Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32332d3233203d3e20323633363635.roa
File:                     34352e3232372e3138382e302f32332d3233203d3e20323633363635.roa (raw, json)
Hash identifier:          hT3nsovsnA8bbxMNLvVFGaXhiDR0wLXYuTXeoh3UYE8=
Subject key identifier:   08:A8:33:AB:FF:06:B8:0C:65:3C:7D:14:2A:6F:E0:B6:81:26:39:B8
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       37B96F4CB83786C72E832A8DFE38BF7E14D69E9F
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32332d3233203d3e20323633363635.roa
Signing time:             Thu 09 Oct 2025 21:02:31 +0000
ROA not before:           Thu 09 Oct 2025 20:57:31 +0000
ROA not after:            Thu 08 Oct 2026 21:02:31 +0000
asID:                     263665
IP address blocks:        45.227.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b9:6f:4c:b8:37:86:c7:2e:83:2a:8d:fe:38:bf:7e:14:d6:9e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Oct  9 20:57:31 2025 GMT
            Not After : Oct  8 21:02:31 2026 GMT
        Subject: CN=08A833ABFF06B80C653C7D142A6FE0B6812639B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:4c:3c:77:d8:7d:bd:e6:09:7a:61:b3:43:
                    d5:53:ce:b0:b1:35:3d:40:1c:9d:39:e3:e1:f3:30:
                    41:84:90:cc:fa:ad:f2:28:dd:93:67:b8:17:c2:0b:
                    bc:73:e5:15:4a:d7:74:d7:20:cc:de:c1:30:78:1a:
                    97:bb:54:a8:ed:33:20:50:cc:87:44:fb:dc:fc:e5:
                    0f:f2:e6:b2:39:02:40:33:73:85:51:4c:ca:a6:8d:
                    86:70:3d:81:85:40:a4:75:82:58:e6:51:91:e4:81:
                    63:15:bb:1d:9e:1a:71:2d:58:8e:af:5a:cf:33:2f:
                    cd:78:c9:2d:7d:ef:b0:a2:8d:5f:6d:7d:3b:ad:23:
                    3b:ef:47:82:7f:ff:0e:25:43:af:2d:e2:6e:26:f5:
                    31:4e:2b:2d:06:f6:5a:43:3a:de:43:bd:9b:b9:cf:
                    9a:69:43:2b:6c:a8:75:95:7b:ee:85:c0:39:e5:ce:
                    2e:bf:d0:00:f3:3b:e1:7c:30:c2:f1:f4:3e:62:17:
                    c6:d7:e6:ae:87:c9:2a:ba:f3:58:ab:4c:85:83:20:
                    d6:89:ff:b8:38:6a:60:c6:07:b8:a6:78:c0:3a:f9:
                    00:3b:05:ca:06:50:fc:2d:e4:81:5c:40:4a:7e:a5:
                    e4:f7:00:61:0e:db:2b:1c:9d:e2:17:01:c3:ba:f9:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A8:33:AB:FF:06:B8:0C:65:3C:7D:14:2A:6F:E0:B6:81:26:39:B8
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32332d3233203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:fa:fd:d3:7f:7c:f8:6d:39:0d:c2:7f:f2:23:fc:4c:47:58:
         37:c2:54:80:09:73:49:cd:54:e5:64:fb:40:9d:bf:2f:d3:68:
         31:91:dd:5c:db:8b:53:8a:2c:06:a5:d7:fb:e4:0c:ac:d1:fa:
         39:0f:f4:a6:bb:4d:04:b9:ab:68:43:6e:6a:60:8a:17:1e:1e:
         f2:10:b2:bb:f7:34:4c:1e:f5:00:b5:2e:11:aa:06:8a:05:7f:
         11:5f:68:1b:15:92:00:aa:de:74:42:bb:14:1b:1b:ab:bf:2e:
         c3:40:35:fc:39:be:2e:a6:c4:de:bd:7e:af:f5:15:e6:c1:b0:
         99:92:d5:46:ec:09:06:8c:87:94:7a:47:89:2c:99:b2:e6:49:
         8f:85:11:d1:55:0d:d8:39:58:92:c2:d8:e2:ec:cf:11:e7:96:
         bf:e9:53:4d:2b:aa:6c:98:d0:a0:66:85:f9:89:bd:36:64:55:
         f6:4f:62:8e:59:a9:ed:26:62:6d:45:97:bb:df:82:c3:d1:17:
         6b:61:c3:87:dc:c3:2e:59:f7:b1:11:20:72:37:d0:12:ca:ae:
         37:8f:90:84:70:15:3c:51:d0:56:75:c4:b7:8f:4c:3b:af:6a:
         05:3e:37:ca:c6:9b:9d:b6:85:dd:d0:5a:c8:c4:75:5a:c9:28:
         10:0f:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:43 2025 by rpki-client