Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS266949.roa
File:                     AS266949.roa (raw, json)
Hash identifier:          CBjELyVB2y2K1Wsgg3KAMsQA82JT1vqDfuwzaRyQ6ts=
Subject key identifier:   5A:BC:46:5B:F9:41:53:BF:CB:C2:A6:CD:A4:C4:AE:C5:ED:9E:51:DE
Certificate issuer:       /CN=15A0CACB6F5D6B45006136392255670B81DB66F8
Certificate serial:       05D30D6B743890997DC27668EFDA780DA6C8E9BA
Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS266949.roa
Signing time:             Mon 29 Sep 2025 11:46:47 +0000
ROA not before:           Mon 29 Sep 2025 11:41:47 +0000
ROA not after:            Mon 28 Sep 2026 11:46:47 +0000
asID:                     266949
IP address blocks:        45.225.196.0/22 maxlen: 24
                          2804:45c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d3:0d:6b:74:38:90:99:7d:c2:76:68:ef:da:78:0d:a6:c8:e9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8
        Validity
            Not Before: Sep 29 11:41:47 2025 GMT
            Not After : Sep 28 11:46:47 2026 GMT
        Subject: CN=5ABC465BF94153BFCBC2A6CDA4C4AEC5ED9E51DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:19:f9:74:3e:70:c8:e1:2b:9d:3f:40:86:
                    0c:5e:62:35:86:86:51:f8:06:78:10:73:76:aa:43:
                    d9:84:62:05:fe:51:43:cd:63:1e:f3:28:0d:47:69:
                    e7:c3:e8:78:70:82:e9:f0:7c:2c:65:38:84:7b:6e:
                    83:80:01:5b:3c:df:88:67:80:25:ab:63:9f:15:e1:
                    0e:f3:ff:87:84:33:cb:e4:d7:34:50:aa:a7:18:23:
                    45:6b:df:1b:24:d1:d5:03:7e:7a:8d:c0:5a:18:de:
                    8e:b7:65:de:aa:69:fc:29:b9:63:b6:b8:4c:5b:dc:
                    60:b8:87:49:65:2f:56:54:e5:cb:fe:33:0e:d3:64:
                    c5:73:69:9b:10:50:75:04:72:ae:02:90:cb:5d:1e:
                    13:05:78:2b:1d:73:9c:fc:b9:56:5a:3f:7e:87:86:
                    d5:ed:c6:e7:d1:89:3f:43:5f:0d:b8:8e:fa:4b:4a:
                    b1:69:b3:f9:77:3e:59:39:dc:1e:c3:65:49:50:4f:
                    22:ad:32:0a:18:e5:18:4e:d4:a4:2b:a7:c8:05:5b:
                    87:89:f4:b4:a3:69:42:52:9f:ab:59:90:b8:88:79:
                    42:47:ea:e5:45:d2:34:af:13:59:57:38:96:71:c8:
                    0d:23:67:ad:ac:a5:ec:7e:fd:0a:68:c9:72:2c:18:
                    ca:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BC:46:5B:F9:41:53:BF:CB:C2:A6:CD:A4:C4:AE:C5:ED:9E:51:DE
            X509v3 Authority Key Identifier:
                keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS266949.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.196.0/22
                IPv6:
                  2804:45c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:6b:94:c6:e2:61:2a:e5:04:56:b4:fa:26:62:8e:8f:dd:0c:
         40:ff:6a:32:86:8a:18:19:7f:34:28:ae:08:a5:5c:51:e4:56:
         33:50:22:fe:8f:83:d6:49:59:7e:50:21:60:86:cb:0d:c4:31:
         ba:5b:15:c3:95:3c:23:16:dd:88:0e:3d:50:e6:68:84:99:e9:
         ef:05:01:c2:ac:6d:e7:ce:0b:30:aa:52:82:76:3d:88:30:ca:
         54:f1:01:c8:65:1a:4e:fc:59:f0:57:fb:b1:b6:7d:00:6e:9f:
         26:5a:f6:76:49:e2:72:6f:ac:14:e1:27:1f:9c:89:eb:b9:1e:
         e1:4a:c3:f7:9c:81:04:27:aa:74:fb:cd:df:59:1b:72:16:1d:
         9b:ec:7f:69:95:4d:19:e2:3d:70:ab:17:41:18:54:1f:02:5b:
         79:87:e9:f2:17:42:d3:57:7f:13:12:13:a4:ae:26:68:f4:a9:
         05:cf:ba:8a:69:40:d8:ee:ad:a6:8c:05:87:6f:d3:b9:6d:cc:
         7b:b1:db:18:3a:ac:ff:6d:be:89:32:45:2e:08:3d:a0:34:8d:
         5e:8b:db:28:3b:ef:19:e7:5e:f8:b6:3e:e7:90:8c:1e:84:ae:
         9c:43:f4:e2:5b:c2:20:31:1a:d9:b8:c2:c2:fb:68:93:c4:fe:
         dd:0c:66:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:30 2025 by rpki-client