Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32312e302f32342d3234203d3e20323637353936.roa
File:                     34352e37312e32312e302f32342d3234203d3e20323637353936.roa (raw, json)
Hash identifier:          XxypBdETDAoG6NScmKur169MWZ2Y1S5LBuZ+a6VT8EI=
Subject key identifier:   6B:91:BF:1E:29:2A:0E:1D:5E:0E:71:80:1F:CC:80:BD:F3:73:D0:50
Certificate issuer:       /CN=EA94FB33637123FD82BC561313AE44D1A8CF9D23
Certificate serial:       75DCDC9AA7DD1C0C7924968B2DF99F9942567A42
Authority key identifier: EA:94:FB:33:63:71:23:FD:82:BC:56:13:13:AE:44:D1:A8:CF:9D:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32312e302f32342d3234203d3e20323637353936.roa
Signing time:             Tue 07 Oct 2025 18:49:47 +0000
ROA not before:           Tue 07 Oct 2025 18:44:47 +0000
ROA not after:            Tue 06 Oct 2026 18:49:47 +0000
asID:                     267596
IP address blocks:        45.71.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:dc:dc:9a:a7:dd:1c:0c:79:24:96:8b:2d:f9:9f:99:42:56:7a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA94FB33637123FD82BC561313AE44D1A8CF9D23
        Validity
            Not Before: Oct  7 18:44:47 2025 GMT
            Not After : Oct  6 18:49:47 2026 GMT
        Subject: CN=6B91BF1E292A0E1D5E0E71801FCC80BDF373D050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:e0:3d:73:cd:e2:40:8c:f3:eb:64:d7:ce:
                    ed:92:27:26:b5:df:55:dc:31:13:f8:1a:ba:e3:38:
                    78:b5:d1:d3:1a:27:57:d5:d4:02:ef:2e:33:ec:8c:
                    70:e7:2a:4d:ff:79:fd:19:90:ca:79:16:0a:f2:a2:
                    2c:20:bb:5c:60:0b:40:a6:ad:89:60:57:4d:28:c9:
                    13:02:2b:22:82:e0:99:19:bb:8b:98:f8:ed:83:3d:
                    6d:b8:c9:03:cd:a2:17:16:63:34:2f:73:0d:0b:09:
                    bb:16:72:17:14:18:69:27:ea:a3:74:48:e8:f9:c8:
                    24:fc:d6:92:eb:d8:5c:a1:94:84:9a:7c:e5:87:f1:
                    76:a9:d8:07:2a:d3:29:c3:3d:b5:2c:d4:1e:b1:8c:
                    20:ee:f2:52:f8:a0:e6:6b:9b:05:9b:ed:48:cf:da:
                    8f:21:41:9a:9c:7f:3e:bf:a1:05:cb:5f:f6:ad:60:
                    b3:0f:32:06:3c:ce:ec:8d:86:a4:1f:a3:48:ec:fd:
                    05:cc:1e:98:78:7b:30:ad:63:56:9d:10:87:c2:18:
                    1e:9a:29:65:67:19:56:8e:cf:c0:49:0d:c4:9f:a4:
                    84:f2:a3:ed:d1:c5:2a:54:37:ed:75:e7:79:42:6e:
                    b0:8a:6a:5d:2d:02:ff:c1:c6:58:0a:6e:bc:90:8f:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:91:BF:1E:29:2A:0E:1D:5E:0E:71:80:1F:CC:80:BD:F3:73:D0:50
            X509v3 Authority Key Identifier:
                keyid:EA:94:FB:33:63:71:23:FD:82:BC:56:13:13:AE:44:D1:A8:CF:9D:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32312e302f32342d3234203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:99:85:88:1e:26:02:de:6a:09:e6:7d:53:84:5a:64:f3:de:
         1b:b7:dc:fa:a2:ec:57:3d:33:84:cc:cf:e0:28:61:38:9f:57:
         5a:64:1a:04:19:bd:63:74:e8:30:da:95:3f:54:cb:bc:7a:8a:
         50:1c:79:80:c5:23:80:1b:ee:d0:bb:5e:7e:05:56:2f:cf:47:
         bc:3c:14:0c:e1:d5:9c:7f:ee:4c:9f:a7:7d:f0:5e:dc:1a:28:
         e5:c4:aa:b6:16:e0:4d:5d:87:6b:c2:9b:fc:17:6e:00:04:8e:
         81:17:39:c0:48:8e:0e:fa:85:d7:e1:53:12:6c:67:38:b0:65:
         04:f9:08:ef:60:03:81:b0:e6:d7:e8:92:04:73:1a:55:f9:9d:
         20:77:f3:e7:cc:f9:45:0e:d6:c0:2e:b7:fb:d8:51:8d:cb:1a:
         cc:6f:80:ab:46:84:2b:f2:6c:81:6e:25:02:9e:af:12:67:4d:
         34:61:c0:bc:de:7c:25:21:1f:04:af:44:a3:8d:01:21:07:93:
         43:52:57:e6:a3:5e:7d:ca:9b:bd:20:12:ca:07:fc:f2:48:82:
         f8:cc:d4:06:6b:76:28:9d:64:2d:14:77:46:96:32:77:b9:f9:
         7f:ef:41:37:c6:75:d9:f4:aa:df:15:2a:9b:92:c5:5a:bf:dd:
         0c:47:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:39 2025 by rpki-client