Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/34352e3232392e3230382e302f32322d3332203d3e203238333237.roa
File:                     34352e3232392e3230382e302f32322d3332203d3e203238333237.roa (raw, json)
Hash identifier:          eB9GrKFecuwervMmhfnLeZtSHrqZU4MZ+dII1aFjLew=
Subject key identifier:   7E:26:2C:41:A6:33:26:B8:69:6E:CA:2D:95:47:7E:C7:7D:5C:A6:D2
Certificate issuer:       /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Certificate serial:       0D85F9C45E59F10C5B0412BCFEE67950269EAAA8
Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/34352e3232392e3230382e302f32322d3332203d3e203238333237.roa
Signing time:             Tue 28 Oct 2025 17:56:30 +0000
ROA not before:           Tue 28 Oct 2025 17:51:30 +0000
ROA not after:            Tue 27 Oct 2026 17:56:30 +0000
asID:                     28327
IP address blocks:        45.229.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
                          rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 07:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:85:f9:c4:5e:59:f1:0c:5b:04:12:bc:fe:e6:79:50:26:9e:aa:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
        Validity
            Not Before: Oct 28 17:51:30 2025 GMT
            Not After : Oct 27 17:56:30 2026 GMT
        Subject: CN=7E262C41A63326B8696ECA2D95477EC77D5CA6D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:65:02:9f:82:07:0b:bb:66:5e:31:a0:ce:
                    00:2e:0e:ef:69:98:df:6f:bc:53:2f:95:a1:b7:a7:
                    4a:2f:3c:3a:05:d3:d1:0e:5e:88:c4:10:30:9b:47:
                    3c:1b:7b:93:9e:e3:da:ca:00:24:eb:19:f0:55:17:
                    cc:2b:ac:8a:d1:20:18:34:c8:0c:5a:f6:39:c9:fd:
                    03:db:89:01:fa:1f:6e:fe:b1:2a:35:d3:86:01:e9:
                    f4:79:97:bd:8e:52:da:38:98:2c:ca:eb:1f:d6:21:
                    f5:6d:b9:a2:e0:b8:14:16:d6:f1:df:60:9f:a5:87:
                    a7:66:e4:3b:58:64:78:56:95:25:e0:d9:24:c6:93:
                    89:66:b3:07:a5:1f:18:19:53:51:fd:97:8f:55:34:
                    66:e4:08:cf:f1:e3:33:b3:09:42:33:0e:ad:08:70:
                    92:7c:fb:bd:45:27:dd:15:28:85:5e:62:3d:26:c5:
                    8e:0e:64:b1:a7:a7:1e:c6:5a:b1:d9:c6:50:bd:63:
                    7c:13:5c:fc:9f:cd:19:e3:cb:de:d2:e6:2e:ef:fe:
                    cf:13:19:2a:87:e9:4d:49:77:39:27:43:d2:ed:06:
                    eb:55:64:b6:40:d8:1c:c1:d5:24:2e:89:43:bd:61:
                    0a:d9:aa:89:a9:52:cb:22:bd:77:12:80:76:7d:82:
                    08:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:26:2C:41:A6:33:26:B8:69:6E:CA:2D:95:47:7E:C7:7D:5C:A6:D2
            X509v3 Authority Key Identifier:
                keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/34352e3232392e3230382e302f32322d3332203d3e203238333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:ed:6d:87:61:e5:11:aa:fd:97:64:73:8e:32:0e:64:e0:
         db:c8:68:cd:65:e4:86:9b:e6:79:f5:f3:76:5a:c4:c6:1b:16:
         08:8f:aa:37:ea:7d:3a:b8:c7:a4:ee:94:b0:10:18:d1:ad:fc:
         19:cc:ca:a6:98:c1:e7:9a:dc:91:25:7c:f5:aa:6b:a0:88:d7:
         3d:e6:10:07:2b:51:fd:6d:6e:bb:2f:e6:df:c9:ae:22:23:72:
         8d:6b:35:37:af:67:31:68:e1:f4:1f:1b:16:4a:22:e7:7b:63:
         e0:23:dd:02:90:8a:67:19:77:11:c8:64:26:13:66:e6:fb:4f:
         a4:ef:a5:fc:35:33:50:02:59:1d:b9:e8:ce:e4:70:af:44:24:
         2c:2e:67:ff:06:f5:6c:f1:3f:be:82:31:3e:2c:3e:7a:a0:1b:
         0f:c5:02:b1:0b:04:27:4f:08:89:38:ab:87:a3:83:44:33:69:
         bf:ed:2a:ab:46:c2:9d:e3:de:d5:33:bd:71:cb:ea:c2:49:9e:
         60:1c:c7:36:3e:35:c3:b5:fd:2c:62:b9:c3:33:27:1e:bb:e8:
         30:f2:7e:2a:e8:54:74:04:5a:3e:df:24:6b:6d:a7:1b:a6:84:
         83:aa:a4:48:2c:f9:49:09:3f:eb:7e:69:b6:67:ab:e2:04:9a:
         46:65:3c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:07:38 2025 by rpki-client