Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/34352e3232352e3133362e302f32322d3332203d3e20323637303033.roa
File:                     34352e3232352e3133362e302f32322d3332203d3e20323637303033.roa (raw, json)
Hash identifier:          6FczHtkx7T+NSuypo3Fmnb3I+gQoKA0rG1mPUpfm4BQ=
Subject key identifier:   C9:1C:8E:33:3F:9A:BC:F8:25:69:17:16:E7:18:0C:2A:F8:27:CA:DF
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       6666418B1B41889A70E915745A59768805DD0486
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/34352e3232352e3133362e302f32322d3332203d3e20323637303033.roa
Signing time:             Fri 03 Oct 2025 18:17:27 +0000
ROA not before:           Fri 03 Oct 2025 18:12:27 +0000
ROA not after:            Fri 02 Oct 2026 18:17:27 +0000
asID:                     267003
IP address blocks:        45.225.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
                          rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:66:41:8b:1b:41:88:9a:70:e9:15:74:5a:59:76:88:05:dd:04:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Oct  3 18:12:27 2025 GMT
            Not After : Oct  2 18:17:27 2026 GMT
        Subject: CN=C91C8E333F9ABCF825691716E7180C2AF827CADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:07:d1:cf:ff:ab:ac:9c:57:74:1a:e8:00:
                    bc:67:4a:d9:e2:95:36:3c:89:60:67:f3:d8:81:eb:
                    23:d7:70:33:1d:f4:f7:c0:ed:26:b2:ad:6d:51:cb:
                    fd:96:a2:22:f5:7e:83:c7:41:6b:b2:1d:f3:cb:c7:
                    2a:a9:23:20:fa:f9:96:b0:f8:02:d0:b0:90:d0:ad:
                    3d:27:53:77:34:15:ab:8e:70:3b:52:ea:87:d7:36:
                    53:e6:5f:42:68:f3:d1:aa:19:94:96:5e:ef:b8:1c:
                    44:f0:19:83:f0:84:bd:da:33:cd:3d:05:b3:f2:e0:
                    da:4c:b9:32:f1:f8:76:ea:e1:b6:40:0e:05:03:7f:
                    17:0e:fe:76:f4:75:f2:ca:d3:e7:eb:2b:14:68:5c:
                    76:ad:c4:52:f4:e7:ba:6d:3f:f3:b4:a4:37:e6:56:
                    8d:89:fc:7d:55:ce:a4:01:66:68:08:11:21:59:e0:
                    66:57:66:ca:9b:9b:43:06:1d:4a:4c:b7:71:f7:6b:
                    ad:39:24:ec:a9:2d:be:6c:77:1e:6f:ec:32:19:61:
                    6d:80:59:18:d0:94:7c:d8:d1:ad:18:4f:d3:21:2f:
                    75:07:65:50:da:a0:a3:5c:de:63:a0:b4:64:a2:df:
                    13:ae:ae:d6:1c:43:b9:66:8d:47:1b:91:bc:67:ca:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1C:8E:33:3F:9A:BC:F8:25:69:17:16:E7:18:0C:2A:F8:27:CA:DF
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/34352e3232352e3133362e302f32322d3332203d3e20323637303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:54:95:eb:d9:4d:5d:ce:7e:d5:0e:94:bb:e1:70:46:9e:c3:
         88:45:73:75:4d:e6:89:74:b3:08:4e:6a:0e:dd:19:be:9e:df:
         ee:04:4e:7f:df:6a:b8:68:f0:0c:8f:50:0a:f7:ee:cb:41:38:
         8d:fa:45:5b:d6:08:79:b4:67:9d:53:1c:8a:7b:14:44:4c:48:
         1a:c7:50:58:86:5f:b9:be:d3:fa:60:f6:81:f6:81:65:61:5b:
         60:50:9b:68:42:59:5c:1b:be:5d:1b:89:3f:1b:e0:cf:fb:e4:
         09:c1:77:0b:c6:28:84:e5:a4:75:bd:bc:f1:22:13:0d:04:e0:
         cd:58:51:b5:e1:ce:cf:80:57:d3:57:9e:c7:9c:68:e3:ad:a5:
         cd:e1:2b:ad:d7:49:60:c9:f8:70:f4:f5:bc:87:fe:f1:21:a2:
         f3:83:14:d3:76:80:61:bf:ac:3f:4a:2e:65:fd:96:bd:75:72:
         55:3a:30:3e:2b:9e:71:e2:bb:2f:8c:99:dd:de:eb:c0:1a:c7:
         ee:35:30:cb:80:9a:20:0b:1e:39:9f:50:aa:a9:b0:e3:ac:66:
         50:46:bf:1d:dd:94:c5:75:21:33:18:e4:0a:19:40:24:4c:31:
         ef:d5:10:ac:54:d4:b2:c4:80:c9:d1:83:87:14:ed:06:dd:cb:
         9f:64:b3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:31:39 2025 by rpki-client