Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32332d3233203d3e20323633333238.roa
File:                     34352e3136342e3130342e302f32332d3233203d3e20323633333238.roa (raw, json)
Hash identifier:          HBn5VaMhlqrTmJpKT+PRo6qs2/VuvKi2qwEb9jVf8O0=
Subject key identifier:   47:94:59:09:97:55:B2:85:1C:1F:EB:0E:14:11:A1:EF:14:52:C8:C4
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       281591CAFFC6D9769B687E21D1D3CF9B0DB1DDD7
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32332d3233203d3e20323633333238.roa
Signing time:             Tue 07 Oct 2025 11:52:25 +0000
ROA not before:           Tue 07 Oct 2025 11:47:25 +0000
ROA not after:            Tue 06 Oct 2026 11:52:25 +0000
asID:                     263328
IP address blocks:        45.164.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:15:91:ca:ff:c6:d9:76:9b:68:7e:21:d1:d3:cf:9b:0d:b1:dd:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Oct  7 11:47:25 2025 GMT
            Not After : Oct  6 11:52:25 2026 GMT
        Subject: CN=479459099755B2851C1FEB0E1411A1EF1452C8C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:63:fb:e2:38:6c:71:77:81:a6:09:93:77:
                    1f:5f:3a:6d:3f:37:4a:75:fa:38:f2:df:ed:e2:53:
                    20:54:45:ae:4f:21:21:ac:c4:a4:0e:b5:f3:1d:ce:
                    f3:7a:a1:df:02:8e:e9:d9:7e:c8:9b:a0:ee:6b:23:
                    17:c9:f2:2d:2a:57:44:92:c0:a6:7b:63:e1:fa:77:
                    95:a7:aa:06:57:33:83:4c:fc:2d:1b:af:76:6a:a6:
                    8f:1c:76:92:c9:e3:a6:07:cb:89:ee:5e:06:c6:0e:
                    cb:c0:cf:53:26:b2:28:50:cc:86:ef:d4:6e:85:65:
                    da:d2:fc:60:c1:e8:8f:d6:71:41:b8:61:0b:1c:32:
                    37:18:12:f3:97:20:81:46:a7:4c:69:6c:97:ec:65:
                    e6:c9:f8:2d:05:a2:8e:e7:2c:86:9e:48:1c:ab:06:
                    cf:47:d1:8c:48:49:52:0a:33:d5:29:f2:5e:6e:17:
                    47:c1:df:4a:c6:ff:1e:3d:8f:4d:bc:9e:ae:c8:28:
                    3b:01:ff:3e:a1:05:76:1c:19:43:03:27:2e:41:8d:
                    66:2d:3c:e4:7b:80:62:e1:f2:d9:90:f9:f6:1f:1a:
                    7b:49:f9:25:5e:37:a4:6e:5d:f1:8a:2e:a8:22:92:
                    41:4f:54:36:c7:d6:f2:3b:93:1d:66:f7:66:83:0d:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:94:59:09:97:55:B2:85:1C:1F:EB:0E:14:11:A1:EF:14:52:C8:C4
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32332d3233203d3e20323633333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:8c:2c:ab:a2:de:6e:b5:14:f5:3d:7a:1d:1d:65:66:72:58:
         38:f8:e8:46:c6:ad:8c:50:5f:0c:28:3c:3d:43:69:a8:47:74:
         f0:83:a2:46:1b:9c:f6:d6:32:fb:0b:1f:85:a4:bc:12:ea:79:
         26:da:30:20:72:27:c6:15:7c:13:3f:b0:1e:af:1d:4d:0d:11:
         10:17:46:03:68:3c:77:58:9e:d7:d1:7f:0c:83:f5:f3:e8:db:
         21:de:07:67:04:b0:30:49:6b:6f:99:ff:17:a5:e4:ab:4b:c3:
         a9:00:e8:d8:61:e0:ad:9f:89:df:54:88:0a:60:5d:af:0f:ad:
         3f:f7:8c:c3:92:31:e4:ea:c9:4a:88:4f:a4:c5:c9:24:42:8c:
         42:12:6e:12:46:f7:70:c5:3f:23:06:9d:18:dd:e8:0d:dc:5a:
         7a:88:97:1d:d8:30:d9:6a:3b:47:40:fd:65:1b:a7:7e:75:d0:
         bf:41:11:1f:ed:ae:e8:df:a5:d6:6d:ed:27:c9:5d:c1:4d:1d:
         98:10:46:75:d4:1e:3f:f5:16:fd:ee:f7:0f:93:04:6f:de:c2:
         df:d0:cd:3c:ff:e3:e6:82:e2:87:5c:27:9f:b8:05:d4:4a:91:
         27:67:3c:3e:a2:12:99:c9:a7:03:dc:1b:f0:12:2d:48:4d:26:
         d4:a0:78:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:53:47 2025 by rpki-client