Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e392e302f32342d3234203d3e20323638323133.roa
File:                     34352e3233362e392e302f32342d3234203d3e20323638323133.roa (raw, json)
Hash identifier:          70JQRaVTJXwvav8bFTgGxR3IrAOSwj6tnXxST/n7XC0=
Subject key identifier:   99:23:90:84:14:CF:86:89:12:CA:8F:50:AB:B8:A2:75:D6:48:00:92
Certificate issuer:       /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
Certificate serial:       7AD2FCC2F3BD4FE8DE5347E6EF0853DF622115CD
Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e392e302f32342d3234203d3e20323638323133.roa
Signing time:             Fri 10 Oct 2025 19:01:40 +0000
ROA not before:           Fri 10 Oct 2025 18:56:40 +0000
ROA not after:            Fri 09 Oct 2026 19:01:40 +0000
asID:                     268213
IP address blocks:        45.236.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl
                          rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d2:fc:c2:f3:bd:4f:e8:de:53:47:e6:ef:08:53:df:62:21:15:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
        Validity
            Not Before: Oct 10 18:56:40 2025 GMT
            Not After : Oct  9 19:01:40 2026 GMT
        Subject: CN=9923908414CF868912CA8F50ABB8A275D6480092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:d4:7a:9c:39:5a:37:6c:1d:58:d1:60:a8:
                    56:41:5c:1d:9d:e4:cc:5a:0c:46:61:ad:1c:2b:eb:
                    ee:83:c7:14:0d:0a:a7:09:e7:21:2c:8c:39:5f:a4:
                    7a:7c:21:6d:ac:18:9a:c0:f4:6c:30:4c:c0:8d:2e:
                    e8:88:2c:07:b4:7b:d2:1f:8f:d4:d9:70:f6:30:38:
                    dc:fe:c4:a3:70:d1:d7:63:c9:fc:0d:aa:77:07:ce:
                    71:b9:a9:82:f2:35:41:98:5c:53:75:72:0b:bf:27:
                    39:8e:ba:d3:0c:40:4e:b0:4f:0b:4b:c5:f6:94:d6:
                    3f:8b:8e:cc:07:c1:8c:bf:e7:33:b2:57:d9:94:4b:
                    d7:81:c5:e2:59:d4:3f:38:ac:8a:85:68:5b:f2:c4:
                    7e:f3:36:21:68:bb:c3:6c:6e:b4:fd:ee:50:22:89:
                    2c:94:58:64:e0:73:e9:af:a9:5b:bd:0e:45:67:0c:
                    46:1a:43:87:53:ee:46:e1:d0:7a:03:9a:92:99:b2:
                    f7:cb:d7:d4:a2:5b:92:e6:d4:bc:e3:d7:35:29:f4:
                    93:4f:91:de:8e:ab:67:27:ad:72:d6:ac:95:80:60:
                    5f:a5:28:6d:0d:6e:e2:a3:37:58:13:be:09:0d:5b:
                    c6:a1:1c:c0:d5:92:b6:0d:a3:bb:f3:46:9f:23:05:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:23:90:84:14:CF:86:89:12:CA:8F:50:AB:B8:A2:75:D6:48:00:92
            X509v3 Authority Key Identifier:
                keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e392e302f32342d3234203d3e20323638323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:a3:15:e5:50:d9:47:46:eb:6e:7a:da:50:b6:31:60:f3:
         62:dc:04:91:26:04:22:82:a8:ad:53:64:33:af:d3:fa:e3:dd:
         ec:49:46:e0:6d:54:0a:a8:e0:79:52:f9:c2:c3:53:24:30:20:
         15:95:43:79:e9:92:b3:82:56:0b:d3:22:6a:4a:6f:4a:a4:94:
         75:b2:43:5e:e7:b8:9f:67:7c:1f:37:74:29:52:f4:0c:59:b9:
         cd:82:6b:94:fa:fe:1a:0f:e2:74:e1:7d:4d:bf:33:cc:92:84:
         96:99:a4:74:4f:f8:2d:73:35:64:24:6b:c5:a7:31:20:06:9c:
         cc:24:ce:7e:1c:4b:b5:47:91:80:47:62:db:e0:9f:e6:bf:62:
         7d:fc:e7:47:4a:ca:38:ca:23:fa:81:c8:29:6d:ad:c6:6a:69:
         57:89:02:ac:1d:5a:3f:98:c5:e0:4a:d8:17:17:df:5f:ad:cb:
         0a:4e:61:bf:9b:28:0f:da:e5:2a:aa:f7:c6:ca:e1:ac:b2:49:
         61:eb:48:4e:88:cf:bf:97:30:e8:69:14:55:4d:50:bf:71:8b:
         ce:64:63:c2:c9:bb:55:1b:01:78:c9:31:78:e3:43:c9:a9:a7:
         76:0d:d9:31:60:85:04:ba:54:91:08:55:c1:41:db:8d:47:b7:
         2d:10:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:14 2025 by rpki-client