Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa
File:                     34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa (raw, json)
Hash identifier:          2mRFBsp1hSxW6V5crMH9L0Tr2n5H7BrxFA/YVSI9FRc=
Subject key identifier:   F3:4D:74:1A:0C:B9:2A:F0:16:FC:42:14:E1:B6:9E:34:26:34:23:5A
Certificate issuer:       /CN=FB85EAC0611AB7D8E2431317BF5D75C53E806B13
Certificate serial:       1D836E5BE29BFCBBA4B5C24D1D00100058309FDB
Authority key identifier: FB:85:EA:C0:61:1A:B7:D8:E2:43:13:17:BF:5D:75:C5:3E:80:6B:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB85EAC0611AB7D8E2431317BF5D75C53E806B13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa
Signing time:             Thu 09 Oct 2025 19:16:23 +0000
ROA not before:           Thu 09 Oct 2025 19:11:23 +0000
ROA not after:            Thu 08 Oct 2026 19:16:23 +0000
asID:                     269467
IP address blocks:        45.187.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/FB85EAC0611AB7D8E2431317BF5D75C53E806B13.crl
                          rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/FB85EAC0611AB7D8E2431317BF5D75C53E806B13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB85EAC0611AB7D8E2431317BF5D75C53E806B13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:83:6e:5b:e2:9b:fc:bb:a4:b5:c2:4d:1d:00:10:00:58:30:9f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB85EAC0611AB7D8E2431317BF5D75C53E806B13
        Validity
            Not Before: Oct  9 19:11:23 2025 GMT
            Not After : Oct  8 19:16:23 2026 GMT
        Subject: CN=F34D741A0CB92AF016FC4214E1B69E342634235A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:22:f5:fe:53:44:a9:c7:41:4e:0a:70:b0:64:
                    61:27:34:71:9a:74:7d:0f:be:71:dc:67:fa:9c:16:
                    25:2b:83:db:ab:22:7f:7f:36:31:a0:7f:89:0a:cc:
                    27:dc:a7:02:c2:ed:ba:24:87:64:d9:dc:c5:cb:8e:
                    66:d1:30:37:8a:b9:63:75:7f:8d:a5:53:b4:fc:63:
                    20:be:d2:e1:54:02:68:8b:15:01:98:40:e9:2d:77:
                    15:dd:64:c9:2a:46:76:04:74:f1:5d:a9:c5:db:a3:
                    c3:1b:00:bc:c7:53:bc:54:36:a2:52:b3:2f:11:85:
                    4a:dd:1d:36:25:df:b6:2c:f3:8a:25:08:25:64:05:
                    9a:aa:d2:7a:9b:be:4c:ec:4b:cb:4a:66:19:d8:5d:
                    39:d5:fc:ae:d8:4c:2a:b4:1c:0f:ab:05:01:cc:33:
                    0e:0f:1a:51:b8:cf:f5:c3:bb:19:f1:aa:1a:72:2c:
                    5b:31:0b:e8:bd:36:09:a9:eb:2f:4e:cf:ef:4d:e9:
                    40:b9:6d:10:8e:a9:ce:a9:9c:e2:82:6c:d5:13:26:
                    10:82:03:53:61:bb:c2:0c:6c:1a:7b:4f:49:86:6f:
                    b9:f8:07:c0:e4:3d:1d:1d:ff:31:33:90:04:c5:82:
                    ad:69:64:43:a2:d9:76:ad:ed:aa:93:b2:42:4a:ee:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4D:74:1A:0C:B9:2A:F0:16:FC:42:14:E1:B6:9E:34:26:34:23:5A
            X509v3 Authority Key Identifier:
                keyid:FB:85:EA:C0:61:1A:B7:D8:E2:43:13:17:BF:5D:75:C5:3E:80:6B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/FB85EAC0611AB7D8E2431317BF5D75C53E806B13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB85EAC0611AB7D8E2431317BF5D75C53E806B13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:0b:65:29:6f:7d:36:53:c6:7c:66:8a:42:b8:7e:74:25:a2:
         fd:f7:7c:bc:88:aa:5e:31:2a:14:f3:05:64:8a:bd:12:fb:3d:
         e3:b0:14:fe:40:70:74:1b:64:be:a3:d6:5f:37:3a:96:10:53:
         e6:ff:be:81:78:6d:86:3a:18:67:bd:3c:a4:e4:0d:f7:17:dd:
         66:c1:2b:87:87:69:be:ce:41:e8:76:96:67:56:e0:b3:60:85:
         f1:1f:2e:74:33:f7:a1:cc:e9:be:70:79:ed:26:41:37:8d:04:
         15:f1:87:e2:15:a9:01:f4:16:6e:b3:93:18:eb:33:b7:c9:09:
         ab:92:aa:0b:fd:2c:0a:ac:55:f4:17:24:c5:52:d2:db:a4:ba:
         87:88:ce:0b:ee:5c:bd:e5:e9:f4:18:ed:75:a9:78:be:8d:93:
         e3:57:4d:a4:e4:82:c8:48:93:9b:bd:6c:0d:49:85:20:32:05:
         f1:24:9c:d0:27:93:f6:82:77:32:9c:23:cd:3b:fa:89:3c:06:
         b5:d3:e5:ec:84:ca:68:7e:15:91:22:7d:31:9a:57:eb:77:46:
         e2:b7:bf:74:99:49:57:82:c5:96:eb:d5:1c:9f:a2:7e:58:b1:
         8a:81:43:75:84:e4:63:cf:e2:9c:70:b7:2e:6d:fa:7c:01:38:
         77:4b:95:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:33 2025 by rpki-client