Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32322e302f32332d3233203d3e20323637353936.roa
File:                     34352e37312e32322e302f32332d3233203d3e20323637353936.roa (raw, json)
Hash identifier:          Pmn/pTYGsFD9vU23Meu0qrx4CX0X6O82v2YFXmy+1l0=
Subject key identifier:   65:CF:96:98:E0:2F:3B:3E:B9:C5:30:5C:A0:4E:81:CF:6A:8F:C2:69
Certificate issuer:       /CN=EA94FB33637123FD82BC561313AE44D1A8CF9D23
Certificate serial:       567497469A5746665F3210F587E0F40D5ABB7754
Authority key identifier: EA:94:FB:33:63:71:23:FD:82:BC:56:13:13:AE:44:D1:A8:CF:9D:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32322e302f32332d3233203d3e20323637353936.roa
Signing time:             Tue 07 Oct 2025 18:49:49 +0000
ROA not before:           Tue 07 Oct 2025 18:44:49 +0000
ROA not after:            Tue 06 Oct 2026 18:49:49 +0000
asID:                     267596
IP address blocks:        45.71.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:74:97:46:9a:57:46:66:5f:32:10:f5:87:e0:f4:0d:5a:bb:77:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA94FB33637123FD82BC561313AE44D1A8CF9D23
        Validity
            Not Before: Oct  7 18:44:49 2025 GMT
            Not After : Oct  6 18:49:49 2026 GMT
        Subject: CN=65CF9698E02F3B3EB9C5305CA04E81CF6A8FC269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:b1:0c:91:26:6c:dc:3a:33:43:f2:04:a3:
                    db:5d:e7:d6:ee:0c:c9:f6:ca:3d:54:cf:c5:03:92:
                    83:47:b8:da:c8:d0:19:ed:7b:2d:10:b4:30:83:f3:
                    2b:49:65:67:75:be:2f:32:e4:bb:50:1a:39:f9:28:
                    f0:96:20:f2:22:ac:28:a5:59:29:31:76:53:85:e3:
                    ac:04:4e:db:7e:f7:85:59:40:af:af:31:72:c6:17:
                    0b:3f:af:ae:bf:f4:58:cd:7a:84:6d:62:1c:fd:ba:
                    77:49:8d:52:67:38:85:16:86:0e:90:68:6e:b2:d8:
                    ec:62:53:cc:2d:15:10:d6:d4:92:9f:9c:91:04:bb:
                    e8:dc:50:50:ad:17:ed:e3:67:87:2d:34:bc:63:fe:
                    c2:8b:e1:d6:3f:ce:de:91:46:be:17:e5:06:00:95:
                    20:5a:40:af:22:08:85:4e:ae:85:14:10:ed:ef:3e:
                    33:dd:74:66:40:25:50:08:bc:20:c1:db:86:59:da:
                    ff:c8:4f:05:ad:1f:b0:dd:a8:3e:b0:33:ff:94:f9:
                    37:35:d3:79:f2:aa:0c:1d:f4:fc:c9:3e:9a:ba:c7:
                    8b:bb:3e:8e:ca:85:e1:29:0d:8d:7c:5b:1a:f8:97:
                    7e:51:29:0e:a5:c9:be:9c:10:d3:84:24:0c:7a:b5:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CF:96:98:E0:2F:3B:3E:B9:C5:30:5C:A0:4E:81:CF:6A:8F:C2:69
            X509v3 Authority Key Identifier:
                keyid:EA:94:FB:33:63:71:23:FD:82:BC:56:13:13:AE:44:D1:A8:CF:9D:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32322e302f32332d3233203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:f4:b5:ed:96:62:7b:72:f4:de:cd:f5:30:67:2b:9e:52:c3:
         ad:0d:ae:68:b3:7e:74:27:f7:2e:0a:a0:36:03:01:40:6b:47:
         16:59:00:ea:c1:4f:c0:b6:ba:62:05:8c:39:ba:58:d6:69:89:
         47:c0:58:7b:32:8d:c5:0b:1f:7e:ed:21:66:38:4f:71:84:4c:
         a9:23:99:77:8a:ba:17:4e:5d:f4:8e:54:94:49:2d:58:d5:76:
         4e:0d:15:ba:0f:a2:47:b3:40:57:50:d9:d7:2c:6f:79:b8:ef:
         4f:6d:95:fd:af:b6:3e:8c:76:cd:92:6d:2d:7a:bd:65:f2:1b:
         e1:6f:35:ca:f0:50:8e:8c:d0:82:82:d3:e9:dc:92:2f:3d:a6:
         e9:da:a8:4b:60:8a:df:fa:e8:50:93:ef:ee:8f:ff:91:94:b8:
         b6:64:e6:b1:88:cc:66:9d:f9:d0:0a:a8:41:60:27:ac:69:a2:
         d7:ff:51:49:a2:8e:55:c5:f0:2b:4c:29:2c:ac:ab:36:6f:00:
         28:20:67:e6:fa:0c:57:30:f3:fc:ca:85:0b:bd:f8:ce:9a:10:
         65:d9:d7:3a:d5:c4:4c:e3:6e:94:01:04:25:74:82:72:96:07:
         6a:c8:c9:cd:4e:61:7c:4a:a7:48:d8:1b:ed:1a:96:db:35:2a:
         53:bf:c7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:40 2025 by rpki-client