Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/34352e3232342e3136382e302f32322d3332203d3e20323636393139.roa
File:                     34352e3232342e3136382e302f32322d3332203d3e20323636393139.roa (raw, json)
Hash identifier:          JrUEQFjfe4G5l/Qyw/wlPVbLvelmbWX+UdfuCtyaabI=
Subject key identifier:   47:41:E5:63:3C:82:D1:FE:A4:B3:7C:86:8E:E8:F4:9B:39:8A:F7:62
Certificate issuer:       /CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026
Certificate serial:       574CD718ED96D31513D39B51B1457FDDA68AE155
Authority key identifier: DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/34352e3232342e3136382e302f32322d3332203d3e20323636393139.roa
Signing time:             Wed 15 Oct 2025 18:43:28 +0000
ROA not before:           Wed 15 Oct 2025 18:38:28 +0000
ROA not after:            Wed 14 Oct 2026 18:43:28 +0000
asID:                     266919
IP address blocks:        45.224.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl
                          rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4c:d7:18:ed:96:d3:15:13:d3:9b:51:b1:45:7f:dd:a6:8a:e1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026
        Validity
            Not Before: Oct 15 18:38:28 2025 GMT
            Not After : Oct 14 18:43:28 2026 GMT
        Subject: CN=4741E5633C82D1FEA4B37C868EE8F49B398AF762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:6b:4e:5b:40:26:be:b3:63:c2:bd:cc:95:
                    9b:64:de:b7:4a:5d:98:3d:9e:47:19:ec:d5:ae:70:
                    1c:f6:bc:c5:8c:48:29:b7:42:a8:c8:0d:43:67:d3:
                    1d:f9:98:21:ee:60:20:53:85:36:45:2a:81:8f:99:
                    17:db:9d:f6:c4:9d:2d:4b:7a:04:a4:20:3a:19:a1:
                    c5:89:e8:4f:de:12:9c:f2:2c:b8:76:55:96:22:3c:
                    35:a0:b4:fd:2e:42:c2:af:95:6a:20:6b:00:b0:39:
                    dc:cc:18:01:2f:71:b8:66:94:f2:1e:36:a4:48:56:
                    6d:10:5d:b0:1e:8e:46:b3:db:0b:95:41:1b:e6:db:
                    53:63:c8:38:62:ee:6a:ab:c6:6d:0d:39:62:22:3a:
                    fc:61:62:3b:0c:c2:f7:e6:c3:84:e2:7f:73:b9:c2:
                    ac:63:a8:e0:e0:f0:e3:98:93:9f:99:17:40:b3:13:
                    aa:1f:d4:f5:37:0a:d2:47:c0:88:f8:5d:a4:2f:43:
                    44:6b:4f:df:a5:28:14:9e:6b:c4:61:d3:12:62:ae:
                    64:d5:62:d5:c7:fe:1e:0d:af:54:8e:0d:4f:b9:8f:
                    6f:da:c4:e4:25:67:44:b1:1a:57:1e:a3:c9:96:10:
                    44:a8:00:f1:dd:b0:64:72:dd:8f:e8:ab:ef:5e:26:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:41:E5:63:3C:82:D1:FE:A4:B3:7C:86:8E:E8:F4:9B:39:8A:F7:62
            X509v3 Authority Key Identifier:
                keyid:DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/34352e3232342e3136382e302f32322d3332203d3e20323636393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:21:73:7c:76:93:43:b7:48:9c:95:7e:be:c2:0b:36:71:84:
         20:16:4f:05:8d:18:eb:15:9f:bb:fb:b5:91:9c:43:09:2a:30:
         c8:23:32:68:da:74:8c:2f:22:89:e1:f1:67:b2:9e:33:75:13:
         e1:75:fb:df:95:f3:1d:fe:1f:7c:26:86:18:6e:d2:16:33:89:
         40:7e:5e:60:80:e1:c3:b9:4d:51:7b:bc:01:0a:26:32:40:5e:
         63:7a:11:95:cc:7f:7b:58:ab:ec:1f:67:0e:1d:c5:a9:da:c7:
         82:d6:34:69:8b:d9:83:42:ff:69:0a:78:21:22:ff:c8:de:57:
         1f:9b:98:cb:65:de:51:b4:91:e6:b7:aa:66:92:72:87:13:7f:
         3f:e8:a8:1c:ff:a9:d1:cd:90:90:15:56:dd:6f:11:4d:d5:00:
         10:be:56:d5:88:6b:8b:5e:7b:34:c1:6f:71:94:bd:0e:a1:ef:
         ef:e6:a9:93:b3:65:b8:45:23:e3:3e:b1:7b:b6:e0:01:66:8e:
         c4:ac:eb:fe:b2:53:f0:07:5d:96:aa:ad:dc:2a:bf:6b:11:6f:
         30:ce:89:61:03:f5:fb:84:0a:c5:38:c3:b1:a8:17:20:8e:b6:
         cf:09:97:05:42:36:78:6d:67:b9:1c:b4:ca:70:f2:1d:81:5a:
         d0:1c:18:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:10:38 2025 by rpki-client