Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131302e302f32342d3234203d3e20323637303539.roa
File:                     34352e3232382e3131302e302f32342d3234203d3e20323637303539.roa (raw, json)
Hash identifier:          doHWMHnAMY2s1tjBzEX/cTJYMH8V7yw9cB/JGIayda8=
Subject key identifier:   6D:71:DD:4E:FC:30:D4:84:C6:0E:42:62:F9:68:4F:6C:02:71:03:B9
Certificate issuer:       /CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Certificate serial:       2EE81B58D1DE8248C85FD2C97101264CA5126F
Authority key identifier: 13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131302e302f32342d3234203d3e20323637303539.roa
Signing time:             Fri 17 Oct 2025 03:35:16 +0000
ROA not before:           Fri 17 Oct 2025 03:30:16 +0000
ROA not after:            Fri 16 Oct 2026 03:35:16 +0000
asID:                     267059
IP address blocks:        45.228.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl
                          rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e8:1b:58:d1:de:82:48:c8:5f:d2:c9:71:01:26:4c:a5:12:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
        Validity
            Not Before: Oct 17 03:30:16 2025 GMT
            Not After : Oct 16 03:35:16 2026 GMT
        Subject: CN=6D71DD4EFC30D484C60E4262F9684F6C027103B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:01:a2:39:4b:c9:b2:35:52:cc:34:6f:ae:
                    01:e5:79:86:b8:09:db:3f:c6:76:15:96:77:2c:04:
                    67:6c:44:2a:4b:f5:86:33:c8:c5:02:ca:4b:4f:47:
                    51:60:79:ef:54:85:fc:aa:18:1c:75:d2:27:fb:99:
                    cb:28:dc:00:1b:00:e9:6e:d1:43:25:08:b2:2b:0d:
                    9e:5b:83:21:00:f3:4a:1f:1a:ba:f7:34:fd:04:f1:
                    b5:98:ea:90:07:36:4b:eb:26:dd:6c:a5:3a:20:90:
                    f8:0f:d5:df:72:13:ba:b8:73:6d:80:d8:15:48:d8:
                    44:c7:af:e6:2b:00:d3:a4:85:b0:fe:d1:00:43:8c:
                    06:b5:67:e4:f8:2f:dc:fa:d9:a5:35:03:1d:21:81:
                    fb:26:da:f9:d0:6b:89:b5:f7:0a:5f:d4:2f:e8:51:
                    8e:dd:f5:09:37:4a:4a:50:c6:33:32:b3:c4:d3:79:
                    1c:29:29:97:c6:21:50:12:44:10:43:91:e6:e9:57:
                    89:a2:3b:5e:6e:6b:ac:3b:77:51:bb:b7:eb:b3:8c:
                    f1:e2:5a:f9:3b:1a:10:db:36:e3:7d:5c:8a:c2:2f:
                    59:57:ed:f4:09:b1:a4:1f:54:e8:18:8c:5f:2a:ed:
                    05:a8:b5:40:30:bb:f2:49:49:98:82:80:07:1a:ee:
                    6d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:71:DD:4E:FC:30:D4:84:C6:0E:42:62:F9:68:4F:6C:02:71:03:B9
            X509v3 Authority Key Identifier:
                keyid:13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131302e302f32342d3234203d3e20323637303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:2a:51:af:e3:f3:ed:06:c7:64:53:f5:78:76:b3:c5:3c:1f:
         43:76:f1:80:1a:8e:f3:6a:94:71:ff:a7:b7:92:fa:ee:6d:15:
         10:b4:14:38:34:2d:ad:7f:ef:9e:1e:54:51:2b:a3:f6:fc:7a:
         df:76:92:00:e3:20:53:4e:7b:33:2e:08:cc:87:2e:43:66:0a:
         1c:c0:c1:ab:d8:6b:8f:1a:30:c2:10:b0:e4:a8:8d:10:d8:81:
         4c:b6:6d:fe:3f:8a:46:09:66:31:55:e9:13:38:40:6f:ed:ea:
         2e:b4:b4:7a:e6:34:ff:f8:54:1d:e6:b4:71:42:2f:45:f2:cd:
         4f:14:ec:c0:d9:9e:11:35:27:37:1d:ed:27:bb:37:f6:8d:e0:
         ac:39:48:90:22:57:72:8d:40:68:37:7f:3e:27:21:e6:ef:65:
         f0:ff:f2:9d:d0:2a:01:bf:6d:26:77:ef:10:f9:52:7b:0f:0b:
         94:8d:a3:fd:93:90:7d:b9:e8:ac:fd:40:e6:ed:34:0a:b6:54:
         3b:dd:b7:80:a3:4a:ff:19:37:0c:33:d4:14:2b:c1:3f:33:cf:
         3d:55:d1:f8:96:42:25:4b:d5:df:74:45:be:bb:e0:57:12:12:
         fa:62:94:46:5f:94:61:18:19:6d:e5:b2:1c:b7:a9:a1:8a:da:
         ae:f1:1d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:25 2025 by rpki-client