Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/34352e3136322e36362e302f32332d3233203d3e20323638353933.roa
File:                     34352e3136322e36362e302f32332d3233203d3e20323638353933.roa (raw, json)
Hash identifier:          nrbQ+RUjVeWVrKGphkHSy7Fdqehq4dRjYLeF+/wvtqg=
Subject key identifier:   6D:3B:79:61:A9:50:05:B8:6D:DA:4A:2B:A1:F0:08:0D:09:3A:6C:7E
Certificate issuer:       /CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
Certificate serial:       334CB5D106F6E47C0B08E1946B1C076FF0B46EAC
Authority key identifier: D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/34352e3136322e36362e302f32332d3233203d3e20323638353933.roa
Signing time:             Tue 07 Oct 2025 00:53:25 +0000
ROA not before:           Tue 07 Oct 2025 00:48:25 +0000
ROA not after:            Tue 06 Oct 2026 00:53:25 +0000
asID:                     268593
IP address blocks:        45.162.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl
                          rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4c:b5:d1:06:f6:e4:7c:0b:08:e1:94:6b:1c:07:6f:f0:b4:6e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
        Validity
            Not Before: Oct  7 00:48:25 2025 GMT
            Not After : Oct  6 00:53:25 2026 GMT
        Subject: CN=6D3B7961A95005B86DDA4A2BA1F0080D093A6C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:49:9f:92:2c:6d:3a:42:c2:42:4b:e9:73:
                    70:98:1f:31:30:55:7d:21:97:05:74:7a:9e:2b:a4:
                    c4:10:02:f6:e7:c3:ef:6a:25:83:b6:5d:f8:8c:1c:
                    31:bb:04:94:35:c0:d2:9d:12:f4:2d:dc:c5:3f:e9:
                    ff:4f:8f:63:0d:9a:41:4d:97:13:4d:ec:f0:e2:b2:
                    98:b2:12:b0:08:87:d3:a8:67:91:73:c9:ab:41:04:
                    aa:49:d6:f2:bd:e5:7d:02:1c:db:95:7a:cc:3b:e6:
                    74:32:04:dc:3b:be:ed:18:fa:2a:0c:30:af:c0:89:
                    45:10:3c:f0:dc:c1:47:33:33:51:bf:15:35:b6:ea:
                    f0:55:4e:70:3a:f7:d6:2a:f0:4c:ca:16:8e:6f:fe:
                    e8:98:9d:8f:cb:f6:23:78:eb:c6:9b:4a:76:c8:35:
                    51:20:f6:84:30:dc:3e:98:b9:1e:d1:1c:46:dd:92:
                    88:09:1b:98:bc:e3:ac:3e:43:a8:eb:ad:79:b7:20:
                    45:8c:73:d0:73:77:ce:73:9e:2b:fe:77:28:20:c3:
                    4e:33:4a:b4:83:2c:49:16:c0:59:86:2e:a8:d5:6d:
                    92:f2:b0:de:14:df:74:0e:ed:e4:b2:ac:6a:0c:97:
                    0a:f6:f3:d1:96:3e:48:ae:09:6c:a9:44:ef:ff:f2:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3B:79:61:A9:50:05:B8:6D:DA:4A:2B:A1:F0:08:0D:09:3A:6C:7E
            X509v3 Authority Key Identifier:
                keyid:D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/34352e3136322e36362e302f32332d3233203d3e20323638353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:9c:5b:92:25:d6:2a:ab:40:8d:f0:2f:fe:3b:ed:45:80:77:
         a3:9b:ab:ee:d2:8e:ce:86:79:2e:65:39:e3:66:da:8f:c6:2a:
         ff:c7:a0:75:4e:18:6e:0d:b1:c3:02:e6:7c:93:6d:d6:4f:b2:
         fa:69:50:55:eb:1c:68:1e:66:bf:4b:bf:fd:f8:23:5e:3f:8f:
         61:40:3c:1d:8b:88:44:e5:f4:e4:b8:3f:81:8f:d5:ce:6a:48:
         78:c8:38:e6:7f:46:b7:b7:96:2f:07:7d:9c:6b:10:9e:57:59:
         17:ab:22:54:44:65:dd:9e:b3:26:a0:d6:44:72:bf:d0:61:82:
         8d:c4:58:95:42:76:0e:61:5f:2b:77:09:02:81:1b:51:f1:46:
         9a:22:64:fe:2c:db:b3:9e:33:3c:d8:09:56:24:06:6c:54:1a:
         13:47:14:36:5c:c4:70:8f:96:e5:c2:ed:b0:bb:bc:b6:6f:08:
         37:e9:0a:36:01:28:ca:8c:26:27:fb:8a:1d:62:5f:cc:af:02:
         ba:72:21:2a:cc:c6:3e:d3:e5:18:ac:0e:e4:26:c6:f5:c1:10:
         02:7a:df:09:46:58:74:df:47:33:17:17:6a:4e:85:dc:8e:d5:
         4d:53:99:70:a7:55:59:15:77:59:7a:27:8c:c0:af:67:af:bb:
         4d:38:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:02:19 2025 by rpki-client