Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32312e302f32342d3234203d3e20323638343430.roa
File:                     34352e3136312e32312e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier:          IQ41tqOgD7uD/PEIYH5h/oUTE5tnT9q42FfS6tEZMuU=
Subject key identifier:   93:B7:A4:8C:28:A7:A4:9F:47:64:1C:9F:85:2A:79:61:55:43:FC:E2
Certificate issuer:       /CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Certificate serial:       37471A4F83740CBAB1877D2ADAC1B452E9285117
Authority key identifier: 70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32312e302f32342d3234203d3e20323638343430.roa
Signing time:             Wed 01 Oct 2025 18:01:37 +0000
ROA not before:           Wed 01 Oct 2025 17:56:37 +0000
ROA not after:            Wed 30 Sep 2026 18:01:37 +0000
asID:                     268440
IP address blocks:        45.161.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:47:1a:4f:83:74:0c:ba:b1:87:7d:2a:da:c1:b4:52:e9:28:51:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
        Validity
            Not Before: Oct  1 17:56:37 2025 GMT
            Not After : Sep 30 18:01:37 2026 GMT
        Subject: CN=93B7A48C28A7A49F47641C9F852A79615543FCE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:ef:4d:2b:c2:b3:6b:1b:59:cd:46:31:96:
                    51:e3:b8:b5:e0:80:0f:ec:02:57:a6:38:cc:19:2f:
                    26:a2:f7:2a:14:8f:03:d9:13:be:e1:6d:6e:02:c6:
                    21:7f:f8:58:fa:68:e5:f3:0e:a7:60:d2:e3:78:6f:
                    13:e3:80:76:d1:bf:6b:14:82:9c:6b:52:70:6f:40:
                    8a:25:ed:9c:30:fb:40:f4:56:4c:9e:0f:e4:a5:59:
                    82:a1:fc:b7:56:e5:44:7a:fb:da:3e:c9:29:a8:37:
                    a0:7a:2e:20:b4:1e:12:a4:07:b6:17:dc:07:8c:99:
                    07:d0:13:eb:92:d0:32:d5:bc:1e:79:ef:dd:0c:00:
                    ad:c1:ed:6a:09:fc:cd:44:24:3b:23:fc:cc:b8:99:
                    2f:66:39:0e:1a:67:7a:3a:75:14:50:0a:3d:b1:75:
                    b8:ae:e4:75:50:30:ff:9a:0e:4c:22:93:34:75:cb:
                    3b:37:d4:c8:0e:d0:9a:c8:2e:90:fb:c9:64:af:e7:
                    9e:d9:91:b5:04:82:51:9b:6d:a5:d9:1b:1a:ff:28:
                    c5:1c:53:43:d3:4c:40:d1:e9:5f:3c:16:80:35:c3:
                    8a:42:be:b0:9e:87:24:77:50:09:f5:ea:c5:47:c4:
                    db:76:a6:a9:53:cd:3b:8e:81:7e:4e:d0:ce:a0:d0:
                    8b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:A4:8C:28:A7:A4:9F:47:64:1C:9F:85:2A:79:61:55:43:FC:E2
            X509v3 Authority Key Identifier:
                keyid:70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32312e302f32342d3234203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:2f:cc:c3:72:3f:5b:b1:a6:06:07:e5:ca:77:bc:6d:25:70:
         a5:a7:df:57:cf:a0:f9:29:70:3d:ad:40:2b:ad:dd:af:b1:11:
         4b:9f:61:1f:82:7a:21:aa:aa:31:f6:8c:a1:b0:8d:f5:cf:3d:
         a9:33:13:61:98:8b:a5:4b:63:75:46:01:d0:b6:2d:d5:6f:d1:
         58:87:17:e2:07:2a:ff:2b:b2:f5:12:9b:e0:2c:68:e6:05:9d:
         0e:e2:c4:04:b6:d1:cf:ae:d2:b3:90:f7:4d:cf:93:d9:22:01:
         b4:55:3f:ad:11:3a:ca:6b:ac:6b:f9:ca:26:c4:bb:31:07:22:
         65:5b:94:35:d8:6e:a7:08:03:57:a7:77:4a:3b:47:5b:16:2d:
         be:7f:5a:f4:17:8f:18:f8:8f:d8:12:62:40:a7:8c:00:1c:d1:
         fa:1a:d9:fd:6e:72:c8:f5:7e:6c:e1:b9:68:40:c9:f6:a1:f4:
         76:48:77:fb:c5:95:bf:84:8f:58:c8:0b:97:df:2c:b7:49:c9:
         e1:f2:69:9b:58:84:be:98:5b:eb:05:5b:f4:3f:92:38:6f:2a:
         95:0e:4e:e4:28:db:1d:36:53:53:fe:0e:e8:54:68:53:7f:11:
         b6:06:64:8f:30:6e:68:f7:47:75:6b:b4:46:24:37:1a:62:8c:
         84:e4:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:15:41 2025 by rpki-client