Thu 09 Oct 2025 16:34:49 +0000
ROA not before:           Thu 09 Oct 2025 16:29:49 +0000
ROA not after:            Thu 08 Oct 2026 16:34:49 +0000
asID:                     269098
IP address blocks:        45.165.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl
                          rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2e:97:1b:d4:cb:0d:fa:45:51:33:e0:f7:a6:44:a8:25:30:9b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73777C12CA4BD8733B75D3010D997C91E776937F
        Validity
            Not Before: Oct  9 16:29:49 2025 GMT
            Not After : Oct  8 16:34:49 2026 GMT
        Subject: CN=5089326CBE4F2CA91D8104988F80C5FB5361CAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:57:79:9b:0e:7e:ee:35:17:30:3c:e6:ff:
                    60:13:9b:ae:ec:e2:8a:4b:24:4f:41:3e:b2:b3:1f:
                    01:d1:13:17:cb:43:1c:56:32:74:b6:24:14:59:fd:
                    4f:c8:4e:70:0c:13:65:13:55:5c:b2:17:5d:b3:ec:
                    b8:d1:78:29:65:03:53:6e:7c:ec:ea:36:6c:b6:93:
                    9f:7b:fa:e3:90:df:13:9e:c0:19:93:df:de:8e:8b:
                    fc:ea:43:3a:f5:06:9f:58:5f:97:1c:70:1c:b3:53:
                    42:9e:09:07:46:f1:b9:3b:1c:bd:03:02:57:29:18:
                    c7:cb:e4:a3:1b:b0:8f:7d:05:06:47:f5:d9:54:ec:
                    70:66:bb:0c:d5:95:89:3f:b0:0c:a6:c0:63:48:0b:
                    9d:44:fc:ae:66:4d:69:9f:5e:9e:e0:43:f6:c3:4d:
                    e5:f2:47:3c:b8:12:43:49:99:ed:7b:81:2e:c7:d5:
                    b1:4f:67:3b:70:3c:93:e3:92:ae:21:e8:01:29:02:
                    c5:d1:78:1f:40:69:21:d5:03:b8:d8:02:4d:cf:f9:
                    d5:97:ce:ec:33:5f:6d:3f:47:70:75:7e:70:78:65:
                    08:2a:a3:19:78:c6:ac:3c:b5:2b:04:ca:98:c7:84:
                    8e:4c:72:88:2f:a2:c0:e9:f9:5a:6b:d7:46:bd:c2:
                    53:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:89:32:6C:BE:4F:2C:A9:1D:81:04:98:8F:80:C5:FB:53:61:CA:A2
            X509v3 Authority Key Identifier:
                keyid:73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/34352e3136352e3131362e302f32322d3234203d3e20323639303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:b6:8c:cf:64:96:ad:34:74:40:88:e1:85:51:44:fd:c2:b5:
         69:e9:c3:e6:94:12:dc:ad:0b:0b:b6:c8:f3:90:b4:47:95:69:
         2f:f8:e5:a6:04:89:cf:ee:60:6f:e4:33:f3:77:93:a3:46:32:
         f9:08:08:89:2a:d3:24:a7:8e:ea:65:53:f7:81:50:aa:f3:87:
         cb:c1:04:f6:24:a0:8d:1a:ec:5e:01:bb:24:78:cb:7d:36:5f:
         d6:b5:eb:5f:74:30:39:6e:b6:87:e6:8b:35:af:4c:99:8d:04:
         7d:6b:ad:d3:33:47:d0:11:52:2e:c5:96:c0:d2:ea:d0:a6:01:
         14:63:f7:04:ee:77:ed:82:9e:31:0f:94:4a:f3:22:5f:a8:c7:
         c8:9a:04:01:da:c1:fd:07:d2:b4:4d:a5:be:42:ea:0c:92:d0:
         21:68:d7:12:c4:78:27:f6:24:9d:6c:30:ef:4e:c4:4f:46:97:
         70:c5:71:05:17:d5:78:92:0b:20:6c:62:2c:a9:14:72:b0:30:
         7b:6c:7e:c6:55:83:db:2a:da:2d:48:0f:f0:57:dd:db:25:fb:
         0c:30:65:33:41:e2:32:64:66:64:9f:da:f2:f2:6e:53:76:fb:
         cd:d3:7f:6d:a2:86:8e:90:0b:17:14:50:a8:95:9b:e6:48:ec:
         cf:fd:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:41 2025 by rpki-client