Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/34352e3138322e37322e302f32322d3234203d3e20323639323236.roa
File:                     34352e3138322e37322e302f32322d3234203d3e20323639323236.roa (raw, json)
Hash identifier:          78L0TLG4X7Tt27GEwhPePAD7+fv2IQ9/T6thUGp8Tkc=
Subject key identifier:   3B:45:F7:F5:04:4B:F5:EB:1F:82:5F:61:4F:06:C9:69:B8:31:AB:89
Certificate issuer:       /CN=3F7667D2CA97F4875AB3986F0D03936A276296AF
Certificate serial:       30787C42BAB668877BB44AB2537B432634043688
Authority key identifier: 3F:76:67:D2:CA:97:F4:87:5A:B3:98:6F:0D:03:93:6A:27:62:96:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/34352e3138322e37322e302f32322d3234203d3e20323639323236.roa
Signing time:             Fri 10 Oct 2025 02:05:09 +0000
ROA not before:           Fri 10 Oct 2025 02:00:09 +0000
ROA not after:            Fri 09 Oct 2026 02:05:09 +0000
asID:                     269226
IP address blocks:        45.182.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.crl
                          rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 20:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:78:7c:42:ba:b6:68:87:7b:b4:4a:b2:53:7b:43:26:34:04:36:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F7667D2CA97F4875AB3986F0D03936A276296AF
        Validity
            Not Before: Oct 10 02:00:09 2025 GMT
            Not After : Oct  9 02:05:09 2026 GMT
        Subject: CN=3B45F7F5044BF5EB1F825F614F06C969B831AB89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7f:ad:8b:22:fb:f2:a8:33:9b:13:d4:a2:a8:
                    63:1d:36:83:18:d6:d7:33:fd:bb:cb:76:d0:c7:b8:
                    4f:f8:61:fd:6b:6f:80:a6:04:f5:2e:50:8a:a8:73:
                    99:03:04:dc:13:b3:1d:a3:83:9f:0c:13:7e:39:e2:
                    bd:25:53:0f:81:51:6f:f1:02:6d:1c:8f:ef:29:55:
                    4a:72:cf:cf:c2:a4:be:cf:7f:69:c4:42:b2:e4:5f:
                    a4:15:ee:a7:4e:3b:bb:e5:f0:14:ec:9e:b1:f7:c8:
                    93:ee:1d:78:13:16:44:eb:84:86:99:89:6f:dd:ab:
                    ac:b3:46:65:e0:14:f2:0d:32:1c:ce:61:c4:4b:64:
                    1f:ab:47:2a:b1:14:c8:20:01:91:82:fa:1c:d2:29:
                    5d:9d:ee:9e:cc:d9:be:b7:b6:21:7a:91:ab:a1:a4:
                    c8:41:e1:d7:9a:86:9a:a0:4c:1a:05:d9:f4:67:c8:
                    2e:46:e4:19:94:a7:b0:bb:8d:f1:5d:3f:39:1a:a4:
                    03:23:8c:25:7e:dc:62:8d:e7:f4:54:d0:a9:9e:19:
                    96:78:22:5e:39:1d:4e:62:f7:75:9c:05:a2:f3:e7:
                    c5:53:cc:0c:2b:88:03:48:51:86:62:73:3d:cb:1b:
                    70:1b:c3:4e:69:b8:7f:37:16:15:88:64:b7:61:4f:
                    81:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:45:F7:F5:04:4B:F5:EB:1F:82:5F:61:4F:06:C9:69:B8:31:AB:89
            X509v3 Authority Key Identifier:
                keyid:3F:76:67:D2:CA:97:F4:87:5A:B3:98:6F:0D:03:93:6A:27:62:96:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7667D2CA97F4875AB3986F0D03936A276296AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WQvhtNymC6zCWVJgYTo7N1vR87U2o3r2rK5M3W36Lby/1/34352e3138322e37322e302f32322d3234203d3e20323639323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:ef:96:10:b4:1b:06:24:a5:3e:7d:1b:5b:8d:9b:6c:4c:e6:
         88:19:e8:53:07:96:41:9e:db:5e:b6:a9:4b:9d:6f:65:0c:f9:
         3e:a6:55:57:19:4c:24:2d:e4:60:ea:f4:9b:01:1a:84:d1:47:
         9e:7f:14:c7:d7:46:91:43:5c:6f:ba:10:58:ee:a3:48:e6:33:
         56:b2:56:f5:56:41:00:4f:43:77:01:1b:6d:8b:5c:c5:64:3e:
         22:6e:a3:26:8c:51:f8:fd:d8:8b:28:56:8b:3b:53:d8:4d:27:
         3d:44:93:65:17:db:da:2c:ad:98:ca:50:f6:75:8a:bf:9e:12:
         db:33:c6:1f:dc:36:a3:75:52:9b:87:9d:1d:1a:40:07:22:96:
         f3:49:21:99:84:b6:7c:e1:17:d3:aa:c4:fc:43:b9:2b:c7:6f:
         89:6a:ad:92:80:8e:e7:45:87:c4:b2:8c:fc:fb:09:be:d9:e7:
         d0:ef:e3:cf:33:e3:6a:01:45:7f:7c:25:7e:8e:46:e3:18:40:
         92:dd:5d:a7:41:7d:55:ec:6b:90:8d:8d:0c:17:b4:c4:3f:f7:
         33:1a:b3:36:a1:b2:ac:01:13:21:db:91:24:a5:aa:6f:27:53:
         d2:f8:c8:37:69:89:0e:3b:c7:84:d1:bf:1b:04:b5:41:fb:eb:
         77:2b:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:17:53 2025 by rpki-client