Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3139302e302f32332d3233203d3e20323633363635.roa
File:                     34352e3232372e3139302e302f32332d3233203d3e20323633363635.roa (raw, json)
Hash identifier:          PscexAN2NvPbvhyGmVPqoxDbX6c4sd+iUCKklue+mRg=
Subject key identifier:   F7:CD:A3:6B:C8:0B:44:E0:7C:61:7E:9D:A5:4D:7E:CF:0E:F0:B4:7C
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       0447DCE31B8FD3293D7D0ACDD8B3A1EC40FE05A0
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3139302e302f32332d3233203d3e20323633363635.roa
Signing time:             Thu 09 Oct 2025 21:02:31 +0000
ROA not before:           Thu 09 Oct 2025 20:57:31 +0000
ROA not after:            Thu 08 Oct 2026 21:02:31 +0000
asID:                     263665
IP address blocks:        45.227.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:47:dc:e3:1b:8f:d3:29:3d:7d:0a:cd:d8:b3:a1:ec:40:fe:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Oct  9 20:57:31 2025 GMT
            Not After : Oct  8 21:02:31 2026 GMT
        Subject: CN=F7CDA36BC80B44E07C617E9DA54D7ECF0EF0B47C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:94:b3:68:09:22:96:74:1a:96:88:de:9a:
                    17:88:71:20:eb:b1:b4:80:b0:b5:84:7f:30:37:56:
                    05:1a:88:b1:de:92:4b:f1:1e:d9:a2:55:9f:13:0a:
                    77:14:47:2d:78:9b:48:83:29:95:76:c1:d9:e7:61:
                    ea:c2:45:3e:76:84:48:a9:01:2f:c2:c3:d6:f5:e7:
                    26:71:43:9b:f5:89:b2:0e:c4:90:cf:d1:69:6f:08:
                    b1:6d:42:ff:23:e8:1e:75:5e:6d:38:3d:32:b4:cf:
                    ad:bb:6a:f7:b3:9e:c3:59:fb:9a:9b:fb:d2:fe:31:
                    18:2d:a8:ba:29:5b:10:e5:c4:c5:33:1d:90:59:f0:
                    4d:7d:c7:34:34:3c:3b:ad:79:bf:cc:d7:e5:fe:f9:
                    b1:f0:d9:f3:0e:4f:12:b5:ee:b0:e1:43:d4:ac:9d:
                    af:76:e3:b9:68:64:22:ed:05:06:1c:d6:03:67:c2:
                    17:d2:62:90:9c:12:aa:be:b7:78:55:78:48:c9:fc:
                    0c:27:01:fe:3f:e0:d3:3b:ee:ed:f9:c7:88:61:85:
                    b6:a5:2b:44:8c:36:a9:e1:56:cf:bb:62:00:a3:55:
                    d3:71:bb:89:cb:93:8d:4a:c6:91:39:aa:61:e0:81:
                    63:3b:5f:2d:a6:89:fa:75:e5:45:f3:95:5d:9c:9d:
                    ae:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CD:A3:6B:C8:0B:44:E0:7C:61:7E:9D:A5:4D:7E:CF:0E:F0:B4:7C
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3139302e302f32332d3233203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:65:38:e4:8f:e8:49:52:4b:7e:83:2a:79:e5:01:f8:a6:
         cc:bd:4b:01:6f:22:8d:be:c5:df:be:ee:d0:f3:d6:88:72:56:
         97:f0:d2:7a:98:42:02:90:d2:49:ab:11:9a:94:bd:b5:8f:11:
         6e:8b:e7:ff:fc:06:b8:b5:cc:94:aa:0a:7c:b2:bc:fc:d4:52:
         c0:ae:4b:1e:b6:7a:27:cb:93:92:c3:73:00:46:ce:06:dd:73:
         d3:f7:b4:1c:d4:7f:1d:42:6d:36:14:ec:95:36:73:f9:42:75:
         2b:4c:ab:a9:62:3f:7b:02:c6:63:56:f1:c4:91:34:20:96:9a:
         79:80:43:92:5c:4c:a4:56:34:d3:26:26:c3:48:33:be:ab:a2:
         10:33:61:6b:80:a7:2a:ad:dc:44:e3:97:78:27:86:64:f9:ab:
         75:5b:8c:66:7a:8c:31:d4:9c:a0:1e:88:10:97:fd:a0:b1:be:
         76:11:0a:0a:e5:1f:e2:3a:aa:17:68:84:4a:7e:9d:1a:91:79:
         f8:6d:30:8a:85:56:72:a2:db:2c:e2:23:f3:73:23:0b:be:6c:
         d3:4a:5a:e8:34:1d:b4:ea:64:df:0f:ea:82:2e:ab:a6:d5:bf:
         d4:ef:6a:8e:31:dd:17:d6:02:67:2f:64:1c:80:6e:45:25:fe:
         8b:c8:b8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:39 2025 by rpki-client