Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32322d3232203d3e20323633333238.roa
File:                     34352e3136342e3130342e302f32322d3232203d3e20323633333238.roa (raw, json)
Hash identifier:          XYaGRbxo6wrGy2KGeIuScyrSvu8sxfpitGCnVNG9W7s=
Subject key identifier:   07:9E:A5:8A:1C:03:DD:2A:AB:3D:A9:26:46:A4:0D:16:EA:61:6A:20
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       3793B5B298BFEB0B6E51C1C2E9B5A3EC90B4E503
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32322d3232203d3e20323633333238.roa
Signing time:             Sat 04 Oct 2025 13:14:27 +0000
ROA not before:           Sat 04 Oct 2025 13:09:27 +0000
ROA not after:            Sat 03 Oct 2026 13:14:27 +0000
asID:                     263328
IP address blocks:        45.164.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:93:b5:b2:98:bf:eb:0b:6e:51:c1:c2:e9:b5:a3:ec:90:b4:e5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Oct  4 13:09:27 2025 GMT
            Not After : Oct  3 13:14:27 2026 GMT
        Subject: CN=079EA58A1C03DD2AAB3DA92646A40D16EA616A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:66:03:12:45:51:e3:d3:29:34:e3:55:1e:
                    68:01:f0:3e:f5:78:9f:f4:69:99:a5:39:b8:47:44:
                    41:8e:88:19:4f:de:de:81:47:b8:6f:ae:da:eb:95:
                    35:b5:db:e9:09:d5:3a:d9:bb:7d:92:61:b0:2c:9f:
                    e8:3e:aa:30:bf:bf:b7:fd:76:c8:94:56:4b:c5:07:
                    52:91:e6:9b:3f:46:ba:a0:63:3b:df:d2:96:6c:e9:
                    24:8f:29:67:5a:ff:28:7e:d0:53:80:05:6b:66:f7:
                    94:80:a0:06:a2:b6:45:6d:c7:16:f3:52:b2:e8:f4:
                    d5:ca:14:c8:4d:43:fd:af:09:1f:de:f3:2b:4f:aa:
                    5f:71:e8:ed:08:8f:e3:c5:7f:b1:92:78:6e:65:13:
                    5e:ee:61:fe:b9:f9:76:f5:8a:a1:6b:3a:85:dc:08:
                    f3:84:a7:45:c3:93:62:c6:a3:c8:0f:e0:05:2d:d4:
                    e6:ce:08:a6:37:6b:7b:7e:56:b6:90:8b:d8:99:d0:
                    bd:35:69:c4:82:84:ad:47:a4:57:4e:60:be:17:d4:
                    d3:fd:c5:31:38:80:ff:a2:e5:6a:df:06:e1:98:1b:
                    7a:ba:67:36:93:e1:79:69:cb:58:7b:26:c4:c6:4e:
                    6e:0f:01:d7:b0:c5:7e:4f:d3:05:7c:09:5d:a3:be:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9E:A5:8A:1C:03:DD:2A:AB:3D:A9:26:46:A4:0D:16:EA:61:6A:20
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32322d3232203d3e20323633333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:9f:07:15:08:2b:71:ad:c2:48:aa:74:ad:e4:be:ba:33:8c:
         a6:10:2d:f0:d0:e0:66:8c:01:16:52:ef:cc:35:1e:b6:48:46:
         2f:af:08:58:62:0f:1d:a5:c3:7e:6a:56:0b:27:17:8d:90:2a:
         81:43:ed:72:8b:d7:84:de:55:22:af:68:fc:36:e9:07:a9:5d:
         66:2f:cc:91:f7:ba:20:0d:ae:a3:05:44:c9:5b:79:37:56:66:
         a8:02:54:8f:fa:74:87:ce:65:97:ed:5a:fc:8e:3f:5b:df:08:
         a6:1d:f0:18:cf:c9:6b:5c:e7:5c:c2:b5:a7:0b:c5:e6:06:27:
         b7:c0:50:5d:bb:92:10:5c:16:82:b1:9c:97:66:f5:16:f8:61:
         a5:6c:02:bf:bf:65:a0:42:55:fa:ad:55:d8:fc:75:bf:d2:c3:
         21:97:10:b5:45:59:5e:83:7a:e4:b8:ea:e2:5e:83:c8:85:97:
         6b:d2:a8:f4:55:b8:5e:ce:04:71:34:39:aa:1e:76:8a:0c:25:
         01:53:3e:06:c3:dd:7f:f3:4c:4a:e6:b8:e8:46:91:a3:91:5d:
         aa:9f:f0:3f:cd:4f:d9:c0:c5:53:5c:01:30:9d:87:fd:66:3c:
         a0:c8:74:6f:d8:ec:59:54:96:7a:40:ef:ea:37:7f:64:a2:e8:
         1f:18:84:ce
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN5O1spi/6wtuUcHC6bWj7JC05QMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVCNTI5QjBFREFFNDQ3RTNGMEJDNDE4NTIyMUVEMDM5
NENGQzdEQzAeFw0yNTEwMDQxMzA5MjdaFw0yNjEwMDMxMzE0MjdaMDMxMTAvBgNV
BAMTKDA3OUVBNThBMUMwM0REMkFBQjNEQTkyNjQ2QTQwRDE2RUE2MTZBMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf7WYDEkVR49MpNONVHmgB8D71
eJ/0aZmlObhHREGOiBlP3t6BR7hvrtrrlTW12+kJ1TrZu32SYbAsn+g+qjC/v7f9
dsiUVkvFB1KR5ps/RrqgYzvf0pZs6SSPKWda/yh+0FOABWtm95SAoAaitkVtxxbz
UrLo9NXKFMhNQ/2vCR/e8ytPql9x6O0Ij+PFf7GSeG5lE17uYf65+Xb1iqFrOoXc
CPOEp0XDk2LGo8gP4AUt1ObOCKY3a3t+VraQi9iZ0L01acSChK1HpFdOYL4X1NP9
xTE4gP+i5WrfBuGYG3q6ZzaT4Xlpy1h7JsTGTm4PAdewxX5P0wV8CV2jvjGVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUB56lihwD3SqrPakmRqQNFuphaiAwHwYDVR0j
BBgwFoAULrUpsO2uRH4/C8QYUiHtA5TPx9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVMaGRDYWdEaFJkcnpydzZoNFlhMUNxSkZxY0FLbXdRVExRUzlVM0d5
MlgvMC8yRUI1MjlCMEVEQUU0NDdFM0YwQkM0MTg1MjIxRUQwMzk0Q0ZDN0RDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFQjUyOUIwRURBRTQ0N0Uz
RjBCQzQxODUyMjFFRDAzOTRDRkM3REMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFTGhkQ2FnRGhSZHJ6cnc2aDRZYTFDcUpGcWNBS213UVRMUVM5VTNHeTJYLzAv
MzQzNTJlMzEzNjM0MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzMzMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpGgwDQYJKoZIhvcNAQELBQADggEBAD6fBxUI
K3GtwkiqdK3kvrozjKYQLfDQ4GaMARZS78w1HrZIRi+vCFhiDx2lw35qVgsnF42Q
KoFD7XKL14TeVSKvaPw26QepXWYvzJH3uiANrqMFRMlbeTdWZqgCVI/6dIfOZZft
WvyOP1vfCKYd8BjPyWtc51zCtacLxeYGJ7fAUF27khBcFoKxnJdm9Rb4YaVsAr+/
ZaBCVfqtVdj8db/SwyGXELVFWV6DeuS46uJeg8iFl2vSqPRVuF7OBHE0OaoedooM
JQFTPgbD3X/zTErmuOhGkaORXaqf8D/NT9nAxVNcATCdh/1mPKDIdG/Y7FlUlnpA
7+o3f2Si6B8YhM4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:48:30 2025 by rpki-client