Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32322d3232203d3e20323639363236.roa
File:                     34352e3139302e3130382e302f32322d3232203d3e20323639363236.roa (raw, json)
Hash identifier:          Ghf24KKbyZqb/dydUv1p3KTkYK103rJRmKscSH8CBsc=
Subject key identifier:   F8:19:33:04:9B:2A:FB:77:CC:96:FF:9C:E1:82:D5:26:2E:4B:82:51
Certificate issuer:       /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial:       2F07FEF956FA0E8C7F809907266BBDCE517DE6B7
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32322d3232203d3e20323639363236.roa
Signing time:             Sat 02 Aug 2025 20:35:20 +0000
ROA not before:           Sat 02 Aug 2025 20:30:20 +0000
ROA not after:            Sat 01 Aug 2026 20:35:20 +0000
asID:                     269626
IP address blocks:        45.190.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:07:fe:f9:56:fa:0e:8c:7f:80:99:07:26:6b:bd:ce:51:7d:e6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
        Validity
            Not Before: Aug  2 20:30:20 2025 GMT
            Not After : Aug  1 20:35:20 2026 GMT
        Subject: CN=F81933049B2AFB77CC96FF9CE182D5262E4B8251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:ae:a5:55:83:86:48:81:99:34:3d:c9:e5:
                    3a:18:0c:9b:a4:5c:bd:59:ff:9d:f7:87:4c:c0:0c:
                    d5:83:96:4b:5d:ea:c5:fd:c1:22:fd:46:1d:a2:4a:
                    d4:f7:59:b2:f9:00:02:41:c9:73:77:e6:be:c4:8e:
                    09:c0:59:35:00:93:f2:06:a8:b8:df:52:ba:d5:b6:
                    ec:75:99:90:82:50:53:a2:0f:ca:9a:34:09:30:5a:
                    00:40:62:4e:77:e9:e7:8d:fe:c1:e8:dc:ef:0a:b7:
                    8f:21:a7:d6:e6:db:01:90:ec:5d:2b:62:13:af:bf:
                    2e:47:30:73:1f:69:f6:16:66:6a:e8:e2:06:35:51:
                    2d:03:26:e8:d8:7e:7e:42:3a:16:4e:52:73:ee:c8:
                    54:a3:1a:be:be:b7:b5:0c:33:2e:5a:44:4c:c2:4b:
                    0e:fd:14:e6:ca:c3:33:6c:99:dd:92:59:45:db:73:
                    e0:82:72:c4:ea:cb:e5:0e:ea:9a:49:f4:b5:08:d4:
                    06:c4:8a:c1:b5:dd:41:02:0d:76:70:b9:5c:05:0a:
                    88:a9:29:c0:b7:d3:b8:55:17:a3:f6:18:be:69:37:
                    61:fa:1c:db:90:26:a6:98:32:a3:2d:8d:b9:23:ee:
                    a4:49:86:ff:93:85:7f:28:b8:ab:54:0f:cc:21:2f:
                    ca:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:19:33:04:9B:2A:FB:77:CC:96:FF:9C:E1:82:D5:26:2E:4B:82:51
            X509v3 Authority Key Identifier:
                keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32322d3232203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:cb:c5:d0:42:4f:1c:10:33:af:3c:76:96:1d:70:e8:24:12:
         60:a5:6b:16:b6:42:80:50:55:2e:45:0d:e3:22:cb:85:3a:9c:
         a9:b1:81:0d:03:e7:2a:fd:81:66:b4:9d:f3:62:f5:b6:fe:83:
         24:2f:94:f0:f7:b9:45:e5:5b:a0:98:42:0f:b7:c8:c5:c4:d6:
         45:bd:46:95:db:10:df:c6:9e:bd:fa:92:9d:7e:90:22:88:d8:
         d8:f5:cf:f8:32:cd:1c:7b:3d:14:06:33:7a:6e:9c:a6:f2:f8:
         a6:fb:04:5f:b0:41:c3:ab:97:cf:79:ba:92:69:75:dc:66:58:
         63:cd:d7:c6:0f:6c:3f:13:36:bc:0d:09:b9:ef:da:cb:87:56:
         51:fb:b8:e3:45:58:53:76:b2:0a:e3:77:9a:51:6f:73:31:cf:
         5f:66:0c:1f:86:24:29:5e:81:ae:18:04:04:45:98:37:8a:54:
         90:9c:c6:3c:df:c3:cf:2d:fb:83:c9:c5:fc:30:64:6f:0e:29:
         90:fc:ca:2b:66:40:e2:f1:b4:85:30:19:d1:11:57:55:fe:6f:
         e9:d3:f4:63:7f:37:d6:10:3d:db:96:0a:f9:b7:39:6d:0b:1d:
         5c:f2:19:97:7c:0e:a3:c4:f6:e9:77:81:4f:ec:35:93:ed:e1:
         3b:43:a6:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULwf++Vb6Dox/gJkHJmu9zlF95rcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFERERGMDQ3QTU0MkMxMDgyRjZERDlEMTc1NEVBQUVF
M0NEMEFEQzAeFw0yNTA4MDIyMDMwMjBaFw0yNjA4MDEyMDM1MjBaMDMxMTAvBgNV
BAMTKEY4MTkzMzA0OUIyQUZCNzdDQzk2RkY5Q0UxODJENTI2MkU0QjgyNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyva6lVYOGSIGZND3J5ToYDJuk
XL1Z/533h0zADNWDlktd6sX9wSL9Rh2iStT3WbL5AAJByXN35r7EjgnAWTUAk/IG
qLjfUrrVtux1mZCCUFOiD8qaNAkwWgBAYk536eeN/sHo3O8Kt48hp9bm2wGQ7F0r
YhOvvy5HMHMfafYWZmro4gY1US0DJujYfn5COhZOUnPuyFSjGr6+t7UMMy5aREzC
Sw79FObKwzNsmd2SWUXbc+CCcsTqy+UO6ppJ9LUI1AbEisG13UECDXZwuVwFCoip
KcC307hVF6P2GL5pN2H6HNuQJqaYMqMtjbkj7qRJhv+ThX8ouKtUD8whL8onAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+BkzBJsq+3fMlv+c4YLVJi5LglEwHwYDVR0j
BBgwFoAUId3fBHpULBCC9t2dF1TqruPNCtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUdacHhKMlN5M3Z1M21iNGoxb1doeXRHNGhIRmpOR0dFYjZRZG9YcFZM
U1QvMC8yMUREREYwNDdBNTQyQzEwODJGNkREOUQxNzU0RUFBRUUzQ0QwQURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRERERjA0N0E1NDJDMTA4
MkY2REQ5RDE3NTRFQUFFRTNDRDBBREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FHWnB4SjJTeTN2dTNtYjRqMW9XaHl0RzRoSEZqTkdHRWI2UWRvWHBWTFNULzAv
MzQzNTJlMzEzOTMwMmUzMTMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzNjMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItvmwwDQYJKoZIhvcNAQELBQADggEBAFLLxdBC
TxwQM688dpYdcOgkEmClaxa2QoBQVS5FDeMiy4U6nKmxgQ0D5yr9gWa0nfNi9bb+
gyQvlPD3uUXlW6CYQg+3yMXE1kW9RpXbEN/Gnr36kp1+kCKI2Nj1z/gyzRx7PRQG
M3punKby+Kb7BF+wQcOrl895upJpddxmWGPN18YPbD8TNrwNCbnv2suHVlH7uONF
WFN2sgrjd5pRb3Mxz19mDB+GJClega4YBARFmDeKVJCcxjzfw88t+4PJxfwwZG8O
KZD8yitmQOLxtIUwGdERV1X+b+nT9GN/N9YQPduWCvm3OW0LHVzyGZd8DqPE9ul3
gU/sNZPt4TtDpvg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:49:28 2025 by rpki-client