Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e382e302f32342d3234203d3e20323638323133.roa
File:                     34352e3233362e382e302f32342d3234203d3e20323638323133.roa (raw, json)
Hash identifier:          ctFV3kPNJK3bV9B3MLschItzKM1ihhzRapNYYOJyJ2c=
Subject key identifier:   5B:6C:BD:4D:3B:F4:2F:5E:25:FB:B3:11:79:79:1D:D3:DA:FB:CC:E8
Certificate issuer:       /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
Certificate serial:       34ACCA0324CE65A554BDA8E54D1790CCDBF1ADDD
Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e382e302f32342d3234203d3e20323638323133.roa
Signing time:             Fri 10 Oct 2025 19:01:40 +0000
ROA not before:           Fri 10 Oct 2025 18:56:40 +0000
ROA not after:            Fri 09 Oct 2026 19:01:40 +0000
asID:                     268213
IP address blocks:        45.236.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl
                          rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ac:ca:03:24:ce:65:a5:54:bd:a8:e5:4d:17:90:cc:db:f1:ad:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
        Validity
            Not Before: Oct 10 18:56:40 2025 GMT
            Not After : Oct  9 19:01:40 2026 GMT
        Subject: CN=5B6CBD4D3BF42F5E25FBB31179791DD3DAFBCCE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7b:87:52:49:1e:35:4b:ec:77:e3:b9:50:d6:
                    69:4a:16:a1:7c:75:d8:ae:60:96:bf:2d:a3:69:0c:
                    18:e4:2a:78:ff:b3:ad:58:66:a2:35:d5:f9:bc:20:
                    9f:36:ff:5b:71:40:24:f2:20:cc:70:79:74:32:fa:
                    81:32:74:54:6e:35:4a:fa:e4:51:4f:9a:11:0b:59:
                    00:02:35:18:08:7e:ff:fd:e7:b7:6d:d8:67:a5:a2:
                    3c:a9:f1:b1:7b:3c:b6:46:3c:58:95:e4:13:95:39:
                    34:69:05:7f:d8:6e:de:93:6a:4d:f5:57:1f:cd:d2:
                    c5:2b:9a:0f:ad:33:19:d3:44:b0:f4:73:64:ae:30:
                    49:ec:a1:f2:d9:57:20:90:10:97:ef:63:60:1d:6e:
                    0b:f5:45:8b:14:b4:04:6b:d2:4b:d3:a2:ba:d4:4d:
                    98:90:86:66:6b:a3:fa:0b:6d:f7:75:80:fb:5a:82:
                    f1:23:8f:3b:5f:b8:7d:b1:7c:67:dd:7b:c2:6a:b2:
                    0c:8f:9d:8a:c7:16:da:44:e3:ce:05:46:a7:95:74:
                    ff:75:7c:47:f4:8d:80:02:a3:f3:f8:7c:8d:fe:79:
                    f6:aa:78:a8:ce:4e:73:54:b0:f8:27:89:b5:39:96:
                    5f:9c:6a:78:4c:95:5e:a8:e9:89:c8:da:05:7a:95:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6C:BD:4D:3B:F4:2F:5E:25:FB:B3:11:79:79:1D:D3:DA:FB:CC:E8
            X509v3 Authority Key Identifier:
                keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e382e302f32342d3234203d3e20323638323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:54:52:9e:22:af:9d:d7:cc:bc:b0:ca:21:7f:51:85:0f:5d:
         60:da:e8:1f:dc:ea:9f:e3:c2:28:b6:f6:33:de:bd:71:85:3c:
         0c:1a:97:ae:4e:e5:11:e3:c3:27:5e:73:14:0e:96:5d:74:f8:
         3d:db:a6:13:b8:1f:6a:3e:9d:be:d2:3e:c1:cd:f3:bd:1c:b1:
         1b:c7:f0:e8:4e:94:9c:a9:3d:c0:7b:a4:e6:c8:ea:4c:4c:18:
         a4:19:8b:ae:9a:ca:1a:3b:6d:d2:6a:8a:c3:e5:db:b1:36:04:
         95:93:82:30:7c:d4:57:8a:50:6c:f3:cb:5d:9d:eb:56:36:0d:
         0d:8d:42:35:4a:96:31:89:4c:70:cf:d3:11:5c:65:e0:98:8d:
         0b:6e:70:9d:fc:3a:b1:22:32:1f:34:af:85:ba:b5:f8:46:3c:
         a2:a7:93:34:89:d1:d9:38:ab:8e:cb:36:a3:75:16:6c:b3:cf:
         d8:47:37:23:28:09:94:89:35:28:36:99:c6:ec:da:01:b5:a0:
         ca:4a:8b:4d:17:d8:21:0d:22:9d:94:53:b1:10:0a:1c:c1:55:
         27:e3:da:e5:54:83:f8:1a:66:9a:f3:03:21:4e:b6:5f:f2:ff:
         d2:c1:0a:25:38:69:db:12:ce:18:59:3e:1d:c7:9a:a5:ff:2c:
         81:84:9c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:09 2025 by rpki-client