Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32322d3234203d3e20323639343235.roa
File:                     34352e3138362e33322e302f32322d3234203d3e20323639343235.roa (raw, json)
Hash identifier:          WeadiMRWfjBhsWA6ja8oa6XmGnV5Vbx9xZMXwuVLzMs=
Subject key identifier:   89:68:24:8F:C1:3D:8E:D7:03:45:A0:F7:D4:7F:4A:77:05:FE:7F:B8
Certificate issuer:       /CN=F9FFCCDBCA691A6CB21B455057F486C3805DEF29
Certificate serial:       1BF883098BD9140F350181677112C338C1F6710D
Authority key identifier: F9:FF:CC:DB:CA:69:1A:6C:B2:1B:45:50:57:F4:86:C3:80:5D:EF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32322d3234203d3e20323639343235.roa
Signing time:             Tue 14 Oct 2025 16:39:01 +0000
ROA not before:           Tue 14 Oct 2025 16:34:01 +0000
ROA not after:            Tue 13 Oct 2026 16:39:01 +0000
asID:                     269425
IP address blocks:        45.186.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.crl
                          rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f8:83:09:8b:d9:14:0f:35:01:81:67:71:12:c3:38:c1:f6:71:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FFCCDBCA691A6CB21B455057F486C3805DEF29
        Validity
            Not Before: Oct 14 16:34:01 2025 GMT
            Not After : Oct 13 16:39:01 2026 GMT
        Subject: CN=8968248FC13D8ED70345A0F7D47F4A7705FE7FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:80:02:3d:d1:8c:83:f9:0f:62:59:dd:68:
                    ed:a1:cf:85:c1:38:c1:75:56:5b:98:e2:41:2b:79:
                    f9:f1:76:23:d1:2c:f4:fb:ea:0c:5b:65:a5:f0:2d:
                    99:7e:e9:05:fd:e1:71:58:e9:3e:2a:b9:9c:fd:24:
                    97:b7:4a:c5:8c:7c:28:ec:4c:35:8b:30:b8:a7:b4:
                    4b:10:6e:c5:cd:f1:19:8a:82:54:42:86:a5:fc:92:
                    d9:c9:a5:dc:1b:f1:92:4a:d6:a7:cc:6c:0a:ca:31:
                    67:c3:17:7b:dc:2b:9c:3f:46:e9:50:11:27:b2:3e:
                    c0:f6:53:ab:fb:1f:18:67:92:b8:fe:ea:6b:44:bd:
                    9e:0d:7c:da:21:13:63:e8:03:17:d3:e5:26:96:6f:
                    72:cb:33:ed:a9:22:e7:4e:20:ce:a6:fb:25:98:53:
                    e8:3f:a8:bb:89:6a:56:63:86:4e:d2:59:ef:91:f7:
                    d4:ab:80:e2:a2:1a:14:d3:a2:3c:44:bc:66:3e:89:
                    92:88:4a:8a:4d:69:a3:95:ad:72:06:8e:3e:05:d8:
                    48:90:f2:e4:b4:55:00:af:7b:6d:88:8f:f6:41:0a:
                    ed:f4:83:3c:ea:bb:b1:16:2f:3f:b1:58:1e:a3:cc:
                    c7:1c:59:be:5e:18:6e:b0:63:51:66:73:78:d6:3f:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:68:24:8F:C1:3D:8E:D7:03:45:A0:F7:D4:7F:4A:77:05:FE:7F:B8
            X509v3 Authority Key Identifier:
                keyid:F9:FF:CC:DB:CA:69:1A:6C:B2:1B:45:50:57:F4:86:C3:80:5D:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32322d3234203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:13:9a:77:51:d4:88:4d:81:c9:8d:9c:89:24:35:33:2b:94:
         ab:84:0f:32:f4:4c:d9:42:91:42:91:43:93:04:e9:47:79:f6:
         fb:da:66:b3:5c:d6:f7:19:29:75:cf:b1:f5:0e:c4:55:22:09:
         bf:c3:3f:27:6c:92:31:fe:c3:02:67:06:f9:02:95:70:8d:18:
         84:b9:46:3d:63:1c:e6:2b:48:eb:63:30:0e:9f:03:85:f7:2e:
         b0:6b:f0:54:1b:4c:09:e9:b3:14:bf:fe:3c:c0:7b:7c:22:8e:
         a4:3d:fc:bf:98:b7:4c:0d:24:e7:60:17:55:d3:40:4a:7a:ba:
         a5:74:8f:c0:e2:e2:b4:9b:b7:49:2f:8d:86:49:b2:5c:e3:ef:
         6b:03:21:46:e0:a4:f4:01:98:c5:97:01:88:f5:b2:bc:6d:b8:
         4d:ca:75:24:45:20:fc:2a:2e:91:bf:ec:74:5c:38:a4:2f:60:
         0d:ae:c1:83:64:26:4b:77:ad:e3:30:4f:aa:75:da:f9:0f:31:
         19:0b:8a:e8:3b:d4:b4:72:b3:e9:85:04:f9:c0:51:5a:d7:18:
         bc:6f:c3:dc:a7:b0:06:45:04:6d:2e:9f:0b:a8:84:6d:66:17:
         ba:51:19:b1:1a:8e:80:ae:3b:c9:46:28:65:ad:33:fc:bb:75:
         29:dd:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:53 2025 by rpki-client