Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32332d3233203d3e20323637353536.roa
File:                     34352e37302e302e302f32332d3233203d3e20323637353536.roa (raw, json)
Hash identifier:          kitdN0kz5OHWfesd2CRzrSqtdFH6v1x5PEBesUKC/+Q=
Subject key identifier:   0A:9D:9B:A7:57:B8:C0:39:5A:5E:24:9B:98:CF:55:E1:48:F3:D4:A7
Certificate issuer:       /CN=E6ADE5BD27A972136168D70B5010155F1247CB71
Certificate serial:       3B12C953750D83A7C9ED0566960B8BC4C05D9C5A
Authority key identifier: E6:AD:E5:BD:27:A9:72:13:61:68:D7:0B:50:10:15:5F:12:47:CB:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32332d3233203d3e20323637353536.roa
Signing time:             Sun 12 Oct 2025 20:24:20 +0000
ROA not before:           Sun 12 Oct 2025 20:19:20 +0000
ROA not after:            Sun 11 Oct 2026 20:24:20 +0000
asID:                     267556
IP address blocks:        45.70.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:12:c9:53:75:0d:83:a7:c9:ed:05:66:96:0b:8b:c4:c0:5d:9c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6ADE5BD27A972136168D70B5010155F1247CB71
        Validity
            Not Before: Oct 12 20:19:20 2025 GMT
            Not After : Oct 11 20:24:20 2026 GMT
        Subject: CN=0A9D9BA757B8C0395A5E249B98CF55E148F3D4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:30:1f:20:c8:4d:d4:fc:5d:b5:69:51:31:
                    ae:a8:a3:3d:91:07:42:65:c1:87:8d:3d:50:0e:91:
                    78:1b:33:29:85:74:09:e1:66:bb:5a:76:4e:30:c9:
                    77:80:5e:71:57:56:8e:ea:af:dd:75:4a:d8:14:f3:
                    a2:56:0c:e7:86:e1:fd:c1:b7:8b:12:0a:c9:e6:f4:
                    a6:ee:24:bf:2f:06:c2:25:0b:97:13:63:5b:5f:86:
                    d9:fb:6a:36:bd:80:ca:e4:f2:dd:83:71:0b:f1:2a:
                    15:93:fa:0d:42:15:1c:5c:1b:fd:e3:88:39:0a:ef:
                    a2:fe:b1:87:55:8c:b4:9f:cd:85:e9:7f:24:c7:56:
                    26:d2:4c:ca:1c:e7:f4:67:af:25:cf:63:50:33:f7:
                    73:9f:73:dc:68:3e:4b:8f:b6:d7:d8:d6:30:d5:74:
                    7b:73:6d:e9:47:52:4c:31:70:7f:01:c9:e7:e9:49:
                    24:21:23:e5:ca:79:ab:e6:24:93:61:9f:19:fc:73:
                    dd:6f:e5:f1:52:cb:bc:3c:23:29:20:63:80:82:cb:
                    36:13:aa:7a:db:79:42:f3:62:da:fa:a3:bc:1c:d2:
                    a1:40:cf:d4:71:d5:1f:c0:92:09:b0:5e:d5:8e:f6:
                    1e:16:1f:05:4e:4e:0b:10:0f:d9:f4:02:d2:23:40:
                    2c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9D:9B:A7:57:B8:C0:39:5A:5E:24:9B:98:CF:55:E1:48:F3:D4:A7
            X509v3 Authority Key Identifier:
                keyid:E6:AD:E5:BD:27:A9:72:13:61:68:D7:0B:50:10:15:5F:12:47:CB:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32332d3233203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:ee:1f:fb:91:45:69:94:41:82:a0:be:d9:54:01:75:24:a9:
         70:85:c4:2e:e5:58:a7:37:c5:7f:2f:70:60:6e:dd:08:a2:89:
         4b:fc:5b:d1:44:13:07:4b:b7:ef:f3:b4:2c:10:2e:0c:72:b9:
         2d:a6:80:74:7f:56:90:36:f2:fe:f5:74:13:01:ee:cc:42:5d:
         e4:9b:50:45:b3:90:3d:c4:6a:ed:ed:0f:2e:f1:a7:42:57:07:
         db:41:bb:83:07:44:0a:3c:bd:16:38:3d:51:63:ce:c6:0a:83:
         04:44:22:16:94:7a:b6:e7:84:0e:d4:ee:aa:7d:4f:4a:da:09:
         35:ce:2d:bb:f8:37:9f:4b:3a:1c:bc:1b:d0:79:1d:1c:11:06:
         6a:4f:10:bc:4e:22:97:da:66:c3:17:e8:71:f9:c1:b4:fd:f2:
         a5:b0:37:0a:8b:91:1b:82:b5:b0:7c:3d:7b:88:60:f7:b9:31:
         e2:ca:8b:5a:cf:e9:cc:65:57:87:fe:ad:b0:bd:79:8f:0c:28:
         a5:33:c6:d7:81:a3:70:95:ec:a2:a9:21:12:61:ab:e0:cd:21:
         9b:0b:e9:90:10:5f:6c:75:a6:6d:46:f1:4c:21:4c:24:c3:03:
         fb:bb:22:fe:57:b6:d5:9f:58:f3:c2:84:e0:c9:3d:b8:1b:eb:
         30:b1:d7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:09 2025 by rpki-client