Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e312e302f32342d3234203d3e20323637353536.roa
File:                     34352e37302e312e302f32342d3234203d3e20323637353536.roa (raw, json)
Hash identifier:          9nB5sU7k5Yz4ppGlsNxTBrrcosbo+i17ILeYb6ZxymE=
Subject key identifier:   C2:A5:2C:A0:41:E0:BB:E8:D8:68:82:00:BE:BD:E6:35:06:15:DB:AC
Certificate issuer:       /CN=E6ADE5BD27A972136168D70B5010155F1247CB71
Certificate serial:       393E1309E6EDA92521587985E0CEAB858B89D71F
Authority key identifier: E6:AD:E5:BD:27:A9:72:13:61:68:D7:0B:50:10:15:5F:12:47:CB:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e312e302f32342d3234203d3e20323637353536.roa
Signing time:             Sun 12 Oct 2025 20:24:28 +0000
ROA not before:           Sun 12 Oct 2025 20:19:28 +0000
ROA not after:            Sun 11 Oct 2026 20:24:28 +0000
asID:                     267556
IP address blocks:        45.70.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3e:13:09:e6:ed:a9:25:21:58:79:85:e0:ce:ab:85:8b:89:d7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6ADE5BD27A972136168D70B5010155F1247CB71
        Validity
            Not Before: Oct 12 20:19:28 2025 GMT
            Not After : Oct 11 20:24:28 2026 GMT
        Subject: CN=C2A52CA041E0BBE8D8688200BEBDE6350615DBAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:da:c5:be:bc:a0:9f:bc:40:6d:7d:9d:e1:
                    41:d0:46:c7:3a:39:50:70:89:cf:e3:bf:95:38:86:
                    90:b2:0c:f7:8a:be:68:fa:f1:4a:02:7a:b2:76:19:
                    b7:90:c0:ae:8d:c1:17:4c:64:90:b9:5c:13:f6:37:
                    95:14:a3:92:4b:47:24:3b:0e:b5:8a:3b:e6:12:ed:
                    58:e5:b8:c0:14:8b:6d:ea:ea:5a:bd:e1:df:97:55:
                    11:1c:40:f8:dc:72:cb:08:53:12:5f:e4:94:56:ad:
                    7c:52:a2:fe:64:ec:df:03:75:75:86:f2:e5:a5:51:
                    bf:59:38:ea:5a:4a:4f:44:57:63:c6:f3:e2:c9:07:
                    a6:37:5f:7a:c8:64:62:47:da:50:29:35:96:53:81:
                    31:1f:fe:a6:1b:de:06:19:ec:bd:48:c9:a8:04:1d:
                    88:62:48:e4:4b:b9:9a:39:b5:df:66:b2:0a:bd:51:
                    97:0b:89:28:86:cc:b8:4e:f1:ed:7a:81:1f:ef:26:
                    d6:66:6a:39:9f:ab:e9:6f:fd:eb:25:aa:70:31:43:
                    c0:4d:df:e2:b5:9a:1c:cc:47:b5:58:cd:ba:a6:9d:
                    c1:fa:bf:97:0a:5f:19:a9:30:7e:67:df:4b:0b:63:
                    15:76:00:2d:47:04:06:9a:1c:3e:04:33:a9:01:a9:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A5:2C:A0:41:E0:BB:E8:D8:68:82:00:BE:BD:E6:35:06:15:DB:AC
            X509v3 Authority Key Identifier:
                keyid:E6:AD:E5:BD:27:A9:72:13:61:68:D7:0B:50:10:15:5F:12:47:CB:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e312e302f32342d3234203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d0:e9:34:96:21:60:65:af:21:d3:a6:8c:c7:6a:99:80:be:
         8b:54:2d:92:b0:85:24:50:4b:3e:60:3c:0b:a7:4b:be:eb:e9:
         16:77:d3:a7:f2:34:d8:c5:82:76:3a:c6:64:fb:c6:82:85:b7:
         83:c9:42:cb:87:dd:61:20:56:2c:d8:b3:38:07:ed:14:76:e8:
         9c:9d:a5:bf:ff:e3:e0:3d:0f:97:33:1a:1c:f3:df:28:69:ad:
         0b:b1:38:90:55:0a:a1:f9:28:ac:59:92:a5:2d:46:ed:f1:73:
         37:18:e7:13:59:a2:3e:64:33:b5:3d:bf:92:28:a3:e8:c3:2b:
         30:df:03:89:15:2e:a3:e4:ed:03:23:29:14:7f:9a:17:37:97:
         66:c4:a7:98:11:4c:55:2f:eb:29:bb:dd:e9:ab:12:6a:1f:72:
         9d:2c:bf:7c:65:e3:09:83:01:56:9d:2c:01:90:dd:00:5b:39:
         6f:83:0d:87:7c:b6:67:15:94:1f:de:2c:ba:11:50:9a:89:0a:
         7b:f8:db:22:2b:37:b1:95:b9:0a:9f:fa:86:11:ed:b8:e8:83:
         09:94:a2:cd:c7:24:52:3f:16:30:8e:26:33:42:18:73:16:9a:
         a3:1c:9c:44:5c:b2:36:ae:49:21:d1:38:18:98:3a:19:da:db:
         1c:9a:d6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:49 2025 by rpki-client