Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS267085.roa
File:                     AS267085.roa (raw, json)
Hash identifier:          vdfuEyGN6ude2OEhJfSB4VwqGiExpJw/W5trLdctovM=
Subject key identifier:   D6:8F:75:D2:CF:B1:A6:A3:08:3F:95:C8:5F:1E:FE:14:E8:97:AE:F4
Certificate issuer:       /CN=15A0CACB6F5D6B45006136392255670B81DB66F8
Certificate serial:       797378FEEA0E8E3E562DF8569FB8D219A2A48F6B
Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS267085.roa
Signing time:             Mon 29 Sep 2025 11:46:45 +0000
ROA not before:           Mon 29 Sep 2025 11:41:45 +0000
ROA not after:            Mon 28 Sep 2026 11:46:45 +0000
asID:                     267085
IP address blocks:        45.228.240.0/22 maxlen: 24
                          2804:47ec::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:73:78:fe:ea:0e:8e:3e:56:2d:f8:56:9f:b8:d2:19:a2:a4:8f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8
        Validity
            Not Before: Sep 29 11:41:45 2025 GMT
            Not After : Sep 28 11:46:45 2026 GMT
        Subject: CN=D68F75D2CFB1A6A3083F95C85F1EFE14E897AEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:67:a0:6d:3f:de:be:8b:1c:17:12:48:6a:
                    4f:c6:4b:21:2c:fc:90:61:4d:95:e9:74:9e:8b:57:
                    56:6a:2b:97:1e:9b:95:bf:ed:a7:1a:46:41:22:7a:
                    56:64:4b:13:a0:49:0a:8c:b8:d2:84:5e:ee:d4:c1:
                    7d:66:5b:4c:0e:d7:05:a5:de:1a:82:f0:23:b5:7b:
                    6d:36:23:fc:87:d7:0c:6e:00:33:3f:7b:e3:55:1e:
                    80:bf:e4:80:21:a4:10:d7:56:d6:9e:87:67:2f:57:
                    8b:55:7d:bd:4b:96:2d:6a:5d:bb:ae:78:0c:39:28:
                    14:a7:1c:11:bb:ba:80:3e:4b:e4:de:e7:44:f7:d5:
                    20:84:c3:f7:87:5c:c7:8b:cf:2f:20:7e:dd:63:fc:
                    99:7a:5b:91:8c:61:47:a8:58:7d:97:e2:64:7f:11:
                    0f:58:0a:4d:a1:7d:69:fe:b4:9a:9b:6b:dd:87:54:
                    f4:7d:1e:fa:d7:7e:64:96:d6:66:9d:ea:11:93:6f:
                    0f:dc:8d:b1:92:b2:1f:b9:48:96:d2:89:66:01:60:
                    b6:78:19:a7:51:90:43:89:56:72:81:e0:91:29:8f:
                    a3:57:dd:70:01:42:74:80:25:e2:b2:64:01:f5:3b:
                    14:aa:ac:72:7c:98:bd:6d:c4:0c:8c:6c:36:86:e6:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8F:75:D2:CF:B1:A6:A3:08:3F:95:C8:5F:1E:FE:14:E8:97:AE:F4
            X509v3 Authority Key Identifier:
                keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS267085.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.240.0/22
                IPv6:
                  2804:47ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:76:3f:c1:5d:47:05:bf:61:94:60:7a:c5:69:cf:18:73:71:
         37:06:dd:9a:98:30:f4:14:9b:6a:ff:31:3e:97:86:d0:e4:2d:
         74:e9:74:69:a6:8d:73:cd:a0:20:31:e0:3b:5c:45:c5:67:cc:
         dd:a7:45:fc:65:fc:99:4a:d6:44:38:66:87:1f:65:95:55:e1:
         23:53:3f:d9:15:ff:28:ef:42:5a:29:44:80:df:67:c4:6c:aa:
         27:a9:1d:15:59:cd:ec:45:32:8f:e5:1b:9c:ec:f5:a4:2b:e0:
         84:08:37:50:99:f2:a8:b6:c4:99:0c:bd:e5:9f:96:47:00:c4:
         79:25:b2:bf:f0:ab:99:01:cf:dc:51:bb:c0:65:95:cf:7a:9f:
         25:55:7e:49:f5:2b:ea:5e:05:e0:3a:23:b0:4a:40:bc:90:d9:
         8e:31:dd:d1:2c:87:49:84:21:ac:b2:33:02:96:61:2e:98:e7:
         0d:9d:e8:2f:97:bf:94:d8:3b:f5:5a:1d:32:37:58:12:2e:e9:
         f9:c3:8e:21:78:77:71:28:32:7e:ca:28:4e:53:bb:b8:6a:4c:
         07:04:8e:8d:79:24:20:8b:67:25:bb:79:2e:56:98:92:a6:71:
         e9:68:03:1f:02:12:80:56:e5:25:a0:16:51:d8:10:3d:64:38:
         32:27:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:30 2025 by rpki-client