Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39362e302f32322d3232203d3e20323637393938.roa
File:                     34352e3136372e39362e302f32322d3232203d3e20323637393938.roa (raw, json)
Hash identifier:          /oOEnAypauONcNbXkKj4AELCL3ogJdLj9O5tkwd15xI=
Subject key identifier:   49:12:72:23:04:D5:EB:13:8A:C4:E3:E3:54:B1:9F:1F:BA:15:15:43
Certificate issuer:       /CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
Certificate serial:       551E8D9DA97681D400A5E250EB011256D4B78479
Authority key identifier: 11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39362e302f32322d3232203d3e20323637393938.roa
Signing time:             Tue 23 Sep 2025 21:08:21 +0000
ROA not before:           Tue 23 Sep 2025 21:03:21 +0000
ROA not after:            Tue 22 Sep 2026 21:08:21 +0000
asID:                     267998
IP address blocks:        45.167.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl
                          rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 17:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1e:8d:9d:a9:76:81:d4:00:a5:e2:50:eb:01:12:56:d4:b7:84:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
        Validity
            Not Before: Sep 23 21:03:21 2025 GMT
            Not After : Sep 22 21:08:21 2026 GMT
        Subject: CN=4912722304D5EB138AC4E3E354B19F1FBA151543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d8:89:c0:4f:a9:8f:68:25:26:16:a2:19:1f:
                    e2:04:5d:c5:35:c5:c2:9f:78:12:fb:ae:2e:28:3f:
                    13:5d:e6:0a:16:3a:94:b9:7d:25:0c:39:22:3e:69:
                    c6:5c:a0:16:11:c7:29:54:da:2c:46:29:e0:a2:f9:
                    2e:c6:b9:35:cb:69:2a:3e:55:4b:46:6d:73:ec:71:
                    0b:f4:22:f4:64:f0:25:bd:e9:06:78:0c:ff:6d:5e:
                    46:70:e4:b6:af:3e:4c:37:14:71:95:fc:25:91:d9:
                    37:4c:72:e0:61:73:2f:94:28:6b:99:71:71:5c:26:
                    37:ca:9c:6f:0d:c3:71:3a:11:fb:5f:c1:58:03:eb:
                    86:71:25:79:4a:ac:32:0e:98:05:e8:a9:43:16:09:
                    fc:13:2a:18:b2:8e:0e:a5:ab:cf:ca:6c:46:63:c3:
                    7e:37:7a:4c:6c:5d:24:db:c6:98:3f:00:c5:01:1f:
                    1a:98:2d:a5:e9:49:16:99:9f:32:a4:a9:50:89:f6:
                    95:f9:ff:05:a1:92:2e:da:95:8e:c5:60:b4:e9:9a:
                    78:a2:44:20:b7:d3:ab:94:99:12:46:25:54:d0:b9:
                    4c:89:78:a1:23:25:be:30:64:36:b3:f6:ee:58:2e:
                    d6:6a:c4:97:3c:a6:ea:0e:fc:76:5d:06:b7:f4:84:
                    dd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:12:72:23:04:D5:EB:13:8A:C4:E3:E3:54:B1:9F:1F:BA:15:15:43
            X509v3 Authority Key Identifier:
                keyid:11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39362e302f32322d3232203d3e20323637393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:83:a5:72:56:4c:d2:66:1b:e2:6d:ee:4d:76:63:9d:a7:0f:
         52:29:c4:e4:72:c7:26:15:f1:91:06:f7:76:6b:96:6e:e6:84:
         77:c1:84:d9:ab:ee:05:aa:0e:09:59:fc:cd:1a:a9:11:1c:25:
         e8:4e:98:59:88:0c:08:d1:35:8a:17:a0:d2:a9:45:14:c2:68:
         18:2d:bd:f1:39:e6:27:68:e5:de:6c:1a:e4:b2:fb:15:5f:d8:
         b2:f6:77:18:ed:f6:41:c2:a9:9a:ce:f1:99:51:2d:58:1b:a2:
         d1:56:54:42:e0:2f:ac:e1:8c:96:42:d5:0a:09:81:1e:6a:70:
         b1:c9:97:02:21:84:f8:7a:14:5c:cf:32:dd:21:bd:df:30:86:
         1c:27:78:c9:b5:20:8e:55:3e:0f:32:97:a6:9c:29:7f:10:cd:
         26:6f:91:e4:74:15:99:6c:5e:47:3f:b1:2b:13:97:e5:9b:2f:
         31:f1:f1:7f:d8:39:df:c2:fc:70:8a:e3:10:f3:69:8c:87:1e:
         cf:0d:f6:ec:d9:54:a8:00:ae:f1:e8:b8:31:db:f7:1a:82:72:
         7f:83:22:28:c0:57:22:da:5a:75:89:98:f9:ba:f1:2d:41:22:
         b6:1c:6d:2f:2f:54:2e:06:5e:87:1d:ee:54:64:91:0f:71:d6:
         6a:92:7a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:14 2025 by rpki-client