Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/34352e3136372e3231362e302f32322d3232203d3e20323638303039.roa
File:                     34352e3136372e3231362e302f32322d3232203d3e20323638303039.roa (raw, json)
Hash identifier:          4p7I31DJ+0cBj0XJEl+Z2kOJOAXg4FZaRCbXcuLsoSo=
Subject key identifier:   A9:AD:5F:B4:90:B4:A4:6A:19:7C:F7:26:FD:98:6A:DA:A0:61:44:B6
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       67867818D29A70BF8039C199989DE772ED3F2B54
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/34352e3136372e3231362e302f32322d3232203d3e20323638303039.roa
Signing time:             Mon 06 Oct 2025 15:08:07 +0000
ROA not before:           Mon 06 Oct 2025 15:03:07 +0000
ROA not after:            Mon 05 Oct 2026 15:08:07 +0000
asID:                     268009
IP address blocks:        45.167.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 04:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:86:78:18:d2:9a:70:bf:80:39:c1:99:98:9d:e7:72:ed:3f:2b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Oct  6 15:03:07 2025 GMT
            Not After : Oct  5 15:08:07 2026 GMT
        Subject: CN=A9AD5FB490B4A46A197CF726FD986ADAA06144B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:d3:37:f3:5f:ef:02:3a:4d:89:62:24:19:
                    f8:a6:96:c8:26:4c:ee:d2:41:07:1b:fe:01:db:81:
                    85:3c:d6:60:ce:7d:a0:77:b2:cf:cc:cf:32:c4:4d:
                    b0:6a:11:2b:d1:f4:ff:ce:02:22:4b:b2:5e:df:7e:
                    5c:61:6f:6d:1f:0f:1e:f6:fa:6b:ed:e7:4a:63:ee:
                    d3:41:9c:81:01:93:14:c6:f6:83:60:e8:bb:6b:c9:
                    3f:33:61:4e:59:11:53:ca:07:c5:57:09:16:ae:62:
                    ba:b8:06:af:86:c0:c2:88:67:c2:87:1b:ea:4f:9e:
                    6f:da:1f:e2:0a:c1:88:3a:de:39:d0:3a:d3:e2:93:
                    c9:3c:a2:1d:9b:69:16:90:84:dd:8a:0d:bc:08:d2:
                    53:a7:8d:39:86:a7:72:17:94:26:fd:43:17:4f:26:
                    94:62:79:dd:2e:3f:77:3c:8e:45:f0:04:46:ca:c2:
                    41:58:c2:67:27:45:f1:20:e4:3c:6c:6f:65:1b:68:
                    e5:8c:7c:14:79:2c:29:bc:da:07:10:3d:bf:95:84:
                    5a:96:40:b1:53:51:25:35:46:8d:a5:bc:7e:25:6d:
                    63:d5:23:b6:60:be:ff:9e:45:53:72:5d:83:04:fa:
                    bd:85:6c:81:67:8d:96:31:a8:11:f5:91:0c:73:cb:
                    66:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AD:5F:B4:90:B4:A4:6A:19:7C:F7:26:FD:98:6A:DA:A0:61:44:B6
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/34352e3136372e3231362e302f32322d3232203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:c1:11:cc:f5:eb:1f:94:de:98:4b:6c:36:ff:42:af:04:
         02:ad:ec:ae:24:d4:78:d8:b9:a2:47:71:53:e9:2c:a1:4a:ce:
         45:a2:98:64:e6:b2:af:59:e0:9f:a2:ae:ee:8b:06:c9:35:db:
         43:53:cd:0c:04:cc:a4:95:0c:83:d8:56:b7:7c:f6:d7:55:ed:
         0b:a4:91:b4:1a:6d:18:ab:ee:f4:eb:e0:c4:19:55:00:3c:81:
         70:1e:2e:d9:2e:c4:9d:57:e3:0a:4a:c2:d4:20:54:a9:75:d0:
         00:5b:1f:c9:bc:fa:d6:c7:d3:02:ad:3b:de:ff:e1:d4:87:a5:
         a4:b4:51:b0:12:c1:b6:04:62:ca:ba:4e:b5:83:09:66:8c:2c:
         95:99:0f:9e:07:68:9f:a3:35:a8:f4:cf:fc:41:0b:06:21:2f:
         36:19:35:43:01:7d:b2:cc:42:ae:f7:bb:a2:be:64:f7:f2:6c:
         3f:de:1b:a1:89:f2:ed:b6:be:88:c8:a2:e1:47:61:0f:4b:d4:
         ba:dd:ce:d6:36:04:5b:bf:b4:fa:94:03:00:50:b5:35:5d:e9:
         3c:c3:34:ed:f6:cf:58:1d:2c:7b:0a:58:42:b2:86:56:b3:a5:
         e9:79:a7:28:c9:aa:ce:10:41:a9:96:58:cc:74:6f:36:5d:a6:
         85:2d:14:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:04 2025 by rpki-client