Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/34352e352e3233362e302f32322d3332203d3e20323636313039.roa
File:                     34352e352e3233362e302f32322d3332203d3e20323636313039.roa (raw, json)
Hash identifier:          rpQMLZb7BcLM7sA1WL+lf/Bek/hzUfkvH81sAwk/erA=
Subject key identifier:   23:39:15:0B:1F:89:D8:ED:FB:36:1D:31:AE:7A:35:04:18:BA:C1:43
Certificate issuer:       /CN=77CCF7DDC54E91B783BD705032C44EBE1A52DAA1
Certificate serial:       77A12187F62C223D037C7958CE2D7692F4925CED
Authority key identifier: 77:CC:F7:DD:C5:4E:91:B7:83:BD:70:50:32:C4:4E:BE:1A:52:DA:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/34352e352e3233362e302f32322d3332203d3e20323636313039.roa
Signing time:             Wed 01 Oct 2025 16:53:04 +0000
ROA not before:           Wed 01 Oct 2025 16:48:04 +0000
ROA not after:            Wed 30 Sep 2026 16:53:04 +0000
asID:                     266109
IP address blocks:        45.5.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.crl
                          rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a1:21:87:f6:2c:22:3d:03:7c:79:58:ce:2d:76:92:f4:92:5c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77CCF7DDC54E91B783BD705032C44EBE1A52DAA1
        Validity
            Not Before: Oct  1 16:48:04 2025 GMT
            Not After : Sep 30 16:53:04 2026 GMT
        Subject: CN=2339150B1F89D8EDFB361D31AE7A350418BAC143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:ae:c1:9f:90:b3:3d:d3:be:b6:40:d2:c0:
                    30:54:ac:ba:4d:24:58:45:90:be:77:3e:38:2a:67:
                    1c:17:2b:1b:c7:a1:17:45:1b:03:84:14:89:61:08:
                    45:67:4c:eb:11:f1:61:6e:7d:7e:b9:f8:bb:10:da:
                    4b:1d:52:33:4d:e8:ad:cb:5d:54:f2:2d:1f:ee:f4:
                    81:0e:40:c8:2b:d2:9b:00:ed:0c:09:bb:dc:99:70:
                    b3:c1:62:5a:f8:15:b3:c3:e7:db:cf:7b:dc:90:a1:
                    29:4f:c2:57:cd:65:34:92:8b:6c:a3:6c:09:69:45:
                    ad:61:5f:ad:ac:06:e4:89:e3:a5:a6:5e:e2:59:2f:
                    b8:bb:6d:ff:0c:67:1d:8c:01:f9:1f:32:c7:ef:f2:
                    90:e6:82:b1:8d:aa:9e:4c:c9:f4:8c:87:14:b1:4d:
                    48:83:b1:cf:72:68:06:13:94:b9:f9:a0:43:ee:d9:
                    34:77:d3:52:71:ed:51:e0:f7:77:42:1b:1c:34:62:
                    94:7a:38:ce:da:2b:77:fc:48:1c:26:ef:33:65:5b:
                    e5:27:9c:b4:62:0e:21:0d:3b:71:4f:9b:33:d1:6d:
                    aa:d4:99:08:b8:86:e5:a3:16:b7:bd:f9:c8:96:72:
                    c8:5c:90:42:c5:ce:b5:14:c6:b3:a2:9c:3d:cb:70:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:39:15:0B:1F:89:D8:ED:FB:36:1D:31:AE:7A:35:04:18:BA:C1:43
            X509v3 Authority Key Identifier:
                keyid:77:CC:F7:DD:C5:4E:91:B7:83:BD:70:50:32:C4:4E:BE:1A:52:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/34352e352e3233362e302f32322d3332203d3e20323636313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:b3:83:b2:c9:ba:52:5a:69:c5:52:38:d7:c3:09:79:13:61:
         14:e6:73:15:2e:02:19:53:f7:d4:15:72:e8:da:b5:41:54:40:
         ad:fa:e8:26:ca:8f:54:39:ce:a6:e0:2f:de:0b:3a:9b:c2:f3:
         82:a0:07:ca:cd:a4:ac:2a:04:fb:d6:49:c6:13:9f:c7:36:2e:
         59:66:6c:72:73:4d:e0:3f:b0:e4:af:81:9c:ae:fd:a0:67:e0:
         ce:27:05:bb:e6:b4:4c:d2:cc:1f:66:ab:a2:20:19:3c:b6:ec:
         f5:29:78:c1:9d:11:86:6b:f1:87:45:81:ef:5d:45:2c:cb:e3:
         78:46:39:a7:3d:bf:e5:20:2b:95:f4:fa:02:35:3f:18:90:e6:
         cf:e6:90:b4:2f:c5:45:77:5b:ca:64:a9:ae:8a:90:a6:a4:d8:
         e3:b6:22:66:9f:72:56:3b:09:81:39:6a:23:81:61:b4:83:2c:
         e8:b1:63:da:2a:48:b8:fd:ae:bc:60:f5:a6:06:33:46:d4:e8:
         db:9c:83:3a:71:8c:7b:33:38:ca:de:37:c4:a0:ff:ad:2a:38:
         de:71:ff:cf:07:62:b6:6a:8a:3d:39:b3:f7:9e:21:74:dd:dd:
         bd:f5:f5:a3:d6:92:70:7a:de:7a:70:16:5d:23:96:b5:9a:68:
         d0:2f:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:27:34 2025 by rpki-client