Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/34352e3233372e35392e302f32342d3234203d3e20323638333030.roa
File:                     34352e3233372e35392e302f32342d3234203d3e20323638333030.roa (raw, json)
Hash identifier:          //K1OM8xv53BQK8huoaT/HPkhNDTtz9aVFeeRQvzUiI=
Subject key identifier:   7D:79:3F:35:3E:77:87:30:BE:58:C2:4B:3C:F1:BB:A1:A7:B4:F8:D8
Certificate issuer:       /CN=443681E3ADAB56666689B0FFC0971A173CEEB409
Certificate serial:       1FAC838FE8C963917E6584A47352E0777D3A988B
Authority key identifier: 44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/34352e3233372e35392e302f32342d3234203d3e20323638333030.roa
Signing time:             Mon 01 Sep 2025 14:58:07 +0000
ROA not before:           Mon 01 Sep 2025 14:53:07 +0000
ROA not after:            Mon 31 Aug 2026 14:58:07 +0000
asID:                     268300
IP address blocks:        45.237.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl
                          rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ac:83:8f:e8:c9:63:91:7e:65:84:a4:73:52:e0:77:7d:3a:98:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443681E3ADAB56666689B0FFC0971A173CEEB409
        Validity
            Not Before: Sep  1 14:53:07 2025 GMT
            Not After : Aug 31 14:58:07 2026 GMT
        Subject: CN=7D793F353E778730BE58C24B3CF1BBA1A7B4F8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:9b:46:03:1f:23:79:b4:a7:d1:bb:6a:f1:
                    48:40:b2:28:b2:63:33:e0:d4:e2:d0:4b:43:c8:c7:
                    56:04:46:ef:4d:af:40:3c:23:5e:7f:c5:54:e3:23:
                    40:71:08:33:b1:f3:2c:cf:66:a2:24:c4:54:38:94:
                    96:be:36:2a:0b:f6:02:03:02:3d:ba:11:93:75:30:
                    18:2d:83:6e:60:bc:cf:55:54:59:26:ef:69:51:8a:
                    fe:1b:a6:b2:3c:7f:36:8d:33:90:17:96:10:b9:ab:
                    05:10:d9:75:17:6a:97:1b:1c:c6:46:46:eb:3f:68:
                    31:80:8e:e6:a9:f7:a9:f6:31:19:09:38:e7:74:2f:
                    c5:ee:a0:55:a6:35:bf:3a:86:e1:95:36:08:09:18:
                    af:05:6b:1e:63:ee:54:ea:f5:29:f6:c5:ee:1b:33:
                    72:42:60:36:f1:43:ef:90:f5:78:71:5c:9f:34:06:
                    80:19:b3:7c:c9:6c:bc:51:39:a0:81:86:a3:e6:57:
                    ad:d3:6b:cb:b7:36:ec:c9:de:d5:ac:39:f6:5f:db:
                    16:83:c2:c9:b8:1c:63:b2:22:da:cd:81:98:7c:da:
                    6f:47:35:53:2d:7c:19:af:19:e9:3d:77:3b:29:c5:
                    6a:b4:cb:86:6d:59:4e:b2:c2:82:88:8b:81:16:1f:
                    e7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:79:3F:35:3E:77:87:30:BE:58:C2:4B:3C:F1:BB:A1:A7:B4:F8:D8
            X509v3 Authority Key Identifier:
                keyid:44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/34352e3233372e35392e302f32342d3234203d3e20323638333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:ba:18:4b:d5:05:52:ab:10:30:10:73:bc:80:94:35:c1:d3:
         66:d4:7b:10:5f:b0:ae:d9:53:30:7e:1e:25:22:e9:7d:7f:0d:
         a4:3b:b2:39:16:59:71:3c:d7:0c:bf:3f:b2:39:4c:51:07:cb:
         5c:93:6d:1e:90:94:1e:e8:9b:73:bd:87:e9:e7:f5:e0:ea:eb:
         35:b1:ee:03:f0:5b:26:fd:55:72:39:4b:97:21:80:c0:65:3d:
         85:a6:e6:80:96:4e:29:f1:8e:a3:ec:6b:7d:55:a8:12:27:61:
         7d:94:f5:a8:b1:39:9a:f7:7d:c0:25:73:ca:04:eb:b1:1f:12:
         d2:0c:8d:62:28:c8:7e:47:59:5b:42:50:3c:74:f2:9f:fe:8f:
         77:d9:81:b1:29:a6:1e:f8:d3:21:18:00:94:ba:48:4d:3e:62:
         cf:30:74:66:35:39:6c:34:c7:5b:ce:ff:f5:65:4d:66:66:80:
         0a:d7:49:04:ca:87:8b:78:ea:ea:0d:ee:6c:b7:0a:9d:a6:3d:
         96:d8:d1:1d:eb:d0:ac:65:5f:78:f0:c4:b3:94:52:ad:d2:b1:
         1d:b6:60:21:90:9c:6c:43:aa:a2:dd:96:11:37:6b:b0:11:86:
         b4:da:d8:f3:50:5a:18:2f:48:43:21:45:3e:2f:24:16:63:4a:
         e4:69:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:40:21 2025 by rpki-client