Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32342d3234203d3e20323639303733.roa
File:                     34352e3137392e33362e302f32342d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          /McNxK5flM/B5/fJ7iPiae/d0RZ980Ip3N+49Yj6GJk=
Subject key identifier:   70:F5:9D:0C:AB:D7:AD:B0:79:F3:92:04:A5:CA:9C:61:05:A5:64:FA
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       4A05D45245783959E31C4075DFC6BE6A19DC69D4
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32342d3234203d3e20323639303733.roa
Signing time:             Tue 23 Sep 2025 15:19:30 +0000
ROA not before:           Tue 23 Sep 2025 15:14:30 +0000
ROA not after:            Tue 22 Sep 2026 15:19:30 +0000
asID:                     269073
IP address blocks:        45.179.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:05:d4:52:45:78:39:59:e3:1c:40:75:df:c6:be:6a:19:dc:69:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Sep 23 15:14:30 2025 GMT
            Not After : Sep 22 15:19:30 2026 GMT
        Subject: CN=70F59D0CABD7ADB079F39204A5CA9C6105A564FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8d:e4:57:a5:09:56:61:b9:13:ef:62:99:fc:
                    72:b4:b5:2b:27:0f:fb:f6:62:72:78:bb:ea:20:18:
                    25:55:ba:73:40:8f:21:bf:72:e9:ef:d7:1c:12:17:
                    e2:ed:20:27:a5:c8:f6:8f:02:6c:70:6a:c1:cc:b8:
                    09:4d:28:da:65:0b:38:82:44:b2:ad:45:a2:5c:77:
                    f8:73:75:80:8c:d8:1d:09:83:1a:ca:bd:ce:58:7b:
                    3e:dc:ba:5b:fa:68:7c:95:29:54:0d:eb:e7:55:aa:
                    df:48:b9:16:17:1e:04:cf:45:94:c0:4b:e1:33:ab:
                    c7:50:a6:73:08:a7:36:21:c1:36:8b:77:5b:25:dd:
                    f4:e6:e2:45:7c:d4:6f:4f:86:db:c8:c8:46:26:b2:
                    b1:9b:b3:29:47:1d:40:02:01:3e:c7:c9:76:7b:d1:
                    fe:17:3c:e2:9a:c0:10:c8:ad:38:fe:b1:3c:08:f3:
                    c3:7d:d6:4d:bd:61:11:aa:fa:c7:79:77:25:e1:58:
                    91:c3:9a:7f:1e:e9:10:32:57:39:23:b0:aa:92:6d:
                    20:a3:28:60:07:40:5d:3c:64:dd:93:11:b4:43:35:
                    11:3c:69:59:d6:93:99:e0:9f:bc:f5:27:cd:fd:50:
                    99:63:b9:90:4b:00:1b:8e:cf:6b:75:e5:1a:d3:4a:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F5:9D:0C:AB:D7:AD:B0:79:F3:92:04:A5:CA:9C:61:05:A5:64:FA
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32342d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:c2:9a:36:61:c5:3a:ed:77:87:6f:29:b7:c9:56:43:00:
         b2:3f:82:8c:86:3a:70:b3:06:43:c5:bf:5a:08:88:fc:a7:64:
         4a:89:74:17:ad:85:c1:06:c2:3a:b0:50:38:2f:23:79:10:d4:
         8a:97:98:1c:05:95:6d:64:3f:9a:7e:eb:0c:33:10:39:1d:1b:
         7e:d0:1d:5d:f3:73:d6:b3:cf:ae:64:58:14:ea:47:48:e7:38:
         89:aa:70:04:3e:40:c8:cd:95:46:d8:99:4f:1a:d3:e4:e9:b0:
         e2:0f:6d:73:45:4e:41:9f:7a:2c:fd:4d:3e:bc:76:25:8d:08:
         ca:79:ba:0e:f7:89:e6:9b:40:0c:71:9f:b8:2f:5c:dc:f0:60:
         53:4b:bc:3d:b7:3b:05:69:76:9a:ec:46:af:9e:fe:6e:1e:ac:
         b3:da:19:a0:48:56:63:1d:93:f9:8f:13:58:51:f5:68:3f:a4:
         e2:b3:7d:83:ba:f8:ea:fa:cb:49:6b:75:10:4d:d0:4b:5a:dd:
         8c:6d:ea:0e:2a:78:09:9c:5e:2e:fc:29:10:dc:b1:84:da:19:
         82:e4:f7:eb:de:be:e1:c2:23:b1:f9:a0:c9:a5:50:55:f1:cc:
         9e:01:6a:65:3f:0a:6f:8d:fc:b1:ad:fd:67:0f:d1:d1:d9:86:
         fe:5d:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:03:18 2025 by rpki-client