Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
File:                     34352e3136352e32302e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          BVb/jut+C8eFviVFvuM2ltcqqqT+gQY09gWhdSqJwbM=
Subject key identifier:   4B:BB:58:28:CE:C6:05:9D:78:93:3A:87:62:19:65:72:39:01:83:52
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       4E5FB8F8C6A812795B35BAAA968BAC2838584488
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
Signing time:             Thu 09 Oct 2025 21:02:31 +0000
ROA not before:           Thu 09 Oct 2025 20:57:31 +0000
ROA not after:            Thu 08 Oct 2026 21:02:31 +0000
asID:                     263665
IP address blocks:        45.165.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5f:b8:f8:c6:a8:12:79:5b:35:ba:aa:96:8b:ac:28:38:58:44:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Oct  9 20:57:31 2025 GMT
            Not After : Oct  8 21:02:31 2026 GMT
        Subject: CN=4BBB5828CEC6059D78933A876219657239018352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:09:f2:22:a2:ed:cb:cd:a9:78:d2:99:96:
                    d4:48:df:ad:91:20:72:38:48:d8:4f:f7:7a:da:be:
                    0b:cc:29:44:d9:41:b4:0b:cf:b3:72:68:a5:ee:b6:
                    5d:f0:9a:e6:68:f5:80:9e:d6:2f:55:6e:a1:0f:f3:
                    ad:39:d9:91:9d:f3:dd:b1:51:0c:86:66:da:1f:eb:
                    97:96:69:40:56:aa:41:5c:f0:ef:c7:0c:df:42:a0:
                    82:05:d8:9f:d6:bb:b9:97:e5:2f:d0:1a:3f:81:62:
                    a2:7c:95:d4:1a:64:a2:71:e2:49:26:df:85:37:9d:
                    d7:95:5f:29:39:f1:c0:8c:a1:9c:6a:7f:4b:77:3b:
                    3b:f3:94:8a:35:d1:f7:46:14:7f:55:aa:18:db:50:
                    ee:6e:0e:6f:ba:2b:47:7b:5c:d7:74:e4:ec:86:c5:
                    df:b6:b6:2a:9c:49:27:94:28:69:8d:ef:c1:a8:39:
                    6c:b3:3a:f4:da:4c:a8:3c:ec:d0:09:88:f4:9e:1e:
                    5a:74:29:c1:3f:7c:17:ea:98:51:6e:17:f8:8a:7e:
                    5a:f1:e9:25:75:8b:76:0e:cb:ce:e0:1b:86:83:8c:
                    76:bb:11:e1:b8:60:c0:f7:59:c3:42:b6:fa:2b:a1:
                    2a:80:a0:de:8e:57:e3:5c:0b:4b:d0:8c:4e:e3:9d:
                    44:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:58:28:CE:C6:05:9D:78:93:3A:87:62:19:65:72:39:01:83:52
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:0a:fa:d3:d7:74:02:82:3a:2d:81:1f:ad:e4:4d:87:d8:c2:
         fd:50:1e:50:35:47:82:f2:19:05:e2:6a:57:b4:86:a6:55:d9:
         b9:30:bd:32:b3:ac:52:c1:0b:e5:c2:1f:7c:c2:ee:20:df:7b:
         68:d8:16:01:b7:87:4f:8a:90:ec:28:36:85:43:a2:cc:0b:2e:
         8a:99:19:b4:a7:ed:f0:ed:53:bd:da:d5:8f:3d:94:06:0b:ea:
         fe:c0:68:7f:83:a1:03:d5:4b:47:81:49:d4:a9:1c:26:47:80:
         85:d8:48:b8:57:7e:b6:a8:14:54:7b:5d:e7:44:3a:ba:51:7e:
         77:3b:64:e4:f4:cb:91:e9:78:fe:e4:6e:8b:ac:c2:bd:c5:fb:
         77:b9:fc:cd:6d:09:33:43:27:84:fa:12:ad:68:47:35:9a:41:
         1d:14:7b:d7:b8:17:1c:ed:81:04:11:05:07:b2:a1:e7:6c:6a:
         af:86:db:4b:7e:1c:bf:31:f3:6b:1e:a2:42:0d:d2:c4:c6:06:
         c4:00:c9:fd:ea:ce:bf:27:ab:98:0d:20:d8:7e:92:d5:3b:7a:
         4c:ed:be:92:79:d6:24:cd:5e:3a:ff:21:a6:27:77:5c:c8:e0:
         25:75:81:67:8a:59:d8:97:3b:71:ce:00:e6:6e:ae:c7:cd:2c:
         b3:1e:64:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:43:57 2025 by rpki-client