Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32322d3232203d3e20323638343430.roa
File:                     34352e3136312e32302e302f32322d3232203d3e20323638343430.roa (raw, json)
Hash identifier:          xE2fRlN5dX60ZRAfgmHWPeQa5LWHn/7y2Wik31QJxSw=
Subject key identifier:   6C:4E:C7:E6:A0:9C:DE:6D:D3:AA:B6:6A:9A:9D:D2:D0:4F:27:86:4A
Certificate issuer:       /CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Certificate serial:       3A24D45A044544FE3D87DA45355F12563E0E1098
Authority key identifier: 70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32322d3232203d3e20323638343430.roa
Signing time:             Wed 01 Oct 2025 18:01:38 +0000
ROA not before:           Wed 01 Oct 2025 17:56:38 +0000
ROA not after:            Wed 30 Sep 2026 18:01:38 +0000
asID:                     268440
IP address blocks:        45.161.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:24:d4:5a:04:45:44:fe:3d:87:da:45:35:5f:12:56:3e:0e:10:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
        Validity
            Not Before: Oct  1 17:56:38 2025 GMT
            Not After : Sep 30 18:01:38 2026 GMT
        Subject: CN=6C4EC7E6A09CDE6DD3AAB66A9A9DD2D04F27864A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:e4:24:9d:ce:b4:56:95:cd:8f:76:81:1f:
                    83:5b:1b:40:ad:71:ab:40:c5:01:6d:4a:88:ed:56:
                    41:f2:d8:1d:72:5b:09:e8:24:99:b7:97:6a:3a:6c:
                    22:08:48:96:64:e2:9f:e7:21:db:51:f3:6e:ee:39:
                    6d:b5:ab:e7:71:17:06:d4:2f:d7:a2:01:9d:98:94:
                    25:4b:92:54:3a:ab:c3:4b:23:af:27:ce:71:f5:4d:
                    7e:6d:11:3f:07:bd:6a:aa:9c:72:53:f1:e2:3d:c9:
                    47:8b:8b:d4:81:1e:f0:6b:f0:02:79:4b:49:50:b6:
                    82:b1:47:22:4f:72:eb:3b:b7:70:23:5c:d6:b5:7d:
                    74:35:d2:c3:ef:aa:50:2b:e6:1b:a3:14:c6:61:d1:
                    6b:e3:17:85:2c:f1:73:98:92:ff:82:9a:a0:cb:d5:
                    ed:4a:46:46:3e:fc:33:ce:37:fc:b8:29:e3:7f:c2:
                    c5:ff:56:a6:10:fe:90:75:ba:a4:93:b1:de:2d:aa:
                    d7:f7:ee:95:75:39:7b:f4:c2:57:27:82:b2:17:f3:
                    ba:52:05:e7:36:f9:8c:82:94:66:cd:7d:71:0c:ac:
                    66:3c:a4:a1:7c:79:f4:d8:c9:c7:49:6b:a3:1e:1c:
                    c8:1f:c4:6c:9e:dc:4c:5c:31:65:bf:31:d4:2e:d0:
                    02:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4E:C7:E6:A0:9C:DE:6D:D3:AA:B6:6A:9A:9D:D2:D0:4F:27:86:4A
            X509v3 Authority Key Identifier:
                keyid:70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32322d3232203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:d5:3b:91:46:96:9b:b8:53:43:94:14:a9:7d:94:f9:9a:68:
         10:5d:02:67:3a:09:90:fc:2c:2e:41:f1:0a:ad:6f:07:5d:65:
         48:cd:54:24:2d:67:05:c1:0a:0c:25:c9:92:20:27:cf:f8:4c:
         f1:74:ce:31:36:a7:d7:7f:0f:62:c9:8e:88:a2:b6:cd:f4:ec:
         79:40:81:d0:46:5c:b7:d3:e9:68:cf:74:cc:1a:55:60:e4:ff:
         2d:b8:e9:9f:22:8d:7a:1d:55:89:33:f4:42:e8:bd:cc:4f:5e:
         dd:93:76:3c:4a:76:5e:ee:b0:bc:2b:f5:cd:9b:f4:45:95:bf:
         ad:cf:4f:44:23:0e:dd:dc:f2:7b:c4:3b:a4:cf:3c:20:ab:a6:
         13:9f:0d:3b:72:46:7f:e1:04:c2:ca:d1:66:c7:97:d8:8b:79:
         de:58:47:8e:80:78:fd:9a:03:aa:9a:00:aa:c0:21:ec:3d:2f:
         5b:db:64:be:16:27:7f:69:cf:4e:3c:ba:02:ad:29:c2:8f:b3:
         ad:29:ea:e8:7b:24:09:45:93:85:77:b1:a5:b9:85:6b:eb:b1:
         b0:eb:bb:3d:9d:31:62:df:77:67:9d:f5:42:3e:fa:a9:83:5d:
         f8:b6:6e:82:14:fb:ab:5f:dd:ff:76:3e:de:2b:e7:a1:16:33:
         ab:1e:8d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:00 2025 by rpki-client