Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/34352e3137322e34342e302f32322d3332203d3e20323638373432.roa
File:                     34352e3137322e34342e302f32322d3332203d3e20323638373432.roa (raw, json)
Hash identifier:          AH+0k3kT16VbktuSp8Z6wEoaCdndAZdO8NgWANeVBDA=
Subject key identifier:   5B:F4:F5:61:3F:C8:49:1B:9C:6B:52:39:78:5B:64:34:26:7C:80:B4
Certificate issuer:       /CN=6136537D42E8E862CEB8897ED845212938A0952B
Certificate serial:       5ECFCAC67783EF51AABD84780185E008BC1DF734
Authority key identifier: 61:36:53:7D:42:E8:E8:62:CE:B8:89:7E:D8:45:21:29:38:A0:95:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6136537D42E8E862CEB8897ED845212938A0952B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/34352e3137322e34342e302f32322d3332203d3e20323638373432.roa
Signing time:             Fri 26 Sep 2025 23:20:10 +0000
ROA not before:           Fri 26 Sep 2025 23:15:10 +0000
ROA not after:            Fri 25 Sep 2026 23:20:10 +0000
asID:                     268742
IP address blocks:        45.172.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/6136537D42E8E862CEB8897ED845212938A0952B.crl
                          rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/6136537D42E8E862CEB8897ED845212938A0952B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6136537D42E8E862CEB8897ED845212938A0952B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 19:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cf:ca:c6:77:83:ef:51:aa:bd:84:78:01:85:e0:08:bc:1d:f7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6136537D42E8E862CEB8897ED845212938A0952B
        Validity
            Not Before: Sep 26 23:15:10 2025 GMT
            Not After : Sep 25 23:20:10 2026 GMT
        Subject: CN=5BF4F5613FC8491B9C6B5239785B6434267C80B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:a1:0c:5c:97:3f:95:41:f7:e5:2c:c8:83:
                    19:92:55:7c:ee:4a:84:5e:6d:41:a0:eb:46:f5:b5:
                    20:35:68:85:eb:e3:60:fc:9d:01:e4:52:30:94:0d:
                    94:3d:e9:36:d9:3d:0f:0f:89:d0:b3:e9:2b:d7:72:
                    7c:8f:3b:5d:f2:7c:ac:0e:78:b7:9b:48:34:74:61:
                    4b:81:3d:2b:ee:0a:ce:46:fb:f5:e4:95:09:cd:62:
                    db:bf:0b:9b:06:e5:8c:0f:22:61:24:ca:24:ec:58:
                    47:5c:42:16:63:98:f9:55:f0:b5:65:da:8a:82:1f:
                    df:c2:61:2c:04:b3:41:d2:83:2e:34:e7:a5:5a:51:
                    04:2d:93:f0:74:d5:43:88:5f:01:75:ee:4c:1b:95:
                    b2:22:b3:18:4c:20:cf:65:1d:e2:93:15:ad:04:1b:
                    fe:e9:10:4f:19:37:0b:ab:0d:2a:4c:20:d5:1c:63:
                    46:b1:fc:bc:7b:ef:95:6e:8a:9d:91:eb:6e:7c:87:
                    73:88:ea:8f:fa:0d:73:e6:a6:14:8d:a7:85:6d:4c:
                    36:e4:5e:6e:91:75:a9:99:a3:f6:d3:be:f0:b3:d6:
                    b6:14:70:b1:32:a0:7d:c9:45:9b:7d:a6:8c:ed:08:
                    35:bf:3e:8c:02:55:2e:95:df:d4:d4:d3:e9:68:ed:
                    de:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F4:F5:61:3F:C8:49:1B:9C:6B:52:39:78:5B:64:34:26:7C:80:B4
            X509v3 Authority Key Identifier:
                keyid:61:36:53:7D:42:E8:E8:62:CE:B8:89:7E:D8:45:21:29:38:A0:95:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/6136537D42E8E862CEB8897ED845212938A0952B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6136537D42E8E862CEB8897ED845212938A0952B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/34352e3137322e34342e302f32322d3332203d3e20323638373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:87:2b:ea:68:2f:a3:a6:5b:b6:e7:0c:f5:f6:e3:44:c5:f9:
         5d:4e:ee:31:62:d0:a4:47:a8:c2:0a:01:8a:d7:6b:c6:d3:de:
         41:bc:28:c2:0d:dc:d5:85:37:c8:b4:56:f0:d4:09:8e:6b:46:
         62:73:39:92:f9:7f:ab:53:75:73:26:a2:bd:dc:62:34:7a:a8:
         f4:6f:c2:76:d2:11:10:e6:3a:0a:f6:82:2f:30:c6:d0:e0:68:
         7f:fd:9e:2a:30:51:d0:43:b5:57:50:b8:64:8e:21:fb:fc:2c:
         b3:ce:99:35:c3:85:7f:71:04:47:aa:38:7e:83:5a:71:7c:3f:
         96:8f:d4:b5:d2:9a:8a:b8:08:ce:2e:93:d8:55:cc:5a:2a:42:
         1a:3f:cd:8c:87:d4:c4:97:45:6e:d2:5b:42:e9:53:49:3d:2c:
         7d:fb:55:f2:20:da:9e:cf:bc:5a:31:81:b8:b4:49:9b:61:79:
         ea:98:b9:0c:ee:cc:81:b9:aa:1d:f6:fb:f9:30:eb:5a:0b:9a:
         36:7f:32:5d:13:7a:27:de:dd:16:e0:89:85:bc:25:4e:03:1b:
         6e:f0:3f:4e:3c:59:25:5d:bd:0b:08:fb:b0:9f:52:0d:26:b3:
         c6:03:e2:15:5d:4f:84:1f:eb:c2:2f:c1:24:41:e1:a6:a2:a4:
         72:26:4c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:37:29 2025 by rpki-client