Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa
File:                     34352e3137382e32322e302f32332d3233203d3e20323639303135.roa (raw, json)
Hash identifier:          N5557z/JE0CqD1kA2YSYextjmxW1FqbzCGsqO0D9r7E=
Subject key identifier:   2D:13:0B:63:12:68:C2:AC:7A:81:49:D6:F1:F6:B7:8E:74:80:27:69
Certificate issuer:       /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
Certificate serial:       01ACA4C8DEC14C0582E05B374B5026CA450D65E3
Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa
Signing time:             Thu 02 Oct 2025 15:23:24 +0000
ROA not before:           Thu 02 Oct 2025 15:18:24 +0000
ROA not after:            Thu 01 Oct 2026 15:23:24 +0000
asID:                     269015
IP address blocks:        45.178.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:a4:c8:de:c1:4c:05:82:e0:5b:37:4b:50:26:ca:45:0d:65:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
        Validity
            Not Before: Oct  2 15:18:24 2025 GMT
            Not After : Oct  1 15:23:24 2026 GMT
        Subject: CN=2D130B631268C2AC7A8149D6F1F6B78E74802769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:ac:5a:f2:b4:ae:67:26:44:15:a9:7f:e4:
                    a2:5f:63:f3:0c:55:ef:75:58:2d:3e:e6:1f:1f:e0:
                    2f:02:ea:85:7d:39:40:ae:dd:ff:44:01:4f:14:16:
                    e3:b4:b2:93:4f:ab:e4:51:e2:6c:1f:c6:2a:37:2e:
                    4b:e1:8c:3e:e9:a4:06:a4:c1:d6:b3:05:c7:d4:9b:
                    80:13:35:27:c1:80:36:ae:cc:c3:40:c9:dc:48:87:
                    e1:69:2b:af:bb:11:1c:51:34:15:94:43:42:42:88:
                    76:2b:aa:05:af:54:41:8d:2d:44:7a:25:9c:42:3e:
                    2c:81:15:34:82:b9:0e:77:9b:f6:67:4b:6e:87:da:
                    28:4a:c9:5b:2c:e5:21:4b:4c:75:f5:74:8d:60:0f:
                    5f:52:a2:34:b7:3a:8a:6d:8b:3a:85:0a:6d:88:40:
                    2f:7e:89:1c:82:d0:50:66:ae:67:9e:94:8c:92:09:
                    7c:49:33:db:c3:b7:8d:a9:74:be:8a:ce:f4:ea:b6:
                    9f:e8:8b:fb:fd:16:85:b3:19:ee:d2:74:d0:ef:5f:
                    99:10:5f:81:3c:7f:c6:45:50:7a:55:1f:26:28:ae:
                    6f:e3:57:ad:de:f1:90:5d:2a:f2:5c:86:55:8d:02:
                    60:a9:a9:f8:6b:e1:d7:21:a3:a5:c7:ca:ba:f8:68:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:13:0B:63:12:68:C2:AC:7A:81:49:D6:F1:F6:B7:8E:74:80:27:69
            X509v3 Authority Key Identifier:
                keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:a3:b8:5f:6b:c7:f2:6c:67:a1:83:ab:18:07:76:9f:a3:39:
         b3:d7:bc:7b:ab:0e:03:f2:c6:1e:d1:c5:51:c5:e2:f5:3e:ae:
         32:77:e3:6f:b8:eb:64:a8:cd:84:4b:d2:6e:80:cf:13:34:1b:
         a9:19:0a:5d:ba:ae:66:19:1c:51:c9:09:6a:5e:76:b9:4e:45:
         3f:f0:ad:51:29:8a:db:98:10:1d:cc:c2:ec:ad:4d:43:a2:91:
         0c:20:ac:5a:7d:0e:f5:96:f7:02:b4:aa:92:4f:6f:e2:39:c6:
         f6:33:f1:82:ca:f5:a8:3d:1b:c3:f3:2b:83:11:3f:97:ea:89:
         bc:02:7d:a6:8d:bd:05:e6:13:f8:49:40:d5:f9:ef:60:a3:94:
         53:da:8e:bb:89:83:dc:c1:4e:14:9c:14:c9:44:5b:56:18:d9:
         e4:71:47:c2:d2:ba:5e:d9:a0:45:cb:72:8e:9e:ed:d8:46:e5:
         21:e9:38:b1:03:94:69:4b:13:f1:6e:b2:05:70:7b:48:56:93:
         72:41:2a:03:77:e7:b4:e3:83:4f:eb:89:0c:a1:0e:f6:36:3e:
         d6:fe:10:7d:e6:95:37:5b:fc:c7:a7:b3:7f:f7:1a:9d:e6:21:
         bf:f9:8e:51:4b:d2:c8:8d:2d:c3:bc:a7:35:45:da:c3:2b:f6:
         50:4b:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:14:21 2025 by rpki-client