Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa
File:                     34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa (raw, json)
Hash identifier:          e/EaCM1DU0TLpmK4SEQUW9U1jZHv898vrAXUgF+pTSY=
Subject key identifier:   D0:12:D1:C1:66:B6:1C:4D:04:D2:9E:E5:A6:7B:05:CA:A6:60:D0:0F
Certificate issuer:       /CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
Certificate serial:       2BF972780CFA8541239E88A1BB078C1E8C04DC11
Authority key identifier: FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa
Signing time:             Thu 25 Sep 2025 12:48:30 +0000
ROA not before:           Thu 25 Sep 2025 12:43:30 +0000
ROA not after:            Thu 24 Sep 2026 12:48:30 +0000
asID:                     269024
IP address blocks:        45.178.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f9:72:78:0c:fa:85:41:23:9e:88:a1:bb:07:8c:1e:8c:04:dc:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
        Validity
            Not Before: Sep 25 12:43:30 2025 GMT
            Not After : Sep 24 12:48:30 2026 GMT
        Subject: CN=D012D1C166B61C4D04D29EE5A67B05CAA660D00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3c:7b:63:ab:03:bc:b7:2e:40:58:2a:25:90:
                    95:95:e4:6e:5c:fd:51:eb:f3:aa:06:b7:17:a0:65:
                    2c:e5:1b:f7:1b:38:ee:4e:4f:5d:38:bd:ca:8b:3a:
                    a4:50:b6:71:e4:f1:11:58:c0:0a:e3:66:91:6a:c5:
                    4a:fe:de:0e:ba:b7:c8:37:5a:7f:30:1c:b5:95:e3:
                    68:2e:4e:b3:e3:cc:dc:56:d3:b7:bf:99:70:f7:de:
                    b9:11:a7:40:d6:6f:a2:70:90:2d:49:b3:b4:05:2b:
                    2e:29:60:da:9e:c9:66:65:c6:6a:ed:76:1b:37:b3:
                    bc:94:09:24:4a:08:82:96:fe:97:1c:11:fa:0c:b6:
                    79:d0:70:ce:b7:ff:93:21:77:97:10:6b:5f:70:7d:
                    78:56:ae:81:03:cc:85:f9:e1:ed:7a:cc:36:24:2c:
                    78:2a:48:23:cc:f4:7c:79:72:ea:02:d7:88:3b:77:
                    d2:1b:98:fa:5d:05:4d:90:12:b3:a8:ae:09:8f:0f:
                    1a:82:e5:77:6e:80:e2:58:f9:a8:75:28:5c:15:4e:
                    0d:02:7c:e2:15:be:52:56:08:f8:84:78:94:c8:c4:
                    54:c1:dc:d3:e5:94:fa:d4:28:ae:d5:61:cf:fc:f0:
                    49:f7:e6:ae:8d:76:0f:b8:51:8f:0b:49:6a:92:e8:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:12:D1:C1:66:B6:1C:4D:04:D2:9E:E5:A6:7B:05:CA:A6:60:D0:0F
            X509v3 Authority Key Identifier:
                keyid:FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:18:9b:17:54:99:fa:31:ef:69:fc:0b:59:b5:00:e9:9c:3c:
         d7:45:a9:fb:74:ea:75:df:91:09:55:17:b6:90:49:75:d6:40:
         6f:0d:3a:c5:c5:8d:d7:fa:91:35:c4:d4:83:8a:41:94:a2:81:
         dc:3a:b5:96:d5:1b:9d:8b:f8:10:b5:f2:7a:60:b5:72:b4:07:
         43:cb:33:79:55:83:ac:91:d7:1a:90:2c:52:c0:e0:06:36:ea:
         c9:cf:a2:61:eb:8d:69:0d:3f:54:fd:c3:a8:72:9f:9f:a9:c3:
         2c:36:c7:f3:70:88:25:ca:dd:a3:ce:cb:c8:8f:bf:08:99:df:
         14:ab:6b:43:64:8c:e7:8e:d6:78:7d:46:f4:ce:76:39:41:14:
         53:fb:e7:11:37:7b:f0:a9:8f:1f:88:94:bc:29:d1:42:f9:f9:
         65:52:40:91:9a:29:e2:4c:b7:c5:bd:3b:6f:76:42:cb:22:4d:
         08:d2:dd:ac:09:24:9f:d6:9e:a6:c9:6f:c1:f5:f2:c8:3a:31:
         32:42:21:af:c1:a5:25:9d:b0:24:1b:87:ab:6c:d7:f5:e6:e2:
         a0:97:40:0f:62:f0:56:73:bb:ca:4f:56:1a:33:34:a8:e5:ce:
         cc:00:a4:95:83:fc:4c:1b:2d:07:5d:7e:b5:53:17:a4:5c:6a:
         8c:e6:15:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:56:50 2025 by rpki-client