Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/34352e3136322e36342e302f32332d3233203d3e20323638353933.roa
File:                     34352e3136322e36342e302f32332d3233203d3e20323638353933.roa (raw, json)
Hash identifier:          QNz7NC0Bea2pa79/Jo23uiND+G8lxqCNrtDZAUy620A=
Subject key identifier:   68:FD:8D:54:91:AB:9C:18:44:9C:66:78:6A:E3:D2:29:BA:2A:49:94
Certificate issuer:       /CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
Certificate serial:       6EF7BCA1A50E5B073D3C59DC78973578EAEA4214
Authority key identifier: D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/34352e3136322e36342e302f32332d3233203d3e20323638353933.roa
Signing time:             Tue 07 Oct 2025 00:53:25 +0000
ROA not before:           Tue 07 Oct 2025 00:48:25 +0000
ROA not after:            Tue 06 Oct 2026 00:53:25 +0000
asID:                     268593
IP address blocks:        45.162.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl
                          rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f7:bc:a1:a5:0e:5b:07:3d:3c:59:dc:78:97:35:78:ea:ea:42:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
        Validity
            Not Before: Oct  7 00:48:25 2025 GMT
            Not After : Oct  6 00:53:25 2026 GMT
        Subject: CN=68FD8D5491AB9C18449C66786AE3D229BA2A4994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e2:4d:e8:45:4a:4d:7b:08:6a:d6:14:d8:6c:
                    04:c5:d4:9d:65:19:fb:d1:26:3e:b8:58:92:9c:b5:
                    6d:62:5d:d9:30:f4:68:54:9e:7e:d6:ec:67:0e:de:
                    6f:49:5a:07:2c:a6:68:78:ac:47:b4:a5:1e:4c:16:
                    e2:97:22:a5:e4:93:cc:f6:00:22:21:89:8c:9b:3e:
                    8c:d6:a9:b4:a9:da:fc:8e:fe:44:01:96:b3:bb:83:
                    1a:09:1f:71:48:51:ab:d5:db:49:3d:96:00:32:bd:
                    3a:06:d6:86:95:45:d0:f6:e9:d8:cb:07:5f:67:71:
                    fe:07:a3:09:08:50:3f:3c:2e:7f:b6:16:c7:07:e9:
                    63:c8:c0:e1:13:66:06:15:9a:97:f0:02:be:cc:9f:
                    a1:b6:d0:5a:26:8d:4e:0a:f5:11:8e:dd:40:19:fa:
                    ff:67:6c:47:65:3c:dc:18:5c:ef:d0:df:fc:1f:d5:
                    82:06:bd:f6:19:8b:5f:a2:83:b2:85:dd:74:1a:de:
                    9c:97:b7:6c:d0:3f:70:ee:6e:59:90:be:56:57:f7:
                    b8:57:53:39:80:94:33:48:e1:05:ea:74:0f:d5:0c:
                    32:f3:94:d7:37:51:3e:75:24:03:28:e4:dd:74:35:
                    6d:3f:19:75:1e:55:45:a5:23:c5:ed:71:ca:ea:22:
                    96:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FD:8D:54:91:AB:9C:18:44:9C:66:78:6A:E3:D2:29:BA:2A:49:94
            X509v3 Authority Key Identifier:
                keyid:D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/34352e3136322e36342e302f32332d3233203d3e20323638353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:cf:83:f9:31:df:b1:50:90:4d:85:69:d1:79:0b:05:ef:35:
         db:10:ea:12:5f:04:f5:e3:52:d1:6f:66:25:c8:59:07:02:6a:
         c1:19:1a:49:66:86:e5:62:2e:1b:97:bb:51:d9:9d:0a:46:73:
         aa:09:c4:47:11:16:05:e3:01:81:f5:5a:29:9f:96:20:c4:81:
         1a:aa:bd:81:33:22:e4:c6:1d:eb:74:f4:61:2b:5d:82:a9:b6:
         7a:47:c1:19:9f:80:56:68:49:f0:4b:72:ff:c4:af:e3:f8:00:
         4a:ee:4e:de:0b:35:f4:18:fc:f5:74:84:fa:11:6d:51:c5:87:
         93:fc:14:ef:15:03:1b:00:4f:68:fb:9c:5b:66:45:cf:40:51:
         a4:ac:d5:23:1f:85:dc:5d:2b:55:ed:0e:e8:a0:cd:1f:f8:b3:
         26:ea:dd:6c:47:6e:c8:a9:59:42:fa:1d:a7:80:5b:5f:54:88:
         32:69:30:21:df:a8:7f:17:6c:54:ed:f2:38:6d:db:67:91:38:
         da:74:ef:2a:16:a7:2e:12:ac:7b:b8:4c:6e:80:eb:89:bb:4a:
         b5:64:5e:32:57:2b:0c:55:0e:67:94:fa:63:58:24:bf:a0:9f:
         dc:0c:15:d4:95:9a:16:0b:1a:93:12:72:5b:7e:a7:82:61:34:
         8d:c7:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:02:19 2025 by rpki-client