Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32322d3232203d3e20323638323537.roa
File:                     34352e3233362e3234302e302f32322d3232203d3e20323638323537.roa (raw, json)
Hash identifier:          ODkmskZf/cjUW+j1sVDITgzuhsV57LX2VDnhIw5VRNk=
Subject key identifier:   C6:D2:3E:E2:D2:16:A3:7B:27:45:70:03:B5:34:9B:D0:B9:14:56:88
Certificate issuer:       /CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0
Certificate serial:       5EE319E415B9070779D494303B2411B71D81F771
Authority key identifier: 95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32322d3232203d3e20323638323537.roa
Signing time:             Wed 15 Oct 2025 22:44:21 +0000
ROA not before:           Wed 15 Oct 2025 22:39:21 +0000
ROA not after:            Wed 14 Oct 2026 22:44:21 +0000
asID:                     268257
IP address blocks:        45.236.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl
                          rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e3:19:e4:15:b9:07:07:79:d4:94:30:3b:24:11:b7:1d:81:f7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0
        Validity
            Not Before: Oct 15 22:39:21 2025 GMT
            Not After : Oct 14 22:44:21 2026 GMT
        Subject: CN=C6D23EE2D216A37B27457003B5349BD0B9145688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:34:5f:a5:4a:5a:ff:83:56:1b:fe:76:60:49:
                    de:16:68:c5:3c:ef:d9:89:3d:09:ec:1f:cd:d9:56:
                    c2:eb:d3:59:5e:4c:39:1d:de:28:82:fc:66:b4:ba:
                    f6:69:c9:31:23:18:d0:bc:06:1c:22:b8:07:01:13:
                    a5:2e:44:c6:30:c6:a8:10:15:9c:98:c5:d8:d4:96:
                    05:b7:05:47:af:4f:5a:e1:33:3a:34:3e:38:cd:96:
                    e4:2c:92:cf:ef:64:09:13:a2:bf:05:bc:7d:f4:2f:
                    81:a5:1e:92:08:ca:4a:2e:74:66:a9:52:d3:57:2d:
                    92:95:32:3a:9f:73:70:4e:b5:35:7d:84:60:56:83:
                    53:ad:b3:d1:95:48:9d:55:0d:f7:f9:dc:cb:36:c1:
                    27:77:e6:95:4d:ee:5f:9d:68:2d:8b:00:f6:5e:23:
                    3f:80:b8:50:ff:4b:ed:c8:e8:53:67:1e:f7:d1:c2:
                    b0:8d:63:9a:0a:41:a1:89:31:7a:51:89:d8:af:04:
                    05:00:cc:ca:96:66:8c:48:ac:a7:76:f7:2a:ff:3f:
                    36:a2:79:73:71:15:95:d9:0a:15:b1:3b:6e:39:56:
                    fb:1d:bb:7b:0e:70:d9:7a:3b:67:34:da:5e:8b:3a:
                    c1:da:c8:d9:20:61:69:be:3c:60:44:84:b7:36:18:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D2:3E:E2:D2:16:A3:7B:27:45:70:03:B5:34:9B:D0:B9:14:56:88
            X509v3 Authority Key Identifier:
                keyid:95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32322d3232203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:82:6c:b8:69:f4:4e:91:fb:e5:a5:dc:9e:f8:ac:62:8a:11:
         e4:d1:a4:06:c5:0a:55:f8:53:f2:e5:42:6d:a1:a3:3c:65:8b:
         17:54:48:c1:8d:88:17:3c:1c:f6:f4:21:9d:36:91:73:9c:a2:
         6d:8e:38:01:a9:60:58:37:a5:1a:56:73:d2:d9:f6:3a:50:20:
         04:8d:32:2a:00:40:91:28:7f:d3:b1:d9:79:a1:28:c3:a4:53:
         2a:c6:d2:ee:6b:6f:ba:07:2b:06:93:4b:c5:a0:cb:af:02:fe:
         e5:5f:b1:15:b8:48:48:36:9a:ac:50:c1:58:2e:88:d2:25:b0:
         bc:03:d7:23:16:e0:d3:65:b7:cf:b8:e2:7f:35:b6:4d:9f:22:
         5d:0e:31:1c:0a:34:c0:13:0b:44:19:d2:be:d5:28:2e:44:1a:
         79:10:87:f8:35:59:51:10:b4:b9:37:56:54:47:b5:e7:56:d0:
         54:7e:66:63:cd:ba:e6:e0:f4:26:93:43:01:8c:c6:63:c3:ed:
         42:e0:aa:e3:8b:f1:0d:f5:24:d9:21:99:a6:da:94:77:38:ed:
         da:79:f9:16:8d:16:10:6b:ff:91:3b:48:b3:e0:68:62:06:d2:
         00:32:4f:59:3f:37:03:ee:07:f9:2a:ce:79:ba:c2:fe:3e:2e:
         b3:31:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:32:42 2025 by rpki-client