Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa
File:                     34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa (raw, json)
Hash identifier:          JJ/KRIsPN8lcf03nfsCnH8WEYKrxCSUBWx9lR03Fr2A=
Subject key identifier:   D4:D9:0C:D4:AF:8E:8F:9B:B7:A0:DE:21:72:ED:9C:C5:D1:C6:9F:FC
Certificate issuer:       /CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Certificate serial:       5FC8D1D7C0C4CECB4F3E225C6C55F470A5B213E6
Authority key identifier: 13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa
Signing time:             Fri 17 Oct 2025 03:35:16 +0000
ROA not before:           Fri 17 Oct 2025 03:30:16 +0000
ROA not after:            Fri 16 Oct 2026 03:35:16 +0000
asID:                     267059
IP address blocks:        45.228.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl
                          rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c8:d1:d7:c0:c4:ce:cb:4f:3e:22:5c:6c:55:f4:70:a5:b2:13:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
        Validity
            Not Before: Oct 17 03:30:16 2025 GMT
            Not After : Oct 16 03:35:16 2026 GMT
        Subject: CN=D4D90CD4AF8E8F9BB7A0DE2172ED9CC5D1C69FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6c:cc:36:1b:8c:0c:25:26:f1:2b:78:c2:1b:
                    83:4c:00:9c:45:38:c3:34:a1:3b:ae:bd:ce:1e:3c:
                    0c:d0:0f:9a:a6:df:1c:54:42:75:dc:bf:60:8d:f6:
                    ee:a8:c1:43:ff:74:f6:e9:e1:05:00:e0:68:70:05:
                    d6:ba:b4:24:7f:77:f2:54:47:71:77:e3:3d:fe:52:
                    3a:78:5b:00:bd:9f:49:95:a6:11:f4:01:9c:bc:98:
                    55:de:46:ad:c0:25:31:e1:36:31:53:ab:fb:40:ba:
                    cf:bc:03:b9:38:50:67:d8:e1:49:84:81:a3:0a:8d:
                    4b:b4:86:2f:c7:1f:ef:9a:38:af:84:08:2b:00:fa:
                    81:9d:d4:53:a3:84:76:83:8a:15:2c:e1:b2:7f:60:
                    00:d7:47:61:86:fb:2e:8a:8e:fc:f1:c2:1f:59:51:
                    a9:94:d6:bf:7a:b2:ae:d8:2e:49:cb:eb:52:04:a2:
                    ad:47:87:7a:0d:85:6c:98:01:d5:ea:86:22:fa:5d:
                    94:57:69:35:2e:29:ae:62:e3:5e:91:d4:69:50:32:
                    a0:b7:af:f6:ab:9c:7e:cd:9a:df:65:a1:9c:cb:93:
                    a9:e0:90:b1:a8:3d:84:50:ce:4b:da:96:98:05:ea:
                    96:66:9e:85:91:3f:53:1f:fb:6e:98:4f:93:79:1b:
                    8a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D9:0C:D4:AF:8E:8F:9B:B7:A0:DE:21:72:ED:9C:C5:D1:C6:9F:FC
            X509v3 Authority Key Identifier:
                keyid:13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32342d3234203d3e20323637303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:0c:47:6b:5f:4d:54:c1:60:82:7f:58:a3:a3:34:30:68:ec:
         5f:ca:4f:73:2e:ba:aa:ed:16:3d:ca:b8:8f:bb:7c:65:91:ea:
         50:af:9b:91:ff:27:67:6f:43:5e:b0:bd:66:76:ac:12:3a:d6:
         eb:b9:43:46:89:9b:5f:78:f9:e1:62:16:62:94:9c:ee:6b:82:
         b0:1a:ee:61:88:30:04:de:7c:67:c7:3b:be:3a:8d:db:9d:7c:
         61:74:29:e4:63:1e:b5:e4:41:7d:9e:71:48:2c:37:a7:c0:b5:
         f7:41:ee:78:a6:11:ce:e0:ef:d7:42:ec:bd:f7:5c:1c:10:17:
         ff:10:59:92:d6:c3:62:22:28:88:bb:7c:fd:95:1a:47:56:4c:
         c5:34:7d:58:13:91:72:4e:de:d8:a7:11:f1:0c:ba:27:b8:c0:
         a9:f9:dd:0d:73:ff:5a:23:38:a3:85:53:e3:3c:1d:7c:59:e5:
         c3:42:18:9a:04:d9:e2:c4:31:6e:c5:30:99:f6:cb:4e:9a:65:
         74:fd:01:af:f8:34:9f:76:85:cf:d0:36:74:44:26:4b:c4:ed:
         29:dc:00:5b:28:d1:e9:0d:49:1e:0b:56:fc:7c:4b:6c:74:63:
         22:4b:48:c2:1c:7e:26:3c:74:02:e8:51:f3:2d:ad:ea:cd:fe:
         65:ba:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:04:36 2025 by rpki-client