Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/34352e3136332e3231362e302f32322d3234203d3e20323638363031.roa
File:                     34352e3136332e3231362e302f32322d3234203d3e20323638363031.roa (raw, json)
Hash identifier:          rSgQU5EDNlAKQ7mbO/BwPLNTvOxyL9iEBkkn0BvhJ5M=
Subject key identifier:   83:43:D1:98:72:F6:B9:88:D5:A5:55:45:B7:52:E9:64:46:3A:2A:91
Certificate issuer:       /CN=6372D23F61E925344AE4D326125978E4F5CE7B4A
Certificate serial:       1BE994162B95DBE1DC014B0988B1F858D5D80780
Authority key identifier: 63:72:D2:3F:61:E9:25:34:4A:E4:D3:26:12:59:78:E4:F5:CE:7B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6372D23F61E925344AE4D326125978E4F5CE7B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/34352e3136332e3231362e302f32322d3234203d3e20323638363031.roa
Signing time:             Mon 01 Sep 2025 23:41:53 +0000
ROA not before:           Mon 01 Sep 2025 23:36:53 +0000
ROA not after:            Mon 31 Aug 2026 23:41:53 +0000
asID:                     268601
IP address blocks:        45.163.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/6372D23F61E925344AE4D326125978E4F5CE7B4A.crl
                          rsync://rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/6372D23F61E925344AE4D326125978E4F5CE7B4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6372D23F61E925344AE4D326125978E4F5CE7B4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e9:94:16:2b:95:db:e1:dc:01:4b:09:88:b1:f8:58:d5:d8:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6372D23F61E925344AE4D326125978E4F5CE7B4A
        Validity
            Not Before: Sep  1 23:36:53 2025 GMT
            Not After : Aug 31 23:41:53 2026 GMT
        Subject: CN=8343D19872F6B988D5A55545B752E964463A2A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:b8:5c:b3:66:99:ef:98:e8:4f:58:4b:24:
                    f5:76:34:f5:4f:fc:71:5d:a2:a7:a9:c4:8e:0b:a9:
                    6b:6f:d0:a8:70:33:e4:1f:2e:8d:52:af:65:74:a5:
                    26:9f:12:be:7f:96:1d:7a:0e:61:06:64:af:c8:31:
                    60:b1:8f:a6:86:9d:1a:bc:18:4d:10:35:8f:47:67:
                    0e:ea:e2:25:97:48:0c:c2:d2:8f:0b:66:bf:7d:7b:
                    d6:cc:63:eb:96:df:90:53:42:db:b8:6c:98:8b:db:
                    bd:01:a1:f2:98:a5:18:ba:70:ee:54:c9:dd:ea:c2:
                    9a:ee:d7:1e:e9:84:f2:a3:b6:70:c4:2c:7b:a3:04:
                    36:ef:d9:b8:90:41:7f:6d:41:b1:75:3d:9c:f4:cd:
                    3c:b8:c0:36:40:ab:2f:bb:fd:93:bd:c3:8f:fa:88:
                    24:f5:12:73:26:cd:04:74:e9:7f:26:43:65:e7:63:
                    7a:79:33:a8:85:7a:aa:63:a5:93:dd:12:e7:7c:c5:
                    33:c5:7c:5e:7f:e3:2b:f9:16:f9:97:bd:99:07:26:
                    ce:8a:e3:b7:3c:79:fb:57:41:8f:d2:16:c2:55:ad:
                    80:64:d6:ae:c7:30:6d:e0:dc:81:1b:43:20:d1:47:
                    a0:31:32:7a:fb:81:1a:54:b5:b9:2e:4d:70:09:2b:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:43:D1:98:72:F6:B9:88:D5:A5:55:45:B7:52:E9:64:46:3A:2A:91
            X509v3 Authority Key Identifier:
                keyid:63:72:D2:3F:61:E9:25:34:4A:E4:D3:26:12:59:78:E4:F5:CE:7B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/6372D23F61E925344AE4D326125978E4F5CE7B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6372D23F61E925344AE4D326125978E4F5CE7B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvsSvpZARzonb5KtGTeCugJ1mX3Dq5qLYHgwyHtXgzc8/0/34352e3136332e3231362e302f32322d3234203d3e20323638363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:95:52:15:bb:89:29:53:f9:2d:3b:e3:dc:cf:ac:ee:73:29:
         0b:f6:cf:79:9f:3c:19:e7:d2:a6:9a:5f:43:fd:ed:81:4b:bd:
         c7:95:6d:03:e5:44:da:23:60:36:0e:ea:36:f3:be:1b:5d:fc:
         a0:27:e4:18:7d:57:18:e1:72:29:ef:92:69:4e:c0:2e:9c:2e:
         6e:63:67:b8:3f:46:9a:a6:a9:17:04:e5:61:e3:bb:ad:e1:fa:
         4a:eb:64:4a:0b:d2:59:de:0f:53:fc:5f:4b:30:67:f7:c0:7b:
         60:c8:d2:69:d7:50:95:c7:ee:cd:2f:ee:55:8a:81:2b:dc:9f:
         3a:13:42:4e:9a:82:db:78:25:35:d0:52:a4:ec:2f:3a:42:13:
         92:81:37:ce:c6:c4:e3:fb:fe:2a:3c:d2:b2:3d:90:16:53:ab:
         99:52:eb:2a:a5:24:40:2f:69:9e:6a:24:5c:e1:1e:5c:cc:cb:
         e1:83:29:2c:7a:b2:49:19:a5:b7:16:57:b8:cc:19:e3:a2:7a:
         5d:ee:17:62:7d:66:24:e1:09:05:14:76:27:97:0d:17:6f:22:
         6b:75:ea:1c:b6:b1:1d:2d:b1:bd:56:4d:e0:5b:14:c8:54:c5:
         67:f9:74:f8:88:d3:bf:cf:40:4c:07:60:fe:e2:ed:27:fd:4c:
         93:fb:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:40:14 2025 by rpki-client