Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33372e302f32342d3234203d3e20323638363232.roa
File:                     34352e3136342e33372e302f32342d3234203d3e20323638363232.roa (raw, json)
Hash identifier:          tIIMprabgCvlRqzjKUIO6kIl7215pagl4pvXJt/TkkU=
Subject key identifier:   10:B0:15:5E:B4:06:FE:13:E8:23:AF:20:44:AD:76:D7:2D:97:86:13
Certificate issuer:       /CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
Certificate serial:       4A74B496025E09E426B5A963B7F97B0CF5CD2001
Authority key identifier: 0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33372e302f32342d3234203d3e20323638363232.roa
Signing time:             Mon 06 Oct 2025 19:10:17 +0000
ROA not before:           Mon 06 Oct 2025 19:05:17 +0000
ROA not after:            Mon 05 Oct 2026 19:10:17 +0000
asID:                     268622
IP address blocks:        45.164.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl
                          rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:74:b4:96:02:5e:09:e4:26:b5:a9:63:b7:f9:7b:0c:f5:cd:20:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
        Validity
            Not Before: Oct  6 19:05:17 2025 GMT
            Not After : Oct  5 19:10:17 2026 GMT
        Subject: CN=10B0155EB406FE13E823AF2044AD76D72D978613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:fd:5e:1c:1f:68:3f:5f:75:20:a1:c3:0b:
                    55:0f:c2:22:20:35:e5:3b:cc:1a:a2:09:1d:8f:26:
                    ba:06:d4:98:33:b4:f1:7c:34:f3:1c:82:39:18:32:
                    cd:10:28:99:78:9b:35:ca:01:ca:a9:10:60:1a:09:
                    b9:3d:87:0d:2c:56:83:88:fb:ed:60:ea:1a:ec:e8:
                    fb:95:fa:50:1a:b7:18:d4:e5:e1:1e:7f:55:e4:55:
                    be:bb:4d:07:be:16:da:a6:ad:86:71:a4:d5:50:82:
                    ff:71:a7:e0:24:f8:8a:36:44:af:ed:af:1b:ad:28:
                    35:bf:fd:ea:2a:12:4e:1c:23:b4:0d:64:19:5b:80:
                    ef:2c:26:20:15:d4:ac:28:cb:2f:d9:a7:72:c9:9b:
                    46:32:3b:21:dd:91:2a:95:de:1f:77:0c:ec:00:6a:
                    3e:51:1e:9b:33:ea:28:fd:f9:94:6d:e1:e1:2f:7d:
                    75:e0:c6:7f:3d:99:a3:3f:5e:55:8e:c6:6e:56:ec:
                    61:7d:de:0f:11:75:bb:29:75:43:61:31:6c:aa:cc:
                    2d:af:71:5f:4d:ff:52:b8:6d:3f:64:f1:e4:27:7c:
                    75:d7:06:98:d4:eb:e6:f8:e1:04:a3:97:b6:67:0c:
                    9b:43:8e:cc:64:3e:cb:63:e9:2f:f7:e9:b2:13:94:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B0:15:5E:B4:06:FE:13:E8:23:AF:20:44:AD:76:D7:2D:97:86:13
            X509v3 Authority Key Identifier:
                keyid:0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33372e302f32342d3234203d3e20323638363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d5:0f:4c:68:53:af:ac:57:4a:00:c6:75:3e:1b:0d:b2:03:
         1e:99:1e:4c:96:e5:c2:60:61:d8:13:ad:3c:43:46:e9:d4:5e:
         17:d2:59:8d:09:0e:f6:09:a7:da:b0:46:9d:b5:de:a9:be:a7:
         29:b2:cc:9c:e5:4c:f2:64:10:64:a6:ce:e4:8d:c5:89:4e:15:
         49:f2:73:a9:78:bc:6b:0d:ed:8b:7d:79:f2:e9:fb:30:76:50:
         7a:da:55:81:a9:8d:7b:2c:c9:ff:3d:45:e0:ff:24:ed:a0:c4:
         ef:7d:26:36:45:1f:28:a6:b4:a0:81:73:4b:85:e4:60:d1:44:
         7a:c0:43:4b:76:ad:97:11:29:5c:fc:2a:45:7f:04:63:87:68:
         9e:26:57:d3:68:c1:03:ff:f4:47:d6:67:e3:f7:db:77:f1:1d:
         8b:c1:70:e7:fe:67:43:2b:f8:24:58:b5:88:ae:9b:47:15:f7:
         a3:12:f9:78:e0:4c:6e:7a:15:a0:c2:63:bb:7a:b5:0a:5b:53:
         95:38:04:f1:b8:da:0e:75:6a:73:de:e8:69:e9:3d:9e:d1:a4:
         a6:a0:cb:ca:c3:56:70:4d:c6:13:36:2e:9a:73:e2:eb:2c:f1:
         ec:56:b3:43:4f:64:1a:bb:07:ee:e7:e8:00:c9:f6:84:c9:d9:
         53:20:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:09 2025 by rpki-client