Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/34352e3136382e3136342e302f32322d3332203d3e20323638303635.roa
File:                     34352e3136382e3136342e302f32322d3332203d3e20323638303635.roa (raw, json)
Hash identifier:          Uk7k0k1mNZe0VXC3WHRAxzd2S0K+aaU852mLzAMemyw=
Subject key identifier:   3A:EC:99:D9:8C:6F:DD:B6:84:8B:13:4C:83:6B:9A:46:35:63:2F:43
Certificate issuer:       /CN=A22611466C3B8A8017A764F82626629474F96253
Certificate serial:       308569E3901402F9340E87B32DB26D13A725C4C4
Authority key identifier: A2:26:11:46:6C:3B:8A:80:17:A7:64:F8:26:26:62:94:74:F9:62:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A22611466C3B8A8017A764F82626629474F96253.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/34352e3136382e3136342e302f32322d3332203d3e20323638303635.roa
Signing time:             Sat 23 Aug 2025 00:12:20 +0000
ROA not before:           Sat 23 Aug 2025 00:07:20 +0000
ROA not after:            Sat 22 Aug 2026 00:12:20 +0000
asID:                     268065
IP address blocks:        45.168.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/A22611466C3B8A8017A764F82626629474F96253.crl
                          rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/A22611466C3B8A8017A764F82626629474F96253.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A22611466C3B8A8017A764F82626629474F96253.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 20:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:85:69:e3:90:14:02:f9:34:0e:87:b3:2d:b2:6d:13:a7:25:c4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A22611466C3B8A8017A764F82626629474F96253
        Validity
            Not Before: Aug 23 00:07:20 2025 GMT
            Not After : Aug 22 00:12:20 2026 GMT
        Subject: CN=3AEC99D98C6FDDB6848B134C836B9A4635632F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1e:6b:fe:5b:93:1c:b1:1e:31:38:27:f3:ba:
                    dd:f8:63:e8:00:6c:85:f5:99:09:7a:7c:5a:04:3b:
                    c7:0e:37:e4:cb:89:63:f9:fa:42:61:96:60:50:8d:
                    91:4d:fd:99:c6:bf:05:a3:69:fd:e3:f7:a6:d4:e5:
                    14:f9:16:37:97:c3:c8:72:36:02:19:69:a4:d2:30:
                    13:c3:67:9c:1c:5e:f9:0a:68:49:2a:50:bf:08:50:
                    58:d1:05:d1:b2:cb:18:d2:83:e0:e4:41:f0:e0:10:
                    b5:d1:a9:c2:06:c8:e2:91:25:03:95:1e:57:87:4c:
                    9f:28:1b:c9:b5:4b:85:b0:97:e7:7b:b5:c9:6f:85:
                    b6:f6:cc:eb:36:10:0c:e3:eb:10:98:3b:70:8d:5e:
                    2e:b7:65:75:78:ad:3d:37:6d:b5:4a:fe:cc:05:84:
                    b8:b7:03:da:19:76:93:98:b0:8a:0c:f5:b7:a4:de:
                    53:c7:61:27:ee:82:0d:d4:04:c0:c8:dc:70:88:a1:
                    3f:32:4b:0d:09:0f:6b:cf:a0:9a:cb:87:88:b2:3f:
                    58:41:10:aa:16:c4:04:db:cf:67:fe:da:60:bc:42:
                    d6:e2:80:3a:9a:97:a5:b2:dc:59:db:23:02:a3:e2:
                    07:84:ff:7b:3b:55:36:cc:c6:f7:61:9d:8a:ab:b6:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EC:99:D9:8C:6F:DD:B6:84:8B:13:4C:83:6B:9A:46:35:63:2F:43
            X509v3 Authority Key Identifier:
                keyid:A2:26:11:46:6C:3B:8A:80:17:A7:64:F8:26:26:62:94:74:F9:62:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/A22611466C3B8A8017A764F82626629474F96253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A22611466C3B8A8017A764F82626629474F96253.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/34352e3136382e3136342e302f32322d3332203d3e20323638303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:13:f8:ac:e9:a6:db:4c:9d:13:46:10:2e:44:b1:c7:9c:e0:
         c7:e0:fe:b6:52:34:23:35:8c:df:5d:ae:7d:71:82:d5:0d:39:
         ad:48:36:cc:0f:87:a6:ee:cb:bc:9f:47:b4:12:3a:30:01:43:
         56:8d:04:1b:df:07:ed:63:8f:54:5f:27:d8:1f:72:cf:f0:46:
         e3:dc:e7:2b:44:34:52:fb:f2:93:d5:13:2f:90:0a:9a:75:bd:
         89:3d:79:72:4c:e6:bd:b7:ac:76:84:d2:93:f4:69:fc:2c:a7:
         3f:ec:11:41:ac:73:60:f8:a5:37:07:3e:7f:b5:21:59:a9:6b:
         4e:68:e9:30:dd:3f:2c:10:31:bc:88:ff:76:cb:31:9c:dd:c2:
         bc:4d:3d:0b:08:08:f3:06:67:20:0e:1d:25:83:b3:b7:f5:4e:
         b2:b2:71:3c:d4:d9:ce:bf:3e:0e:fb:2c:a3:32:cb:e1:69:a1:
         da:73:19:9e:83:be:5c:e7:59:48:5d:41:0a:bb:0d:ae:63:30:
         08:64:d1:c2:08:8f:69:ca:89:4b:bd:2e:b7:4d:24:5e:bd:45:
         d9:ef:88:38:12:e2:8a:c7:15:28:14:f1:45:05:68:00:a0:2c:
         85:a3:d4:a9:1c:ca:64:cc:cf:d7:2c:44:0f:4e:29:9c:6a:d8:
         69:44:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:32:28 2025 by rpki-client