Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/34352e3137372e3232322e302f32332d3332203d3e20323635323035.roa
File:                     34352e3137372e3232322e302f32332d3332203d3e20323635323035.roa (raw, json)
Hash identifier:          ftylbxdUqe+AEng6uaMNGeETXaMcyxcdSIBf4AavPgY=
Subject key identifier:   53:A2:93:F9:3F:95:31:84:B3:62:38:54:B0:77:5A:65:C9:4F:C5:D6
Certificate issuer:       /CN=62A5C0540F947AA10155F189BB23E78C40777E10
Certificate serial:       22393F9BE0682CEA7C71BD591E998190975D607A
Authority key identifier: 62:A5:C0:54:0F:94:7A:A1:01:55:F1:89:BB:23:E7:8C:40:77:7E:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62A5C0540F947AA10155F189BB23E78C40777E10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/34352e3137372e3232322e302f32332d3332203d3e20323635323035.roa
Signing time:             Thu 25 Sep 2025 23:28:47 +0000
ROA not before:           Thu 25 Sep 2025 23:23:47 +0000
ROA not after:            Thu 24 Sep 2026 23:28:47 +0000
asID:                     265205
IP address blocks:        45.177.222.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/62A5C0540F947AA10155F189BB23E78C40777E10.crl
                          rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/62A5C0540F947AA10155F189BB23E78C40777E10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62A5C0540F947AA10155F189BB23E78C40777E10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:39:3f:9b:e0:68:2c:ea:7c:71:bd:59:1e:99:81:90:97:5d:60:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62A5C0540F947AA10155F189BB23E78C40777E10
        Validity
            Not Before: Sep 25 23:23:47 2025 GMT
            Not After : Sep 24 23:28:47 2026 GMT
        Subject: CN=53A293F93F953184B3623854B0775A65C94FC5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:f4:5a:09:68:13:98:e1:b1:c3:53:fb:1d:
                    f2:b6:a6:6e:55:16:ff:0e:55:79:1d:1c:f1:ac:0f:
                    da:2e:4f:75:0a:e6:83:72:84:50:eb:7b:a0:e3:23:
                    6a:2e:23:1a:7f:7c:a0:bd:8b:13:76:ee:01:ee:91:
                    2b:1a:35:03:30:09:7c:ee:67:85:31:08:49:05:aa:
                    56:33:75:f3:86:66:97:a7:38:93:5e:b4:d4:32:f6:
                    70:b8:3c:3e:0e:47:28:6b:7b:60:a2:cf:83:32:23:
                    9a:c0:73:8b:b2:42:53:00:7d:db:ea:c4:56:f3:e7:
                    4e:7c:93:b0:cc:e2:5c:8e:f0:00:6a:be:e7:31:7e:
                    cd:09:17:17:a9:f1:94:64:48:ac:06:1d:db:5f:9b:
                    52:98:e6:c2:01:47:4f:3c:d9:2d:8c:a9:5e:67:0d:
                    67:30:86:47:c8:ee:15:d0:83:f7:b7:04:bb:2d:bf:
                    4b:ed:94:51:52:ec:3f:4b:c3:9a:00:62:f0:87:f5:
                    c5:36:61:53:d7:13:31:fc:ab:0b:76:f7:c2:6b:9b:
                    56:fc:58:67:73:b3:3b:9e:91:af:25:d3:0d:99:c4:
                    91:5f:88:ca:b7:c4:97:dc:a0:55:0b:cb:26:4d:c7:
                    27:41:ac:0b:d7:3c:87:db:ba:db:ce:1e:95:63:75:
                    54:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A2:93:F9:3F:95:31:84:B3:62:38:54:B0:77:5A:65:C9:4F:C5:D6
            X509v3 Authority Key Identifier:
                keyid:62:A5:C0:54:0F:94:7A:A1:01:55:F1:89:BB:23:E7:8C:40:77:7E:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/62A5C0540F947AA10155F189BB23E78C40777E10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62A5C0540F947AA10155F189BB23E78C40777E10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/34352e3137372e3232322e302f32332d3332203d3e20323635323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:f7:21:26:1f:57:37:11:99:65:fa:66:3d:01:18:e8:0c:35:
         fb:c7:d3:34:e6:4f:7a:b9:ec:5b:78:76:8f:26:55:39:d2:70:
         13:3d:3c:de:33:44:bf:d4:2f:61:a2:20:8a:b7:d6:8e:08:f2:
         f1:ed:c9:34:b1:4c:06:26:48:e1:b7:d7:ef:96:2c:ed:4f:1a:
         0e:d6:6e:a6:c8:a3:28:2d:5d:2e:f7:94:a3:de:0e:ee:68:af:
         4f:20:18:1f:ef:07:dd:e4:8e:75:b0:ae:94:06:d6:0c:cf:64:
         ba:77:5c:02:eb:06:f0:f4:88:a8:b4:ad:e9:d5:97:08:af:1c:
         be:9b:c2:5c:04:44:5c:83:2e:59:8f:ec:de:d8:df:1c:5e:6c:
         16:1d:aa:eb:ea:ea:72:d7:dc:61:b4:5d:6e:6f:a5:48:32:5a:
         08:f8:66:1b:e1:11:6a:9f:34:76:de:8c:87:e9:cb:05:0d:1a:
         e7:d8:8d:cd:06:98:7b:80:12:b7:22:18:30:ba:25:65:db:42:
         5d:d1:df:0a:dd:62:68:2d:c1:18:fb:6b:e0:66:3a:75:e0:4f:
         5f:e0:7c:5d:7e:f9:7e:4b:40:62:98:16:2c:66:90:f9:41:aa:
         d8:9f:ac:8b:5d:f7:c8:ad:15:62:f6:ef:42:a4:af:36:79:f0:
         70:39:a4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:03 2025 by rpki-client