Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32342d3234203d3e20323638343430.roa
File:                     34352e3136312e32322e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier:          y2PpABc/Sg1TZ0UYoWQMJkfjOm+jHPlyiTpY2c2lreM=
Subject key identifier:   3E:F5:08:89:A8:FA:B9:A3:D6:6C:1D:B4:D5:B1:E2:8B:40:4F:68:12
Certificate issuer:       /CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Certificate serial:       3010CD7A7B03140252BC5EF4FEB3EAE4AA9C6B93
Authority key identifier: 70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32342d3234203d3e20323638343430.roa
Signing time:             Wed 01 Oct 2025 18:01:37 +0000
ROA not before:           Wed 01 Oct 2025 17:56:37 +0000
ROA not after:            Wed 30 Sep 2026 18:01:37 +0000
asID:                     268440
IP address blocks:        45.161.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:10:cd:7a:7b:03:14:02:52:bc:5e:f4:fe:b3:ea:e4:aa:9c:6b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
        Validity
            Not Before: Oct  1 17:56:37 2025 GMT
            Not After : Sep 30 18:01:37 2026 GMT
        Subject: CN=3EF50889A8FAB9A3D66C1DB4D5B1E28B404F6812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f6:b3:4b:29:72:96:53:1a:0d:21:fa:72:90:
                    07:b6:07:a5:ef:8d:63:df:62:72:9e:e8:66:e3:c5:
                    70:cf:6e:f7:52:cc:8a:59:32:8c:a6:f7:5a:40:6b:
                    d3:2a:49:55:23:cf:23:97:7e:7f:08:f4:cd:ac:70:
                    0d:27:d4:20:40:09:1d:7a:13:f0:1d:74:1b:41:61:
                    17:ac:5d:ab:c5:04:c5:ac:e5:d0:8f:89:4b:e3:e7:
                    a7:03:1f:1b:94:10:5f:98:69:06:61:04:2e:32:ec:
                    04:ae:b2:6c:9b:ef:71:50:07:88:25:09:da:5e:28:
                    07:46:49:e0:38:f0:03:ad:d9:39:63:84:49:06:cd:
                    93:ac:2a:57:9e:22:e6:0a:ae:e2:8e:64:0b:b3:3b:
                    f1:65:3c:47:bf:5e:d8:3d:74:62:8e:51:3b:19:73:
                    73:e9:db:0f:eb:05:6e:f4:38:97:d3:6b:b9:05:2e:
                    9e:19:f8:13:3c:a5:f4:05:39:f0:5b:33:e6:4c:46:
                    62:d1:40:8f:c5:fe:d9:81:e9:e3:e1:05:cd:09:d0:
                    8d:f5:73:ba:f8:fc:bc:64:87:28:c3:0d:6b:59:29:
                    33:1e:7f:99:cb:7d:8a:c6:ed:55:fb:01:a7:2c:16:
                    e8:1f:a5:d7:d4:a9:3c:ca:2c:bb:ec:a4:20:27:4e:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F5:08:89:A8:FA:B9:A3:D6:6C:1D:B4:D5:B1:E2:8B:40:4F:68:12
            X509v3 Authority Key Identifier:
                keyid:70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32342d3234203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:65:77:ee:72:7f:89:33:99:b8:db:7a:23:f0:9d:0e:06:be:
         5f:b4:0a:96:0d:da:72:b1:e7:c5:ea:98:05:14:85:f8:2a:b2:
         c2:23:c2:7b:43:55:e3:d7:56:a3:a9:b7:3c:58:82:3d:43:93:
         36:8a:62:b3:06:47:ad:2b:00:18:e5:32:3c:d0:a5:a8:e9:f9:
         f0:6b:a0:b8:58:d2:bd:e5:21:3e:4f:ac:fd:67:3f:f7:9d:82:
         82:2b:a0:86:1a:24:50:09:19:33:1b:0f:1b:3e:8d:aa:4d:da:
         0d:5c:49:fb:e7:ce:6b:6e:2f:16:50:3a:65:05:a4:b0:fb:64:
         99:ba:d7:c0:06:73:c9:30:65:e1:6e:3a:eb:aa:e2:1f:9a:f1:
         3f:d6:43:2f:79:e6:af:d1:7f:7c:1c:99:4c:7e:43:35:13:e5:
         15:28:13:27:a2:7e:06:a2:b6:8f:d8:7b:4d:6e:46:63:22:9d:
         3d:0d:d4:17:b5:45:cc:cc:f7:c2:65:d7:78:a3:4c:ce:1f:e0:
         21:90:20:8f:26:73:52:f9:0b:a9:50:75:bf:09:38:70:43:71:
         82:02:fe:d5:af:81:72:88:68:3d:de:cd:93:ab:fd:1a:ab:b9:
         87:64:4e:6b:62:b3:0e:86:6e:ec:41:c8:bb:38:ab:7b:81:8f:
         a6:5c:94:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:15:40 2025 by rpki-client