Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32332d3233203d3e20323638323537.roa
File:                     34352e3233362e3234302e302f32332d3233203d3e20323638323537.roa (raw, json)
Hash identifier:          qqZA5MnURB2Sbx/MJX2Oil8v6wa1zBoYHjWdC/+VgRE=
Subject key identifier:   5F:C6:0A:8A:59:81:21:8F:B2:E0:C3:86:FA:9A:50:4F:2C:91:68:3E
Certificate issuer:       /CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0
Certificate serial:       4961851C8998498E15AD21C03C4F5BB824DB4751
Authority key identifier: 95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32332d3233203d3e20323638323537.roa
Signing time:             Wed 15 Oct 2025 22:44:21 +0000
ROA not before:           Wed 15 Oct 2025 22:39:21 +0000
ROA not after:            Wed 14 Oct 2026 22:44:21 +0000
asID:                     268257
IP address blocks:        45.236.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl
                          rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:61:85:1c:89:98:49:8e:15:ad:21:c0:3c:4f:5b:b8:24:db:47:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0
        Validity
            Not Before: Oct 15 22:39:21 2025 GMT
            Not After : Oct 14 22:44:21 2026 GMT
        Subject: CN=5FC60A8A5981218FB2E0C386FA9A504F2C91683E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:ef:77:ea:68:5a:22:be:78:51:3b:81:85:
                    9a:a0:4f:57:d7:41:22:fe:cd:56:8d:ab:c3:a7:7d:
                    60:19:c6:5e:5c:cf:04:da:e6:ff:54:90:3a:d0:b2:
                    7c:0d:22:85:cf:d3:57:07:4e:2f:ec:5b:81:a7:8a:
                    0a:c8:6f:e5:48:bf:fb:68:5c:d7:a2:24:2b:e6:b5:
                    80:20:b9:98:20:bb:c7:df:92:0f:97:4f:17:8f:29:
                    18:a4:55:41:98:1a:89:de:ae:12:07:2f:f1:1a:ca:
                    7b:bc:97:1f:93:93:a6:1b:dd:0f:03:f1:17:c5:e2:
                    68:78:52:cf:ba:f6:b0:37:04:8d:04:58:79:9c:9c:
                    d6:57:69:eb:e4:19:68:9b:c9:14:0a:6c:ea:5b:ab:
                    76:d3:34:4a:01:4c:ce:31:57:e7:93:0d:e9:09:b9:
                    f1:dc:e5:40:9a:ed:f3:59:1e:04:32:8b:7e:5c:5e:
                    36:c5:2b:c0:a2:3c:21:20:a5:07:31:9d:ff:2b:bd:
                    8e:83:81:d3:5e:16:e7:07:02:2b:eb:d7:b4:b6:b8:
                    ac:77:bb:f0:07:f0:16:6c:4c:a3:11:b0:3b:23:f8:
                    6c:f3:6d:26:f2:2f:60:93:a3:33:63:c0:70:73:d7:
                    c5:ee:83:aa:15:c1:f8:e1:dd:da:9a:e4:87:96:91:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C6:0A:8A:59:81:21:8F:B2:E0:C3:86:FA:9A:50:4F:2C:91:68:3E
            X509v3 Authority Key Identifier:
                keyid:95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32332d3233203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:65:97:be:6b:f1:a0:76:bd:ab:7b:53:55:9d:f2:28:a8:dc:
         a9:25:a6:35:fa:1f:1c:98:78:58:13:92:a1:2f:11:57:1f:29:
         62:22:9d:78:34:8a:5b:ae:37:25:a5:f6:87:91:c0:c7:1d:30:
         93:cf:ad:fb:4a:33:af:c6:e5:ac:fe:49:d7:3d:cb:bc:fa:90:
         59:d5:88:af:96:6d:f1:00:df:a0:51:84:85:0e:9c:1d:5c:d3:
         f0:81:6c:06:71:95:6d:36:01:06:75:d8:f2:22:c3:9a:cc:4f:
         fa:45:b7:e5:4c:f6:fa:73:84:1c:ac:e5:e5:a8:44:05:a8:41:
         f8:a4:2b:32:85:e8:aa:c2:5a:b4:29:c9:44:4e:55:06:99:11:
         b2:9e:49:79:36:82:94:20:d3:40:d2:f4:80:11:48:2e:0e:fe:
         58:19:e9:9e:78:44:48:d3:bb:cd:1a:f4:2f:9e:0f:58:f3:53:
         2d:38:41:27:87:45:d9:6c:50:73:d6:03:cb:08:34:80:d9:82:
         16:a8:9c:0b:fa:77:33:77:37:d4:41:29:ee:ad:a6:6c:6c:2e:
         f4:39:c4:5f:ca:12:04:25:39:44:53:66:8c:cb:02:5b:26:a8:
         8a:b2:2e:4e:70:3a:0c:28:f0:b8:9d:19:c9:0a:58:23:3d:ce:
         ba:63:1e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:32:41 2025 by rpki-client