Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e322e302f32342d3234203d3e20323637353536.roa
File:                     34352e37302e322e302f32342d3234203d3e20323637353536.roa (raw, json)
Hash identifier:          d/cQQhB1i+0uXedmNh/Wh2UOJ7CSjgjq+wKGwY6OcD0=
Subject key identifier:   95:49:A0:85:D5:03:DC:49:47:77:B6:17:AE:0D:16:26:6D:E3:EF:92
Certificate issuer:       /CN=E6ADE5BD27A972136168D70B5010155F1247CB71
Certificate serial:       4E94DB72E7A4FB5AC0ACF54E25D5FDCB9600F58F
Authority key identifier: E6:AD:E5:BD:27:A9:72:13:61:68:D7:0B:50:10:15:5F:12:47:CB:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e322e302f32342d3234203d3e20323637353536.roa
Signing time:             Mon 13 Oct 2025 14:28:23 +0000
ROA not before:           Mon 13 Oct 2025 14:23:23 +0000
ROA not after:            Mon 12 Oct 2026 14:28:23 +0000
asID:                     267556
IP address blocks:        45.70.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:94:db:72:e7:a4:fb:5a:c0:ac:f5:4e:25:d5:fd:cb:96:00:f5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6ADE5BD27A972136168D70B5010155F1247CB71
        Validity
            Not Before: Oct 13 14:23:23 2025 GMT
            Not After : Oct 12 14:28:23 2026 GMT
        Subject: CN=9549A085D503DC494777B617AE0D16266DE3EF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:5c:47:51:66:49:92:a7:4f:b4:93:a3:28:
                    6f:8b:12:60:43:02:e0:8b:0d:4a:09:9f:a1:0d:28:
                    33:25:16:f1:34:0d:d0:0e:cf:49:b5:2c:ba:c4:ea:
                    47:81:eb:52:37:9c:4d:27:d0:8f:f0:89:0f:70:c6:
                    6b:53:b4:b0:56:3e:19:05:59:00:1a:46:a6:18:94:
                    7d:29:23:59:6f:fc:83:10:06:4a:61:ae:15:39:ad:
                    c9:0b:d0:8f:cf:82:a1:3a:65:e2:91:a0:02:ec:b6:
                    e0:03:a5:d7:ae:c6:b9:77:a0:57:0c:0c:c0:e7:39:
                    bc:c7:33:a8:c0:a3:14:a3:47:09:a3:44:77:58:28:
                    c9:b4:5f:c4:0e:39:13:f1:b2:34:03:97:74:5e:1c:
                    f4:a3:2e:40:7d:62:47:0e:1f:a4:14:f5:d3:ca:29:
                    5f:6d:80:d9:dc:f6:6d:87:9f:b2:45:01:ad:e2:54:
                    cc:a2:0f:d7:98:70:48:7e:fa:47:27:01:08:15:1d:
                    99:84:48:e3:05:8f:00:e8:8f:18:b2:c8:04:8e:51:
                    5f:a7:b3:4e:2e:ed:e2:12:2e:4c:c4:2a:0d:e6:35:
                    d0:c1:60:e4:ed:4a:11:c1:32:18:ea:96:ab:fa:4b:
                    04:c8:9a:98:d0:a9:89:33:4a:fc:3a:88:f7:0a:8b:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:49:A0:85:D5:03:DC:49:47:77:B6:17:AE:0D:16:26:6D:E3:EF:92
            X509v3 Authority Key Identifier:
                keyid:E6:AD:E5:BD:27:A9:72:13:61:68:D7:0B:50:10:15:5F:12:47:CB:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e322e302f32342d3234203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:6c:7f:09:02:b8:bf:51:16:bf:17:dc:21:20:db:d4:ec:b1:
         1d:0f:65:15:5d:31:f0:2e:4a:5f:fe:92:c3:c6:d6:c2:d8:7c:
         fc:ce:f2:24:9f:69:23:80:49:7b:a8:b4:75:99:90:75:ae:01:
         7b:00:7c:7b:f6:47:1e:37:05:b6:57:fe:c3:1c:58:42:16:65:
         5e:db:82:37:a0:53:d8:32:19:2d:5f:b0:ad:ca:88:81:e6:09:
         76:2f:83:cb:17:40:40:f9:aa:f0:ca:7e:fa:0f:c5:09:db:58:
         f5:57:36:e9:a5:58:f7:41:a2:b8:cf:c9:23:00:ea:4d:37:6a:
         ff:66:e8:65:a6:9c:90:ef:46:85:24:e9:fc:7a:28:99:12:3a:
         66:5c:18:af:2f:21:fc:81:de:4f:8c:dc:fc:65:9e:a2:d8:d4:
         bc:c5:36:71:73:ee:e4:df:33:08:d6:0c:34:7d:20:d2:f0:f2:
         eb:1d:46:c7:9a:f9:1f:bc:4d:4a:4c:ff:10:62:4c:23:08:1b:
         89:f2:92:59:9e:66:f0:4d:8e:4a:98:70:e4:2a:c2:5f:c8:98:
         69:45:24:54:a2:4d:ff:ab:f1:ea:d9:c7:17:bf:6b:0b:a6:1b:
         6f:98:03:f0:79:5a:d7:4d:b2:40:e1:c1:b0:46:f7:75:04:a7:
         cd:b1:77:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:13 2025 by rpki-client