Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136362e302f32332d3233203d3e20323639323838.roa
File:                     34352e3138332e3136362e302f32332d3233203d3e20323639323838.roa (raw, json)
Hash identifier:          d8u5h26uasxQo7tRx+fU4yN6m3APz8uOf4bD0Ypd4dk=
Subject key identifier:   B2:C1:D9:13:B5:9E:2D:F0:7E:71:FD:56:52:86:46:2F:B9:38:DB:C3
Certificate issuer:       /CN=C5423CDD002348905AC2D36D7816B81D97846978
Certificate serial:       34D772D2A96A715FA8947ABCCAEC12D4DA123736
Authority key identifier: C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136362e302f32332d3233203d3e20323639323838.roa
Signing time:             Thu 09 Oct 2025 12:41:09 +0000
ROA not before:           Thu 09 Oct 2025 12:36:09 +0000
ROA not after:            Thu 08 Oct 2026 12:41:09 +0000
asID:                     269288
IP address blocks:        45.183.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl
                          rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d7:72:d2:a9:6a:71:5f:a8:94:7a:bc:ca:ec:12:d4:da:12:37:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5423CDD002348905AC2D36D7816B81D97846978
        Validity
            Not Before: Oct  9 12:36:09 2025 GMT
            Not After : Oct  8 12:41:09 2026 GMT
        Subject: CN=B2C1D913B59E2DF07E71FD565286462FB938DBC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ff:75:24:92:00:c3:df:3d:8a:64:5c:0c:4a:
                    20:e7:97:a4:00:68:ff:33:a1:99:ae:a1:95:c3:d0:
                    73:ed:56:29:19:92:98:8b:0f:a1:4f:dd:19:3a:1f:
                    b3:af:65:eb:57:cf:9b:da:01:8e:2b:1d:58:24:2c:
                    35:46:c0:c5:70:d1:f7:c5:16:e4:24:aa:38:dd:cc:
                    af:c4:5c:e5:ec:9b:e5:0d:e0:26:43:7f:93:af:fc:
                    66:7a:47:64:2d:55:8f:3b:7d:3f:ad:d8:4a:b1:20:
                    42:8c:4e:e8:db:6a:ed:74:6d:36:cb:91:71:95:b6:
                    00:ea:14:54:7e:4d:a1:05:41:05:fb:b4:6d:ac:67:
                    62:6b:e7:5a:6b:a8:10:c5:4e:75:3f:60:a7:61:63:
                    a3:82:16:9a:41:45:6a:62:86:63:38:f8:ee:bb:98:
                    2b:bb:d5:e4:59:8a:82:93:cf:1e:89:72:c2:19:ef:
                    c5:2f:d0:8d:51:b8:8e:4a:f5:f7:02:6a:8a:97:e6:
                    7a:0a:e0:3e:b2:b3:af:94:e1:35:cc:30:0f:43:ec:
                    fc:8c:d0:47:52:a3:af:22:7f:de:9f:df:de:76:2e:
                    f2:2e:91:5e:7b:3f:80:97:1c:c0:95:8d:97:eb:e4:
                    11:f7:41:7c:d3:ae:d2:9f:73:a1:af:59:62:17:ba:
                    73:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C1:D9:13:B5:9E:2D:F0:7E:71:FD:56:52:86:46:2F:B9:38:DB:C3
            X509v3 Authority Key Identifier:
                keyid:C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136362e302f32332d3233203d3e20323639323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:0f:e1:6a:41:5c:7a:14:ec:6a:ac:74:54:b6:2a:9b:15:cf:
         eb:a3:14:00:8c:8d:b4:c2:71:3f:60:33:cb:f2:0b:fb:b6:58:
         70:f3:73:60:7a:b6:77:e8:1d:4f:66:b8:56:1d:bf:91:39:98:
         46:25:a2:0a:78:b1:6a:81:a1:36:44:0e:a8:ea:f9:02:04:30:
         f7:06:e1:52:0c:a3:08:28:27:60:e4:7f:24:21:db:d7:cb:bb:
         4d:82:78:ac:9b:89:23:81:01:4f:b1:cf:cc:8b:d8:f0:b0:03:
         02:aa:29:01:c0:60:c0:e4:cb:16:bc:d3:d5:54:08:c1:64:67:
         4f:ce:7c:da:7c:8f:fc:c4:fc:a3:2e:fa:c2:8e:79:d8:0a:44:
         e0:3d:d2:74:4d:3a:1c:40:1b:5c:77:7f:de:67:ad:26:35:80:
         cb:6e:2a:52:06:d2:62:09:44:d7:19:0a:6c:ed:13:d4:4d:47:
         9a:96:e2:c6:f5:b3:00:06:8e:88:54:ad:1a:9b:f3:a5:00:1a:
         e6:e8:99:34:78:0b:fa:33:f8:e9:25:2c:a3:3d:02:de:03:23:
         4b:9a:f3:2c:8b:12:67:a4:22:56:03:c8:6f:2c:c1:c7:37:fd:
         84:e3:02:25:7e:6f:2a:62:c2:0b:04:41:99:03:3a:79:b1:a2:
         35:a0:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:56 2025 by rpki-client