Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa
File:                     34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa (raw, json)
Hash identifier:          Qdy1QzKRsq9JYXWTrNZjwInIzn0toipLNQD8MA3MD+g=
Subject key identifier:   2B:A6:49:E0:0E:D5:F3:DE:2F:AC:BC:54:E6:8E:19:FA:A0:8D:02:9E
Certificate issuer:       /CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A
Certificate serial:       09F35FB71A6B423C605771E730116759E5030AB7
Authority key identifier: 88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa
Signing time:             Wed 08 Oct 2025 19:23:14 +0000
ROA not before:           Wed 08 Oct 2025 19:18:14 +0000
ROA not after:            Wed 07 Oct 2026 19:23:14 +0000
asID:                     268923
IP address blocks:        45.175.244.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl
                          rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f3:5f:b7:1a:6b:42:3c:60:57:71:e7:30:11:67:59:e5:03:0a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A
        Validity
            Not Before: Oct  8 19:18:14 2025 GMT
            Not After : Oct  7 19:23:14 2026 GMT
        Subject: CN=2BA649E00ED5F3DE2FACBC54E68E19FAA08D029E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:89:cf:a0:12:d1:89:47:7d:bc:08:33:22:
                    d3:d8:d0:9b:c3:de:78:9d:f5:6a:63:d1:9b:07:a3:
                    ae:f8:14:e5:b0:4d:28:91:5a:44:bc:a6:f1:b6:43:
                    d4:04:96:68:26:48:9f:cf:5d:b6:75:37:68:8d:ed:
                    15:5e:07:09:02:4d:ba:15:19:13:88:df:75:d1:3b:
                    43:45:4f:ff:79:a7:22:77:b2:1d:ba:b0:7e:d3:c6:
                    ef:65:02:61:ca:0f:d1:f0:5b:56:1a:13:c3:4e:fb:
                    fa:4d:c7:ee:f2:0d:a5:fd:c9:fa:56:79:5d:74:fb:
                    46:b3:a2:62:51:30:c2:9f:2f:bd:3b:40:7e:da:33:
                    5e:a4:d6:fb:72:56:93:11:d6:f0:d9:52:13:61:e7:
                    a3:18:82:df:e7:c6:c4:71:f5:84:5a:a1:a5:7e:30:
                    3a:0c:ab:45:57:7e:29:b4:e5:3f:bd:76:4e:23:b1:
                    69:37:77:42:7f:7e:f5:49:12:74:d5:f5:f4:09:61:
                    b0:fd:6a:87:09:f6:13:e4:ce:fd:5f:24:26:00:4a:
                    ea:9d:1d:98:b4:20:6f:dc:79:ca:7d:f3:25:ae:f9:
                    68:51:d3:fd:bb:79:4a:16:d4:5d:ab:f0:0a:3d:b0:
                    2d:66:9f:69:fc:72:b8:8e:8d:e3:12:2e:bd:7e:c3:
                    e8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A6:49:E0:0E:D5:F3:DE:2F:AC:BC:54:E6:8E:19:FA:A0:8D:02:9E
            X509v3 Authority Key Identifier:
                keyid:88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:40:a6:a1:c2:d8:46:eb:ef:65:bd:29:89:a5:f8:dd:ea:fb:
         d7:c9:49:07:d0:0b:f5:35:81:f1:82:a0:0a:6e:f1:08:07:09:
         e7:45:35:b5:bb:b4:04:6f:e4:a1:92:37:76:04:df:08:5e:f6:
         90:3f:80:f2:0c:62:45:64:5e:7a:f9:15:59:6c:10:68:04:bb:
         88:6a:d2:da:38:02:7e:23:c9:cf:0a:94:32:fd:30:27:2c:a6:
         62:d3:c1:3d:90:e1:18:c5:73:d9:2a:c6:e0:fe:b2:68:5d:cb:
         03:34:74:46:28:77:a1:10:fe:4b:45:83:06:17:38:5e:31:fe:
         35:59:7c:ec:dd:36:8e:84:49:7b:c1:7e:f3:c7:34:3d:22:84:
         0d:03:3e:b2:59:df:f5:0c:12:4a:c1:38:c9:ed:16:18:8e:d2:
         09:2c:2e:58:dc:94:06:9d:bf:e4:8b:43:5b:c2:2a:55:f0:7f:
         5c:96:ce:39:b8:c6:b3:ca:4f:fb:b0:50:04:74:c0:48:d0:eb:
         d1:ea:10:3d:54:92:94:71:e1:fb:2f:94:d3:15:b9:4d:71:b2:
         c4:f9:03:33:e4:70:c3:54:8e:d5:26:b3:54:03:a1:29:6d:51:
         73:f8:2f:e4:2e:e2:d7:bc:e5:13:4d:28:f6:14:44:9e:36:9b:
         44:98:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:30:40 2025 by rpki-client