Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa
File:                     3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          SvGAQOD11AFblWetR1z0WTg7tw0PTIOEidfipkYQZYE=
Subject key identifier:   A8:0A:AD:8E:F1:5D:FE:11:9E:83:01:D2:23:89:55:6F:88:9E:4A:95
Certificate issuer:       /CN=450AC02B21B3D12F3F8A7B3E6101148947852DCC
Certificate serial:       3274F7AF7ECAD8663CCF8DD74580F0EAF7FAE97B
Authority key identifier: 45:0A:C0:2B:21:B3:D1:2F:3F:8A:7B:3E:61:01:14:89:47:85:2D:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa
Signing time:             Thu 09 Oct 2025 12:13:56 +0000
ROA not before:           Thu 09 Oct 2025 12:08:56 +0000
ROA not after:            Thu 08 Oct 2026 12:13:56 +0000
asID:                     262374
IP address blocks:        170.254.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.crl
                          rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:74:f7:af:7e:ca:d8:66:3c:cf:8d:d7:45:80:f0:ea:f7:fa:e9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450AC02B21B3D12F3F8A7B3E6101148947852DCC
        Validity
            Not Before: Oct  9 12:08:56 2025 GMT
            Not After : Oct  8 12:13:56 2026 GMT
        Subject: CN=A80AAD8EF15DFE119E8301D22389556F889E4A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:64:aa:74:07:7c:ac:05:b8:bb:1c:2b:96:
                    63:a6:3c:71:40:22:f4:52:ab:b3:5a:a0:7f:b2:03:
                    ee:8d:5e:10:8b:93:b7:d3:e2:cd:4e:07:66:0c:ce:
                    ff:86:fc:57:a4:f8:cf:db:a3:95:7a:37:a2:10:79:
                    91:19:79:49:c9:f2:7c:49:3f:40:fb:98:11:ae:25:
                    ae:2c:d8:71:74:90:bc:7d:55:7f:ff:03:bd:bd:83:
                    9c:49:b1:ef:c4:a2:05:d4:71:1a:b1:aa:5c:69:f1:
                    91:1a:36:44:f7:a2:83:a2:3f:5d:da:ae:8d:d6:71:
                    66:80:a3:2d:c9:e6:84:b4:71:33:2e:a4:f5:4d:5e:
                    92:e0:de:70:f3:2b:b6:ac:85:bc:0f:8d:4f:50:f3:
                    2f:ca:9e:0b:07:9a:3a:46:9e:29:b0:12:69:2d:f2:
                    c7:21:3d:35:b1:41:da:13:48:48:90:a8:06:00:96:
                    e1:6d:a4:8b:8c:b7:f9:83:37:35:ed:fb:e6:66:a9:
                    c0:b9:c7:ca:4d:12:f6:f6:f2:d1:25:e6:d6:a5:b8:
                    07:9f:62:c8:84:95:cf:08:1c:01:55:c5:d6:5a:0c:
                    28:f5:61:94:c1:aa:af:c1:22:fd:5d:0b:4b:a2:9a:
                    d9:af:c6:c5:2f:dc:5d:55:cb:ac:ff:82:57:9a:fc:
                    fd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0A:AD:8E:F1:5D:FE:11:9E:83:01:D2:23:89:55:6F:88:9E:4A:95
            X509v3 Authority Key Identifier:
                keyid:45:0A:C0:2B:21:B3:D1:2F:3F:8A:7B:3E:61:01:14:89:47:85:2D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:e1:c1:82:80:16:62:1f:c8:e3:55:bf:36:f9:41:e8:62:ce:
         36:fc:a6:35:d6:37:f5:46:6c:4a:5b:83:fd:9b:69:84:fb:ca:
         ae:2c:c7:2b:bd:29:2d:5e:6c:a2:77:1a:05:9a:8c:b9:06:b5:
         60:4b:2b:2a:38:21:3d:d7:42:bb:60:c6:22:53:d9:91:ec:03:
         b5:c0:b8:ff:57:84:4b:50:23:44:72:5a:28:34:6e:75:3a:64:
         ed:03:6e:83:2e:8a:77:e7:54:91:6a:4f:6b:6a:12:07:f0:e1:
         97:d6:33:a0:20:0a:4f:3d:74:2c:4a:1b:a6:0d:46:ad:99:d4:
         d1:5c:7f:bd:d3:f4:ad:8b:c7:36:08:68:86:57:f1:06:b9:8a:
         a6:eb:f9:8e:43:fb:d9:b3:ac:3c:ef:af:28:1e:8f:5c:3b:a1:
         80:8e:6b:e6:d6:af:d5:d0:11:7d:1f:de:da:14:0f:85:78:0d:
         14:1f:95:31:7d:19:a4:c6:24:ce:38:bb:30:51:5e:77:f9:68:
         1a:bd:dd:48:be:a3:83:b0:90:79:4a:48:da:39:a5:17:98:9c:
         a0:ca:31:de:14:df:22:25:de:76:b7:67:14:e9:bd:cb:ac:bf:
         e1:f2:0c:ad:c5:ca:78:95:17:3f:41:03:8e:77:cb:52:9b:bb:
         d5:da:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:14 2025 by rpki-client