Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32322d3332203d3e20323633333238.roa
File:                     34352e3136342e3130342e302f32322d3332203d3e20323633333238.roa (raw, json)
Hash identifier:          +X7u6whcCRGbI9LnftQ/MZpKdzaYeOOJOmdNgLJmTlI=
Subject key identifier:   84:8C:21:10:98:FA:81:E9:80:18:71:BD:3A:CB:7B:B4:B3:A6:B0:B2
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       38C7FEF2D00170BEAE5BC21593E786460EB4885A
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32322d3332203d3e20323633333238.roa
Signing time:             Tue 07 Oct 2025 11:53:44 +0000
ROA not before:           Tue 07 Oct 2025 11:48:44 +0000
ROA not after:            Tue 06 Oct 2026 11:53:44 +0000
asID:                     263328
IP address blocks:        45.164.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c7:fe:f2:d0:01:70:be:ae:5b:c2:15:93:e7:86:46:0e:b4:88:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Oct  7 11:48:44 2025 GMT
            Not After : Oct  6 11:53:44 2026 GMT
        Subject: CN=848C211098FA81E9801871BD3ACB7BB4B3A6B0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:46:00:02:37:fd:bf:67:98:28:0e:bd:fa:26:
                    87:22:2f:7c:3f:40:a0:7f:0b:8d:fe:5e:98:87:3c:
                    d3:0c:a3:d3:58:1f:69:b2:73:6c:cf:07:69:f2:46:
                    b4:d0:c0:92:bd:e1:3c:11:e6:7d:54:a8:92:d1:e8:
                    37:1b:5f:7e:92:f3:75:93:99:2f:97:af:9a:3c:c7:
                    36:7e:7b:a6:5f:a8:02:ea:d8:94:02:58:25:ca:d7:
                    ec:b1:42:c3:3b:d3:f2:7f:77:fb:3a:90:63:03:80:
                    65:ed:55:00:b3:a1:a0:fa:b3:93:64:a9:96:84:01:
                    71:5c:f9:e5:99:f2:72:ce:66:7b:ee:c9:87:91:79:
                    0b:08:2a:ea:cb:a7:bc:ec:8e:6e:c2:94:16:03:0e:
                    0f:f4:c2:73:ab:30:e6:cf:ab:4d:af:42:f6:be:01:
                    75:1e:53:39:bb:5f:e4:0a:33:f6:8c:ba:21:c5:ab:
                    cf:3c:da:71:bf:d5:fb:4d:49:26:26:dd:34:96:9d:
                    66:ed:94:cd:f0:ba:87:6e:a2:8f:9a:4c:1d:b4:4f:
                    11:af:93:4f:e6:95:87:9d:e3:ea:88:c7:26:8b:80:
                    10:82:79:44:5e:a5:8f:d9:82:43:a3:7a:a3:a1:da:
                    fd:db:09:80:54:9f:d1:7f:fc:44:86:0b:d3:9c:2b:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8C:21:10:98:FA:81:E9:80:18:71:BD:3A:CB:7B:B4:B3:A6:B0:B2
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32322d3332203d3e20323633333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:40:17:29:c7:78:63:2c:40:02:81:52:80:f6:99:95:67:98:
         22:c5:e3:16:2b:e2:6c:de:5c:38:f9:8d:9b:e4:21:e0:83:7a:
         fb:f8:49:ef:21:21:e8:84:44:fd:56:a1:50:9a:97:39:ee:87:
         7b:56:5d:ac:57:e8:a7:c5:92:30:e1:c9:7e:b3:9f:cc:9f:2f:
         a5:74:b0:05:b3:67:80:84:9d:20:26:ea:97:48:07:8d:1d:83:
         0e:ab:1c:0c:b5:3d:8c:9b:3f:b7:6b:6e:84:e6:e7:68:23:9a:
         9e:db:14:1a:22:34:b8:a9:c2:ac:ed:b1:e8:ef:88:ea:dd:d4:
         24:e7:d0:d0:b1:81:85:37:89:10:d8:2f:04:91:dc:e5:93:ef:
         48:fd:7e:73:5e:3d:df:5f:9e:d9:79:7b:f8:fd:a4:79:36:22:
         08:87:3e:7e:de:32:23:d0:a8:94:40:de:b6:21:fd:57:ca:c7:
         21:b7:11:dd:4f:c3:6e:97:69:e0:b2:d2:8b:ed:aa:d7:ed:31:
         94:e4:3f:b6:69:f2:c2:65:59:94:7e:ee:8a:22:66:76:cf:a9:
         c3:84:58:07:8a:d0:ed:78:a6:b6:ff:76:50:ef:b0:dd:86:4d:
         d1:16:c4:9b:38:2d:5c:4d:70:c8:82:70:60:87:6f:bf:39:59:
         7c:bc:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:48:30 2025 by rpki-client