Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/34352e3136332e3234372e302f32342d3234203d3e20323638353838.roa
File:                     34352e3136332e3234372e302f32342d3234203d3e20323638353838.roa (raw, json)
Hash identifier:          c/tNGzOtGZPFnebFIyHd/AAf8reMcIiVLETRkzGvcqk=
Subject key identifier:   FB:9F:22:0E:35:D8:3C:E0:74:0D:A2:62:F2:9A:D6:9B:92:25:EC:7E
Certificate issuer:       /CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
Certificate serial:       28A43A8E8114516C1A792C78ED961B63B7B2559B
Authority key identifier: BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/34352e3136332e3234372e302f32342d3234203d3e20323638353838.roa
Signing time:             Sun 27 Jul 2025 01:33:21 +0000
ROA not before:           Sun 27 Jul 2025 01:28:21 +0000
ROA not after:            Sun 26 Jul 2026 01:33:21 +0000
asID:                     268588
IP address blocks:        45.163.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl
                          rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 20:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a4:3a:8e:81:14:51:6c:1a:79:2c:78:ed:96:1b:63:b7:b2:55:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
        Validity
            Not Before: Jul 27 01:28:21 2025 GMT
            Not After : Jul 26 01:33:21 2026 GMT
        Subject: CN=FB9F220E35D83CE0740DA262F29AD69B9225EC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:85:f2:c2:8f:a2:c9:6b:de:42:cf:cf:24:
                    1b:6a:3a:e3:b8:47:d2:1c:d0:7e:99:b1:51:0b:b9:
                    8b:41:d3:cd:5b:d2:af:c9:59:0b:f8:3d:e6:66:cd:
                    4b:f8:98:b1:cd:6e:15:e6:09:54:94:72:6e:93:0f:
                    7e:9a:9d:9b:08:17:52:76:2b:de:51:ca:2b:99:fa:
                    df:23:64:6d:08:89:cf:52:ec:df:3e:eb:bd:aa:7f:
                    8b:f2:b7:67:65:18:c0:ce:f3:dd:c7:b2:19:14:2d:
                    33:d3:70:0a:bf:f0:e7:c1:47:df:80:2b:4e:43:51:
                    0b:95:66:0f:0b:38:77:fd:d4:7b:cc:16:14:d3:81:
                    74:b3:f2:0a:23:37:e4:af:7a:2f:da:ba:ac:d7:57:
                    31:94:db:47:3a:95:6f:a5:83:76:71:95:91:bc:ad:
                    39:1d:c0:61:1e:29:fa:66:7a:b9:5a:00:b1:e9:1d:
                    bd:85:e8:c5:00:1a:32:04:e1:85:d1:90:31:c5:df:
                    b6:e9:87:93:52:50:5e:51:ec:b6:94:2a:48:7f:27:
                    b2:b3:b3:da:b6:9a:ab:ef:a6:61:b9:94:de:0d:7f:
                    64:47:ce:a3:d7:31:7f:ae:59:b3:e4:06:3f:00:68:
                    64:00:50:c9:3a:0d:41:92:a5:a9:4f:0c:71:41:7c:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9F:22:0E:35:D8:3C:E0:74:0D:A2:62:F2:9A:D6:9B:92:25:EC:7E
            X509v3 Authority Key Identifier:
                keyid:BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/34352e3136332e3234372e302f32342d3234203d3e20323638353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:44:e5:6f:09:f4:f7:6c:f2:2a:e7:8a:52:54:1f:08:57:e7:
         62:24:31:c2:07:51:d6:c1:51:c1:e6:26:5d:64:0b:7f:39:14:
         84:a3:62:73:61:81:49:b8:64:61:ef:59:fe:22:8e:72:5f:22:
         91:f6:14:cc:c7:69:37:5a:ec:40:fa:b8:ed:e2:ed:f1:52:c5:
         e9:d7:66:41:02:7c:1a:da:63:8a:d1:4d:a9:be:e7:f1:af:76:
         b0:e5:41:87:38:65:23:bb:c9:64:7c:34:5c:63:aa:e5:71:71:
         54:84:36:23:94:11:08:a8:31:a8:ab:03:52:94:19:59:31:58:
         22:0c:94:a6:69:fd:f3:e4:ca:4b:c2:64:1a:50:90:93:11:4c:
         59:50:a3:fc:c7:f4:8d:45:77:8c:00:1c:4d:00:dd:1f:fa:2e:
         8e:27:c5:b7:72:53:f8:3e:ce:fb:f7:89:07:e6:37:b9:0c:85:
         df:75:3e:12:b9:67:dd:c7:78:51:f8:84:b0:bc:3b:da:c2:46:
         b9:18:9d:b9:6a:33:3a:9f:77:4e:c7:13:53:fb:b5:20:57:95:
         9c:6d:a3:ff:0b:37:a4:78:23:49:b5:a6:4d:25:6b:56:a2:f5:
         3c:a7:91:db:41:2a:36:f9:55:ac:37:44:19:d9:5e:1d:c8:b1:
         a9:8a:4e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:44:27 2025 by rpki-client