Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e332e302f32342d3234203d3e20323637353536.roa
File:                     34352e37302e332e302f32342d3234203d3e20323637353536.roa (raw, json)
Hash identifier:          fA5conTnYVUBPekz8qhI9CmbmqnuKcwr0da4v9W/mR0=
Subject key identifier:   F5:23:D1:CB:B0:99:E3:91:C1:67:03:F8:F6:5A:40:3B:34:21:21:70
Certificate issuer:       /CN=E6ADE5BD27A972136168D70B5010155F1247CB71
Certificate serial:       1A82DAC4AFE8DEA1DB0816969E73AD843550D71D
Authority key identifier: E6:AD:E5:BD:27:A9:72:13:61:68:D7:0B:50:10:15:5F:12:47:CB:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e332e302f32342d3234203d3e20323637353536.roa
Signing time:             Sun 12 Oct 2025 20:24:43 +0000
ROA not before:           Sun 12 Oct 2025 20:19:43 +0000
ROA not after:            Sun 11 Oct 2026 20:24:43 +0000
asID:                     267556
IP address blocks:        45.70.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:82:da:c4:af:e8:de:a1:db:08:16:96:9e:73:ad:84:35:50:d7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6ADE5BD27A972136168D70B5010155F1247CB71
        Validity
            Not Before: Oct 12 20:19:43 2025 GMT
            Not After : Oct 11 20:24:43 2026 GMT
        Subject: CN=F523D1CBB099E391C16703F8F65A403B34212170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:1d:08:e1:3b:e0:fb:fb:ec:30:76:08:4a:
                    b1:56:44:96:2f:bc:eb:56:83:30:97:dc:b5:26:76:
                    d7:5c:5d:98:ab:53:d5:2b:f2:db:33:21:bb:df:26:
                    b8:30:b8:11:c0:a3:ef:56:ae:b1:32:18:c9:d4:53:
                    42:8c:52:54:47:6d:99:56:97:82:0e:19:06:b0:61:
                    b4:ab:15:49:30:5a:9f:24:0d:a2:b5:64:48:c5:57:
                    a1:c2:af:3d:66:5c:c2:5e:bf:eb:d8:be:41:73:16:
                    d3:bd:f9:4c:a5:54:d0:00:da:ea:3f:5c:94:e5:e7:
                    6d:05:2d:de:1f:2f:9b:c5:31:0b:91:c5:13:df:30:
                    f4:fd:f0:95:8f:8f:1e:b6:97:9b:5f:7d:b5:88:d2:
                    52:24:d6:1e:22:ae:1c:89:a3:8b:dc:7b:b2:41:d7:
                    ff:9e:57:72:4e:3b:a0:68:8a:ff:8d:ef:33:e6:17:
                    b7:c8:f8:59:fb:c4:75:a8:cf:27:60:d0:5b:89:64:
                    c5:8c:75:a6:96:05:d1:1b:9e:db:91:d5:df:f8:7e:
                    da:00:33:47:16:4b:db:61:70:72:ce:01:52:5c:95:
                    9c:4f:78:b4:35:07:55:58:ac:94:ac:87:71:12:ea:
                    d0:4b:62:30:54:d1:6a:5b:b2:cf:3c:02:d5:d0:6b:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:23:D1:CB:B0:99:E3:91:C1:67:03:F8:F6:5A:40:3B:34:21:21:70
            X509v3 Authority Key Identifier:
                keyid:E6:AD:E5:BD:27:A9:72:13:61:68:D7:0B:50:10:15:5F:12:47:CB:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e332e302f32342d3234203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:e8:d2:5e:de:e5:f8:31:13:63:6a:5e:a8:11:80:58:11:
         a9:62:f4:81:4f:3d:55:e2:ee:07:1d:2b:14:99:f1:82:a9:cd:
         e0:3f:83:6e:6c:c1:36:39:0c:67:21:66:a6:40:dc:e1:11:77:
         7e:d8:7b:24:ab:de:69:36:66:ce:16:01:95:d6:f2:8b:32:90:
         45:83:31:b4:b9:42:d4:8e:6c:bd:6d:01:7e:0c:c8:ae:93:4d:
         1f:9b:75:f3:bd:78:e9:e5:ad:4e:c6:58:76:e1:11:22:46:2e:
         c3:9a:3a:82:07:b4:ed:25:ff:53:43:56:0f:86:ec:d8:e7:f0:
         9e:9e:55:c5:c3:1a:3d:93:91:bd:25:69:fc:c1:b1:1e:32:cf:
         dc:7c:0a:f7:bf:b3:ef:77:c6:f8:bc:20:8e:13:02:ff:09:bc:
         d8:c9:37:55:2a:d2:fd:05:8e:b4:8d:90:a5:96:b6:07:4c:b9:
         34:36:f5:8a:b1:3e:db:2b:db:3c:48:42:be:d0:c0:d7:3c:3b:
         9c:45:f9:5d:af:f1:ea:70:6e:83:fc:15:61:f0:57:ec:0e:cd:
         44:a7:98:ef:da:f8:1f:df:f3:15:6b:93:d7:2d:33:d7:cf:2c:
         73:46:d2:3c:27:31:19:fa:db:8e:77:6e:da:a4:5f:d7:8e:e2:
         95:ff:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:05 2025 by rpki-client