Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/34352e3138312e3136302e302f32322d3234203d3e20323639323238.roa
File:                     34352e3138312e3136302e302f32322d3234203d3e20323639323238.roa (raw, json)
Hash identifier:          wMAbLAAkVjYEG8pq8BGQvh2TICdZ5MG3Ms6inA5Ev/M=
Subject key identifier:   EB:34:7B:18:F0:C6:EE:D7:F3:65:08:C8:89:2E:FB:CF:08:F3:6A:1A
Certificate issuer:       /CN=E430529EE7A72E95EA5AAB0120C531BD4CDC79DF
Certificate serial:       3C700FC1A83D4EFD278BF0188AFFEBA7B31EE506
Authority key identifier: E4:30:52:9E:E7:A7:2E:95:EA:5A:AB:01:20:C5:31:BD:4C:DC:79:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/34352e3138312e3136302e302f32322d3234203d3e20323639323238.roa
Signing time:             Tue 14 Oct 2025 02:25:06 +0000
ROA not before:           Tue 14 Oct 2025 02:20:06 +0000
ROA not after:            Tue 13 Oct 2026 02:25:06 +0000
asID:                     269228
IP address blocks:        45.181.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.crl
                          rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:70:0f:c1:a8:3d:4e:fd:27:8b:f0:18:8a:ff:eb:a7:b3:1e:e5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E430529EE7A72E95EA5AAB0120C531BD4CDC79DF
        Validity
            Not Before: Oct 14 02:20:06 2025 GMT
            Not After : Oct 13 02:25:06 2026 GMT
        Subject: CN=EB347B18F0C6EED7F36508C8892EFBCF08F36A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:6f:ca:91:e9:4c:8d:43:9a:bb:e7:2f:d9:
                    fa:bb:fd:47:41:1e:04:dc:2f:e5:27:ea:a4:7e:a9:
                    d9:73:48:68:85:76:37:8a:4b:c0:b9:22:77:e5:c6:
                    e2:af:67:bd:5c:83:75:3a:5c:58:86:8c:7e:18:78:
                    cd:6b:7f:3d:78:bb:a5:9a:dc:ab:4b:08:a8:d9:5c:
                    e6:44:d7:20:67:8d:df:e4:17:cc:38:0a:de:4c:27:
                    1b:6d:52:aa:54:c4:f9:68:41:52:fa:aa:bd:9b:24:
                    aa:d3:4e:5c:e5:74:42:78:0b:66:f0:a8:16:94:a8:
                    af:94:08:0a:26:b9:a3:1f:9e:1c:98:95:04:8c:4a:
                    11:1a:2f:d2:6a:f9:09:ac:25:e4:12:98:da:6f:6a:
                    e9:ba:20:b6:0c:84:67:e8:f3:c1:7f:d4:e4:d4:98:
                    98:bf:4f:db:1a:aa:f4:b8:72:44:e6:a5:7d:25:c1:
                    a4:ec:75:ff:42:fc:21:33:0c:ba:47:50:0d:c7:16:
                    9d:e7:c9:0b:1f:51:b9:54:31:a6:e7:18:7c:fa:76:
                    a7:47:8a:31:8f:a9:e2:60:d8:45:d1:64:21:eb:53:
                    ed:b9:96:0f:b5:27:3e:4e:3e:2f:4b:ef:58:c4:17:
                    85:97:01:54:b2:99:82:2d:07:72:83:29:8d:93:a8:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:34:7B:18:F0:C6:EE:D7:F3:65:08:C8:89:2E:FB:CF:08:F3:6A:1A
            X509v3 Authority Key Identifier:
                keyid:E4:30:52:9E:E7:A7:2E:95:EA:5A:AB:01:20:C5:31:BD:4C:DC:79:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/34352e3138312e3136302e302f32322d3234203d3e20323639323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:20:9b:f7:76:b5:40:b4:d8:86:e3:d5:d3:f2:a7:de:0d:2e:
         ee:eb:a1:77:ad:54:3d:27:21:b2:f7:b7:11:4c:d9:d5:59:b0:
         cb:03:99:12:c5:93:70:d8:18:79:65:2b:ce:5c:86:3e:6c:40:
         39:90:b3:46:d5:c0:99:80:d3:d1:17:5e:92:9a:f4:55:3b:43:
         5c:71:6f:99:7b:18:8d:30:1c:3b:f5:0f:e6:0d:b3:b2:b4:fc:
         ae:d9:47:76:64:bb:59:ac:53:3b:b3:d6:9e:3d:a9:e8:a9:dd:
         b4:9d:61:7c:fb:e2:ce:2f:bd:1e:8b:00:3d:c5:d5:f9:51:53:
         40:20:99:2a:1d:76:da:61:c2:0b:af:55:61:36:8d:e6:fa:14:
         ce:18:94:db:88:20:8e:b7:df:71:c1:d7:36:dc:7e:69:a2:82:
         e7:ff:64:fa:81:ee:54:30:af:97:be:78:0d:94:39:80:bb:b5:
         6c:f8:d9:1c:36:c7:2f:69:65:35:81:49:d4:95:99:2f:6f:42:
         fb:64:d3:4f:b9:75:a7:01:85:a7:16:47:31:06:f7:f7:b5:d8:
         b9:49:92:74:b4:6a:a9:e8:38:ff:0a:8e:c3:bb:83:c7:ef:db:
         29:2a:61:fa:e6:08:cf:c9:ae:2f:3b:d6:ba:bb:7f:2e:79:0d:
         bf:8c:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:30 2025 by rpki-client