Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233362e302f32322d3234203d3e20323731373332.roa
File:                     34352e362e3233362e302f32322d3234203d3e20323731373332.roa (raw, json)
Hash identifier:          DJL6uHSI8f3GFKEsVs9sAv/vOkfrsy5MZ0PtNmXLOCs=
Subject key identifier:   00:39:F6:EC:83:34:BC:75:75:51:CE:3D:A5:39:7F:F4:23:0E:77:87
Certificate issuer:       /CN=B0D355EE0547DDAE537C09F79964DF46C40DF90D
Certificate serial:       2B2332F98BA4CF347C5BCAD51E4CD9DF11A91E63
Authority key identifier: B0:D3:55:EE:05:47:DD:AE:53:7C:09:F7:99:64:DF:46:C4:0D:F9:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D355EE0547DDAE537C09F79964DF46C40DF90D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233362e302f32322d3234203d3e20323731373332.roa
Signing time:             Fri 12 Sep 2025 13:59:05 +0000
ROA not before:           Fri 12 Sep 2025 13:54:05 +0000
ROA not after:            Fri 11 Sep 2026 13:59:05 +0000
asID:                     271732
IP address blocks:        45.6.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/B0D355EE0547DDAE537C09F79964DF46C40DF90D.crl
                          rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/B0D355EE0547DDAE537C09F79964DF46C40DF90D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D355EE0547DDAE537C09F79964DF46C40DF90D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:23:32:f9:8b:a4:cf:34:7c:5b:ca:d5:1e:4c:d9:df:11:a9:1e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D355EE0547DDAE537C09F79964DF46C40DF90D
        Validity
            Not Before: Sep 12 13:54:05 2025 GMT
            Not After : Sep 11 13:59:05 2026 GMT
        Subject: CN=0039F6EC8334BC757551CE3DA5397FF4230E7787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:b5:0f:36:6e:0f:bb:73:0e:da:66:0e:5b:
                    3d:67:fd:08:4e:96:68:79:a2:39:0b:e1:ab:e5:5e:
                    93:50:27:59:14:a7:8a:c7:cb:67:e9:ce:58:c5:ec:
                    0a:82:c5:42:44:1c:7a:17:72:16:a7:67:16:06:48:
                    52:cf:0e:df:2e:74:86:0e:04:e0:04:cb:47:c4:ba:
                    74:19:c6:cb:e4:79:69:68:74:eb:e7:f5:f2:27:fc:
                    04:86:f4:ea:37:7c:26:e5:49:41:84:44:1b:29:c8:
                    af:4a:c1:a7:0a:e4:f3:7d:5f:19:0c:27:90:00:21:
                    0c:3a:14:4b:29:56:9a:c4:ed:aa:ba:0c:9c:ec:2e:
                    34:37:4f:b6:d3:07:f0:25:70:09:c8:f6:5b:e6:8c:
                    0e:a8:fc:16:fc:88:16:50:c9:ad:30:7f:82:32:42:
                    17:2d:5e:0f:08:77:03:26:58:c2:18:d5:2d:c4:c9:
                    93:4c:c1:c2:8e:5b:4d:11:b0:0b:a2:5e:7d:ed:65:
                    c5:b4:6f:e6:f3:e7:86:2d:62:c3:7a:2b:d9:e6:f9:
                    80:ca:ba:00:da:71:44:9d:9c:7f:13:cb:0b:fc:dd:
                    15:26:07:63:96:d2:d6:39:24:99:0f:02:74:d1:80:
                    dc:8d:d7:72:f0:f8:97:d7:3a:08:b8:ae:23:42:71:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:39:F6:EC:83:34:BC:75:75:51:CE:3D:A5:39:7F:F4:23:0E:77:87
            X509v3 Authority Key Identifier:
                keyid:B0:D3:55:EE:05:47:DD:AE:53:7C:09:F7:99:64:DF:46:C4:0D:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/B0D355EE0547DDAE537C09F79964DF46C40DF90D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D355EE0547DDAE537C09F79964DF46C40DF90D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/34352e362e3233362e302f32322d3234203d3e20323731373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:37:ad:0b:91:57:23:1f:82:e0:a2:8a:92:5f:22:57:57:e1:
         93:d9:55:cd:ea:f6:89:be:b9:b0:dc:91:9b:30:e1:ca:2c:a1:
         a7:43:01:b0:98:ba:54:22:e2:2f:9a:85:e1:50:89:bd:ff:a4:
         a8:65:f5:e9:10:ec:9a:9c:16:4b:c0:b2:ac:57:27:09:1c:f0:
         20:ce:41:6e:10:63:42:f2:9d:ee:04:c8:2c:f8:b7:74:8d:73:
         7c:d2:34:92:a5:0d:72:cd:d7:d4:a7:2c:c8:5a:50:f6:44:d6:
         f5:7c:0e:c8:56:fe:3a:5a:62:00:63:ee:fc:0c:6e:ee:fc:87:
         96:8e:fc:47:7b:a6:f6:3c:cc:a1:78:56:af:e8:e0:9b:25:b0:
         6d:a8:de:63:4b:80:40:cd:f2:1b:96:5f:74:8a:ee:e9:95:18:
         fe:48:62:82:5f:f8:87:5f:4a:d7:78:b4:66:03:3a:08:e7:03:
         8b:ed:03:40:22:e7:6c:9c:a2:9c:dd:03:77:bf:ef:3b:d9:42:
         94:09:fb:2e:82:f0:e2:77:9d:5c:73:b7:91:05:f9:79:97:4a:
         8b:22:f9:9e:75:ca:d4:91:82:b4:23:70:e9:0d:c8:30:43:7d:
         da:fd:d4:38:38:0f:38:fc:e0:dc:c3:fc:b2:85:9b:e4:73:36:
         04:3b:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:48:41 2025 by rpki-client