Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
File:                     34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier:          oTqSOxtHIGX9rzgFNuE0TTsdTM/349C/i6FaxiQh1jQ=
Subject key identifier:   7E:51:B7:80:FA:8F:3B:5D:42:3B:40:88:CA:4B:F4:00:D7:A8:F0:A1
Certificate issuer:       /CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56
Certificate serial:       3989E0BAB1D33E32F9374E2AB262037022A8F5D6
Authority key identifier: 9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
Signing time:             Wed 01 Oct 2025 12:50:26 +0000
ROA not before:           Wed 01 Oct 2025 12:45:26 +0000
ROA not after:            Wed 30 Sep 2026 12:50:26 +0000
asID:                     262899
IP address blocks:        45.165.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl
                          rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 08:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:89:e0:ba:b1:d3:3e:32:f9:37:4e:2a:b2:62:03:70:22:a8:f5:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56
        Validity
            Not Before: Oct  1 12:45:26 2025 GMT
            Not After : Sep 30 12:50:26 2026 GMT
        Subject: CN=7E51B780FA8F3B5D423B4088CA4BF400D7A8F0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:bd:43:2a:74:1d:74:42:19:cc:06:da:ea:
                    53:e8:6d:3f:ef:07:45:85:ba:86:7b:c2:95:00:9d:
                    0b:97:25:51:00:57:48:c7:40:8f:b3:e3:b7:75:58:
                    2f:4e:00:ea:71:ad:f6:03:a7:2e:b8:e0:37:89:37:
                    9c:58:8e:ec:11:31:a1:9b:e1:8b:b9:fb:70:1c:3a:
                    70:dd:11:48:7f:ed:69:87:4f:6f:1c:be:1a:fd:22:
                    33:70:61:6f:39:6b:5a:64:3c:bd:af:bf:1c:65:53:
                    c4:d6:f1:e1:e4:c7:7f:19:95:a4:15:df:92:82:7e:
                    85:45:4f:67:6a:bf:24:45:5c:45:61:2f:c1:de:40:
                    e9:f1:f9:cf:0a:ec:46:c3:f0:75:9a:e0:96:53:50:
                    b7:66:b5:09:d3:a4:25:c8:10:eb:37:80:d2:80:08:
                    6f:81:46:cb:6b:60:ad:2a:94:d3:7c:82:10:f3:c9:
                    4e:ff:68:1b:c1:cf:58:0b:da:3c:1a:20:e8:d2:08:
                    a5:c9:04:ef:f5:f7:7a:7a:97:ff:62:7c:bb:70:fd:
                    e4:1b:18:ff:bc:95:8e:e3:c4:09:c7:77:d7:b4:26:
                    b0:6f:22:cd:b2:77:bc:30:45:7a:71:bd:e6:ef:9f:
                    35:3e:87:de:58:8a:7b:7f:ef:b7:c9:0e:9a:cd:44:
                    9b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:51:B7:80:FA:8F:3B:5D:42:3B:40:88:CA:4B:F4:00:D7:A8:F0:A1
            X509v3 Authority Key Identifier:
                keyid:9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:98:4c:f7:76:26:d5:aa:a5:ed:14:59:36:c5:be:06:9e:89:
         33:8b:54:49:2a:c1:74:68:f0:5a:b1:c7:06:9b:ba:41:89:9e:
         73:4f:83:f5:58:c1:66:51:51:db:c5:40:d5:86:0a:ca:c8:78:
         75:fd:0d:93:31:37:34:5a:dd:c1:79:8e:a6:b1:91:f4:21:f1:
         fb:38:8b:d2:03:b3:06:a6:b1:ea:d5:b6:2f:d7:20:14:c0:25:
         38:7d:2e:9a:f8:36:79:8b:e9:79:96:49:76:32:23:de:f8:a1:
         8f:7a:0b:b5:e4:a9:30:74:ca:b4:9c:af:c5:09:65:9a:53:5e:
         bc:7c:ba:07:f5:a1:1d:4a:17:dd:07:40:5b:4b:96:34:81:d4:
         d7:37:94:c8:9b:1e:d0:95:ea:2b:4b:63:e6:ef:49:8a:0c:ba:
         af:22:07:2e:7a:8b:03:f0:7b:9f:44:99:d9:a5:e7:23:a8:79:
         e4:db:26:3c:f8:88:7e:e0:fa:fc:2d:6c:66:37:36:11:3d:cd:
         bd:9a:82:96:7d:d7:db:71:1e:d5:2d:5f:04:04:0a:8e:34:36:
         e4:50:eb:92:6f:ad:5e:7f:d2:e3:60:11:13:27:42:e4:51:d1:
         0f:ef:1d:d7:da:e3:0d:92:44:9a:c7:47:b6:85:84:22:1f:ad:
         2d:78:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:42:13 2025 by rpki-client