Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/34352e3233392e3232342e302f32322d3332203d3e203631383035.roa
File:                     34352e3233392e3232342e302f32322d3332203d3e203631383035.roa (raw, json)
Hash identifier:          djbfpPqg9E0HJi6cTRuj2HfgZ4bsPQ/NaNaDLxntsyM=
Subject key identifier:   59:E4:8C:82:17:7F:E9:C3:0C:8F:1E:AB:5D:AF:46:36:46:89:BD:49
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       716772BC614D390162B1E01BFBCF105CEA1E3AEF
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/34352e3233392e3232342e302f32322d3332203d3e203631383035.roa
Signing time:             Thu 09 Oct 2025 12:42:42 +0000
ROA not before:           Thu 09 Oct 2025 12:37:42 +0000
ROA not after:            Thu 08 Oct 2026 12:42:42 +0000
asID:                     61805
IP address blocks:        45.239.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:67:72:bc:61:4d:39:01:62:b1:e0:1b:fb:cf:10:5c:ea:1e:3a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Oct  9 12:37:42 2025 GMT
            Not After : Oct  8 12:42:42 2026 GMT
        Subject: CN=59E48C82177FE9C30C8F1EAB5DAF46364689BD49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d8:6f:d4:bc:15:b7:a9:c9:d0:89:be:6e:62:
                    65:70:55:68:41:0c:c6:a9:b3:f1:44:1c:6d:14:df:
                    0d:a0:57:9a:c3:4d:33:a8:78:53:5f:48:36:c4:c3:
                    65:ba:61:47:5d:c2:dc:4c:ab:01:e1:35:d1:a0:b0:
                    65:71:5d:a0:91:fa:31:40:42:ad:99:c7:94:9c:1b:
                    ba:cb:58:82:69:c0:e4:8a:c3:b2:4d:04:ab:55:d2:
                    c5:76:28:4b:72:91:29:c8:f0:87:f0:0b:26:ab:cb:
                    a6:99:d0:f5:45:1d:f9:6f:c7:0e:39:a3:a7:fc:09:
                    58:a6:7b:a6:32:dd:f7:8e:0f:e3:ba:b7:e2:50:a6:
                    da:ad:f7:5a:cf:fa:15:78:2b:34:73:08:bb:b3:9f:
                    88:49:ae:d9:ad:e1:cc:2c:84:0a:71:97:ba:49:18:
                    0c:8e:08:33:6a:5d:57:81:cd:b4:8b:49:b5:8d:fe:
                    ab:87:de:1d:50:1a:1f:f6:74:c3:85:25:a4:6b:e2:
                    a9:58:ca:fd:b1:06:a2:54:c8:ba:f1:bf:2a:c2:16:
                    99:dc:72:c9:f7:50:f8:5a:59:95:57:08:9e:fe:97:
                    b0:08:36:d0:ef:e6:00:8d:d1:39:ba:d1:38:9d:1d:
                    a4:87:d7:30:e4:f4:6a:ef:41:c1:68:5d:11:8c:2d:
                    38:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E4:8C:82:17:7F:E9:C3:0C:8F:1E:AB:5D:AF:46:36:46:89:BD:49
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/34352e3233392e3232342e302f32322d3332203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:61:c6:1f:bf:48:69:1f:4b:eb:69:4e:f5:59:23:15:3e:ab:
         26:c4:c0:16:12:32:15:3d:ca:99:dc:8a:1a:2f:5d:06:05:1c:
         36:68:25:65:76:c1:80:e1:03:6e:fe:15:6b:84:23:72:5a:e4:
         1b:b2:2a:9e:fb:10:af:19:a3:9c:f8:6d:87:6d:e7:61:2b:be:
         a2:09:ef:b4:9a:09:e2:f3:51:8b:4e:aa:e0:55:12:4a:05:37:
         f1:1a:a2:66:17:62:72:be:61:28:8e:fb:75:a7:b6:43:67:22:
         c3:32:1d:48:e5:7d:69:3e:d0:14:bf:dc:6c:8c:1d:78:3e:8d:
         25:46:ea:03:f5:aa:6b:a8:33:13:f7:cd:ee:1f:0e:6d:98:38:
         f8:85:72:03:be:fe:b4:6d:65:4c:ac:e9:7b:55:e6:76:b7:67:
         ef:06:8b:ff:ff:ee:8f:ec:36:ca:a9:fd:b1:f6:2f:98:c9:6a:
         70:20:69:cf:a6:c3:d0:51:b1:21:36:0e:48:95:ef:a5:43:0e:
         01:cd:ba:13:4f:53:27:76:57:bf:ce:d4:95:16:c5:23:74:59:
         c0:70:3d:7a:35:41:8f:05:81:e5:91:7d:ac:14:5a:0f:77:d8:
         27:7e:dd:25:ee:ab:d2:20:27:14:8e:04:a1:c0:ca:29:d8:69:
         42:b2:52:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:56 2025 by rpki-client