Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS268613.roa
File:                     AS268613.roa (raw, json)
Hash identifier:          sbhkSWppXNXHn4wR608oT2WTj3NJojPbPMQtadttGK0=
Subject key identifier:   D4:29:ED:50:7E:24:9E:70:0C:D7:31:8F:A8:AD:5F:CF:C1:F1:86:E1
Certificate issuer:       /CN=15A0CACB6F5D6B45006136392255670B81DB66F8
Certificate serial:       5058698773EA38EC20EA4D2E63E098BC06E7D12A
Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS268613.roa
Signing time:             Mon 29 Sep 2025 11:46:54 +0000
ROA not before:           Mon 29 Sep 2025 11:41:54 +0000
ROA not after:            Mon 28 Sep 2026 11:46:54 +0000
asID:                     268613
IP address blocks:        45.164.4.0/22 maxlen: 24
                          2804:53e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:58:69:87:73:ea:38:ec:20:ea:4d:2e:63:e0:98:bc:06:e7:d1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8
        Validity
            Not Before: Sep 29 11:41:54 2025 GMT
            Not After : Sep 28 11:46:54 2026 GMT
        Subject: CN=D429ED507E249E700CD7318FA8AD5FCFC1F186E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:bf:a0:65:5f:95:05:cc:a5:94:c8:5d:4d:
                    83:45:7b:ad:24:60:37:ad:d4:a8:ea:c1:2b:d6:3e:
                    44:f1:a0:bf:b7:ea:9a:25:b3:41:10:c6:e5:8f:cc:
                    d5:00:fb:c9:eb:95:fd:42:9a:73:ed:7a:96:10:f4:
                    ab:86:53:12:9e:ed:91:50:1d:f4:cc:6e:1a:17:d1:
                    ea:6c:18:da:67:41:5b:27:51:42:3f:f1:9f:29:38:
                    57:12:7e:7f:df:f8:30:57:fd:61:19:21:70:64:8c:
                    cc:ff:09:8b:59:3c:7a:60:2d:a3:8b:01:27:6c:c7:
                    1a:ca:43:b9:3c:92:bc:9e:cd:38:a1:3f:7e:75:52:
                    f0:d0:c4:94:19:4c:5b:ca:42:5b:c0:e0:0d:75:5f:
                    fe:80:14:84:3c:44:1c:da:95:81:47:fe:2d:90:7b:
                    a5:ca:15:ce:83:f1:ca:79:6e:47:51:65:4f:7a:40:
                    69:b2:9b:0b:3a:09:2a:7a:60:1c:dc:ff:53:07:7a:
                    fe:7a:fd:f0:6f:2a:7e:99:40:3f:b7:f8:12:21:ea:
                    e2:6f:81:a7:9e:6c:4e:6a:d9:71:cb:c6:6d:15:20:
                    7b:48:47:d5:86:78:d6:a4:23:50:80:cd:61:74:aa:
                    ac:57:7b:f7:d0:2c:48:43:10:3f:f5:28:47:cd:58:
                    d4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:29:ED:50:7E:24:9E:70:0C:D7:31:8F:A8:AD:5F:CF:C1:F1:86:E1
            X509v3 Authority Key Identifier:
                keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS268613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.4.0/22
                IPv6:
                  2804:53e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:2f:84:b8:e8:09:43:b4:0f:a4:64:dd:e5:2a:e0:3e:a7:39:
         8f:4e:e4:95:d4:d9:f6:1e:ba:95:c4:43:0a:87:e6:4e:a1:89:
         da:98:76:69:82:b4:a5:7e:e7:e7:3f:82:9e:11:61:25:f7:60:
         42:d7:ce:a1:68:bd:4e:99:71:ce:3f:38:cb:df:47:6c:0a:1e:
         bf:a4:8a:28:2f:bc:64:b5:4f:d8:5e:1e:6e:72:09:14:7d:3e:
         2c:34:8b:f9:86:39:54:f8:c5:72:fb:17:eb:31:42:43:44:ee:
         c5:f1:12:4e:9d:9c:b4:45:62:f6:c1:2f:42:f4:aa:1f:d9:a4:
         a1:0d:85:b6:1e:a4:19:9c:60:45:ac:28:c0:2f:3e:88:af:af:
         78:21:b9:74:c3:81:7d:21:46:bd:42:a4:a6:9e:1d:b9:d7:17:
         09:12:cf:5d:e1:5b:5d:bd:0e:e5:c0:f3:d6:12:45:fc:3f:b4:
         75:16:5a:5e:91:6d:c6:fc:29:57:4d:e1:e3:c5:00:16:a4:ac:
         a2:c0:11:68:be:b1:62:25:5a:75:3c:4b:5f:0b:3d:17:2a:71:
         e0:e3:74:22:cd:af:19:76:4b:ea:37:43:8b:f1:15:f8:15:71:
         b2:c7:9e:63:ac:4e:34:05:1b:cb:43:83:97:8b:e5:a1:b6:88:
         25:16:e9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:30 2025 by rpki-client