Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa
File:                     34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa (raw, json)
Hash identifier:          oDTmT+lIJ9ROVxyujugE7kJ40aLakAyAq7i9ohBg4TU=
Subject key identifier:   43:68:B2:15:52:98:AB:D9:55:19:C1:9C:05:85:0F:92:B5:A7:BD:98
Certificate issuer:       /CN=AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5
Certificate serial:       387DA0F1988EB9CA4D9857A43A6E2CE7E614C54E
Authority key identifier: AB:94:7F:B2:92:EA:C0:79:1D:C1:DB:5B:5D:0A:4C:4C:39:02:41:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa
Signing time:             Fri 11 Jul 2025 15:13:22 +0000
ROA not before:           Fri 11 Jul 2025 15:08:22 +0000
ROA not after:            Fri 10 Jul 2026 15:13:22 +0000
asID:                     268126
IP address blocks:        45.169.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.crl
                          rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Jul 2025 01:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7d:a0:f1:98:8e:b9:ca:4d:98:57:a4:3a:6e:2c:e7:e6:14:c5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5
        Validity
            Not Before: Jul 11 15:08:22 2025 GMT
            Not After : Jul 10 15:13:22 2026 GMT
        Subject: CN=4368B2155298ABD95519C19C05850F92B5A7BD98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ee:10:c1:df:ea:b5:4f:64:0b:03:78:5e:7a:
                    a0:a1:20:53:7f:96:da:1a:ec:1e:5f:d3:b8:e6:1f:
                    88:76:ac:3f:21:08:13:aa:5d:20:7b:c8:23:e7:18:
                    f0:5f:47:a5:3c:ad:3c:81:9d:d2:8c:70:cd:df:ac:
                    20:f5:72:05:9c:ba:39:a2:fc:ab:2f:c5:ca:98:b4:
                    3c:0a:a6:ba:89:a7:89:3b:94:73:3a:a6:cc:45:9a:
                    98:65:9d:f0:31:1f:8e:ad:70:b9:2b:f8:7f:66:32:
                    e2:cf:11:cd:f6:7e:43:45:3a:ca:9e:93:f1:7e:72:
                    d7:cc:ff:28:a0:f2:31:01:6a:74:42:4c:ea:ab:1c:
                    3f:59:bc:8e:c9:ac:72:c4:b1:38:b5:7f:1b:91:18:
                    9e:32:a0:dd:bd:24:6e:f0:aa:22:d9:e4:84:23:0f:
                    1c:da:5a:49:45:16:ad:7b:52:4f:c2:78:80:ad:dc:
                    84:be:44:50:f1:ec:7a:48:56:24:72:8a:50:10:e7:
                    c7:50:0e:09:46:51:02:46:c4:27:da:22:f5:d3:97:
                    7a:28:10:9c:87:dc:39:6f:cd:44:f4:be:07:64:6e:
                    c6:d8:d0:ee:f5:c5:64:82:3c:2a:79:15:2a:a4:0e:
                    a1:9b:72:52:3b:53:66:89:4a:50:a5:50:48:c2:65:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:68:B2:15:52:98:AB:D9:55:19:C1:9C:05:85:0F:92:B5:A7:BD:98
            X509v3 Authority Key Identifier:
                keyid:AB:94:7F:B2:92:EA:C0:79:1D:C1:DB:5B:5D:0A:4C:4C:39:02:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:09:a2:83:37:d0:86:54:da:ed:a4:26:eb:55:bd:15:2c:4c:
         9e:94:19:0a:32:7a:62:b6:e6:89:dc:e8:3f:7e:50:ca:27:4d:
         9a:d7:84:a8:e6:93:30:e5:66:85:d8:9b:dd:d3:19:f3:64:ba:
         fe:62:fd:8a:e9:ee:7a:96:75:f5:d6:e0:22:b9:c9:1c:38:12:
         da:9f:69:c4:11:ac:26:83:2e:f4:46:55:0a:9b:3a:cd:a2:6b:
         b4:bc:a2:53:20:a0:09:84:a5:e5:8a:ff:23:c4:d9:ef:1c:a7:
         a1:2a:38:d2:a3:70:a9:37:70:3a:20:08:dd:e2:55:4f:3c:f0:
         f4:e4:04:77:77:b3:26:dc:a6:78:b5:e7:1d:1d:b0:c9:e3:63:
         9c:03:b7:4d:de:fd:f5:94:8d:4f:23:dc:04:18:9a:77:54:24:
         51:56:83:ed:b2:21:37:f7:bc:05:80:ea:11:2d:5e:38:58:1c:
         c7:1f:70:8f:fa:cf:fb:1a:cd:8e:3f:ca:95:07:f6:9f:d2:19:
         25:3a:1a:68:c5:3d:b4:01:0d:4c:3c:cf:d4:5a:03:4c:e6:2f:
         de:bd:f1:2c:89:7a:28:d1:a8:72:a6:00:6a:53:f1:07:08:5b:
         be:71:99:bb:73:84:1a:aa:b1:29:69:34:ba:be:c5:c4:e5:13:
         42:08:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 13 07:22:07 2025 by rpki-client