Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31302e302f32342d3234203d3e20323637323831.roa
File:                     34352e3233322e31302e302f32342d3234203d3e20323637323831.roa (raw, json)
Hash identifier:          yPwrjK2Dcqh1VGcgl1YSu+0Xb66+0we1xuyZxz3B6zg=
Subject key identifier:   80:82:F8:DB:01:1E:B0:ED:EE:A1:5F:00:54:71:2E:B5:0B:B2:A8:05
Certificate issuer:       /CN=0FF30EC686201018DE081110542623BAED2ADF49
Certificate serial:       71A205137905D2F0D5B47C280F65DFEB38E9FF61
Authority key identifier: 0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31302e302f32342d3234203d3e20323637323831.roa
Signing time:             Tue 14 Oct 2025 18:48:13 +0000
ROA not before:           Tue 14 Oct 2025 18:43:13 +0000
ROA not after:            Tue 13 Oct 2026 18:48:13 +0000
asID:                     267281
IP address blocks:        45.232.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl
                          rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a2:05:13:79:05:d2:f0:d5:b4:7c:28:0f:65:df:eb:38:e9:ff:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF30EC686201018DE081110542623BAED2ADF49
        Validity
            Not Before: Oct 14 18:43:13 2025 GMT
            Not After : Oct 13 18:48:13 2026 GMT
        Subject: CN=8082F8DB011EB0EDEEA15F0054712EB50BB2A805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d5:18:aa:fa:22:a6:13:c6:8b:23:aa:00:f3:
                    34:d6:64:0a:99:3f:5a:1f:2e:e9:d0:ec:91:64:e5:
                    b1:88:76:c0:d0:85:8e:c0:d4:22:28:a4:89:d9:df:
                    e4:f5:58:64:c1:31:24:30:b4:22:7a:d4:4b:8b:63:
                    ed:e3:23:1a:70:04:73:4d:94:7a:3b:d5:35:68:06:
                    aa:12:57:25:48:59:e0:f0:b8:62:8f:af:b0:05:2e:
                    0b:57:49:f7:db:9b:e6:9a:77:4d:fd:25:8a:4f:a2:
                    09:b4:8f:8b:48:c7:69:4e:fa:f9:59:46:27:38:b3:
                    f4:5f:9a:a3:78:e6:cf:ae:08:38:f2:f8:75:65:06:
                    ad:57:1c:e6:6a:37:1a:ff:06:9e:9f:2b:b3:44:68:
                    24:51:dc:8c:06:52:2c:7a:5b:42:16:70:64:dc:b8:
                    68:cc:97:00:7e:cc:35:38:2f:d3:1b:7f:2f:13:d1:
                    0e:92:20:79:3c:46:2e:4e:48:a4:39:51:86:cc:ed:
                    49:af:0f:c7:98:9c:72:d5:d2:82:30:e5:aa:11:dc:
                    6f:98:d9:95:fc:87:2d:4f:cf:09:85:15:e0:85:bf:
                    76:c6:52:0e:3a:f7:2d:b1:e5:41:89:5f:87:d3:8a:
                    26:05:e6:11:5d:86:d1:c8:ca:da:62:96:0f:14:2c:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:82:F8:DB:01:1E:B0:ED:EE:A1:5F:00:54:71:2E:B5:0B:B2:A8:05
            X509v3 Authority Key Identifier:
                keyid:0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31302e302f32342d3234203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:dd:3e:71:c1:cc:75:c2:5c:7c:f2:f9:5b:00:cc:6a:46:79:
         26:fb:a7:c6:18:0d:ca:82:2b:c1:e3:d1:0e:40:f9:3b:0a:bd:
         f3:4d:7f:08:97:07:b0:00:1e:22:95:1f:a9:6c:45:3b:0b:95:
         64:f0:9f:4c:93:ab:88:36:6f:9b:b6:f2:66:77:c4:96:83:04:
         77:aa:7e:e1:2b:a8:fa:84:ac:db:3a:15:1c:da:62:53:77:d5:
         1e:f0:46:2f:48:6d:f5:4f:9a:be:48:ee:38:00:46:6a:28:91:
         be:88:d9:46:b4:20:71:bc:cf:93:21:db:78:6d:f7:7f:c2:86:
         21:0b:04:59:7d:59:ae:19:e7:5e:ae:43:4a:62:23:13:f9:3c:
         b2:7c:28:bb:33:fe:4f:8a:31:56:cd:a9:41:ad:b1:dc:24:08:
         d9:2d:3d:13:79:28:92:6d:40:31:94:ca:8d:bc:fd:42:30:fa:
         28:99:ba:cd:f9:ca:e1:3e:8e:19:31:30:4f:e8:25:10:e0:b4:
         a7:28:70:99:35:79:b0:ee:dd:3a:75:7a:1a:62:c9:36:a5:51:
         fb:f5:ce:e1:c4:f3:b9:96:20:7e:0f:a4:f7:6a:0e:4c:f1:53:
         cf:52:3a:25:e3:cd:6c:5c:b8:0d:7e:6c:0d:50:9a:f2:6c:e1:
         58:75:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:57:35 2025 by rpki-client