Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/34352e37302e3235322e302f32322d3332203d3e20323637363131.roa
File:                     34352e37302e3235322e302f32322d3332203d3e20323637363131.roa (raw, json)
Hash identifier:          yRi1SXpN/dv/T/K6SaSvoW/LDkoILoiPkENVWXL0Ftc=
Subject key identifier:   F5:B6:F8:D0:BC:73:59:94:C6:F4:A1:13:D3:AC:63:77:44:0C:2E:E9
Certificate issuer:       /CN=5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9
Certificate serial:       7076D44C6070DCC0BC4D7CB0A430CB0DE3BF4A9B
Authority key identifier: 5A:1E:4C:0F:6F:96:E5:93:3B:E0:09:91:E3:86:C3:F9:65:E7:C3:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/34352e37302e3235322e302f32322d3332203d3e20323637363131.roa
Signing time:             Mon 06 Oct 2025 16:06:57 +0000
ROA not before:           Mon 06 Oct 2025 16:01:57 +0000
ROA not after:            Mon 05 Oct 2026 16:06:57 +0000
asID:                     267611
IP address blocks:        45.70.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl
                          rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:76:d4:4c:60:70:dc:c0:bc:4d:7c:b0:a4:30:cb:0d:e3:bf:4a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9
        Validity
            Not Before: Oct  6 16:01:57 2025 GMT
            Not After : Oct  5 16:06:57 2026 GMT
        Subject: CN=F5B6F8D0BC735994C6F4A113D3AC6377440C2EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:49:4f:74:d5:99:ce:cd:10:70:1f:e1:1f:f7:
                    4a:5d:98:7e:32:f6:a7:0c:37:78:25:f0:1a:53:79:
                    85:62:bf:4c:f2:66:42:44:7f:7c:a5:c9:7a:9e:6c:
                    2f:38:42:cb:ce:b8:2f:db:24:a7:bf:53:83:af:d7:
                    4c:7d:76:e3:a9:06:f7:d9:b0:dd:59:9b:2c:5d:14:
                    83:e0:67:7a:5d:59:40:bb:59:39:f8:63:e3:3d:2f:
                    2d:83:d7:7e:41:e8:69:72:d0:ae:a4:28:16:a4:5b:
                    50:4f:7c:5b:15:39:c9:1d:a5:e4:11:36:c8:66:09:
                    8a:ee:07:0a:9b:6a:33:a5:57:a2:3a:fc:99:33:8a:
                    54:53:b5:5b:36:72:9b:5b:21:0e:2e:69:60:6d:0d:
                    80:3b:87:9a:2b:9e:2c:36:41:02:99:99:22:7a:36:
                    6d:9e:2e:d4:6d:b4:14:bd:df:e1:15:5c:cf:50:f8:
                    8a:b2:b5:33:ab:1a:cf:1a:2b:10:7e:a1:3a:59:c4:
                    a4:ec:14:fd:80:09:7b:f5:4c:ac:4a:98:16:d9:d5:
                    89:bf:4f:3f:ef:0a:60:16:f0:7f:07:c2:9c:ed:6c:
                    ba:ea:d7:82:5a:7f:3b:af:ab:e0:ca:70:5c:be:b4:
                    40:ef:1a:da:09:ad:63:82:45:91:30:15:46:67:c4:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B6:F8:D0:BC:73:59:94:C6:F4:A1:13:D3:AC:63:77:44:0C:2E:E9
            X509v3 Authority Key Identifier:
                keyid:5A:1E:4C:0F:6F:96:E5:93:3B:E0:09:91:E3:86:C3:F9:65:E7:C3:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/34352e37302e3235322e302f32322d3332203d3e20323637363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:f4:87:22:1e:fe:c7:b2:0b:0a:e9:7a:46:d9:6b:c3:4c:d2:
         10:98:09:da:bb:da:93:a3:94:5a:85:6a:48:85:e0:1b:80:a4:
         36:f6:bf:1e:99:81:be:1b:78:81:dc:47:dd:90:dd:7f:9f:07:
         5f:b8:21:77:1d:f2:60:f4:f1:1b:85:76:34:96:e4:f2:7d:92:
         1e:e4:67:50:88:f9:83:a4:cf:1a:95:d6:5c:45:2a:03:bb:08:
         fc:95:04:72:59:d2:f7:b7:c5:aa:79:ee:fb:18:1b:62:6e:9f:
         bf:f1:35:de:be:9c:0f:1a:66:b1:3d:3f:0e:11:7a:33:af:e5:
         22:30:32:c2:1e:e3:93:ab:c6:98:89:43:31:ec:b3:ec:c3:0d:
         22:fa:74:09:34:77:ca:96:86:bf:7a:b2:13:63:f2:13:85:de:
         43:eb:74:8c:41:62:68:94:0e:55:ca:9b:f4:7b:d0:69:30:06:
         5a:30:26:9f:d2:78:2d:2b:86:ad:1b:c4:bd:b8:27:75:27:c0:
         7d:89:81:32:95:47:cb:85:b1:a9:c0:31:9a:c7:4e:94:61:34:
         49:83:89:7b:43:fe:fd:76:f9:74:c5:43:eb:b5:92:0d:9a:9a:
         6a:b0:6c:18:07:ca:32:f4:1f:56:0d:dd:7c:fe:e0:fa:4a:d3:
         44:30:71:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:40 2025 by rpki-client