Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32342d3234203d3e20323639363236.roa
File:                     34352e3139302e3130382e302f32342d3234203d3e20323639363236.roa (raw, json)
Hash identifier:          z/al2lqkMwSVa4lBgfCp8J36zpft/JeWe/boU03oLZ4=
Subject key identifier:   BC:88:18:04:FF:F0:14:D1:D5:B5:ED:1C:92:40:E6:18:A2:39:5C:38
Certificate issuer:       /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial:       4BC7353E005D873442C11BE86309BA7979AFA40F
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32342d3234203d3e20323639363236.roa
Signing time:             Sat 02 Aug 2025 20:35:20 +0000
ROA not before:           Sat 02 Aug 2025 20:30:20 +0000
ROA not after:            Sat 01 Aug 2026 20:35:20 +0000
asID:                     269626
IP address blocks:        45.190.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c7:35:3e:00:5d:87:34:42:c1:1b:e8:63:09:ba:79:79:af:a4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
        Validity
            Not Before: Aug  2 20:30:20 2025 GMT
            Not After : Aug  1 20:35:20 2026 GMT
        Subject: CN=BC881804FFF014D1D5B5ED1C9240E618A2395C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b6:a6:36:da:91:41:c2:2a:a5:30:8a:36:28:
                    24:d2:e3:5c:ec:ba:cd:54:9c:a3:e9:59:1a:1c:f1:
                    84:e5:7d:66:a4:ed:8e:f8:cb:68:6c:27:19:89:bb:
                    ac:89:59:a1:02:42:2d:dc:e4:df:0a:c8:bd:81:5f:
                    7b:18:14:70:59:32:42:a3:51:4a:03:34:85:8b:58:
                    1b:34:e5:d5:62:d0:ca:04:44:59:d8:77:a8:64:67:
                    46:48:a8:a0:c8:1e:8d:6f:9b:12:5f:aa:c1:39:48:
                    00:b4:73:1e:be:1a:6a:17:3f:8c:e2:ce:9b:b4:c0:
                    7a:ba:c4:78:6a:a4:12:62:d0:53:cb:a6:c2:0b:c4:
                    18:33:52:7b:50:25:bd:b8:0f:33:2c:1c:05:ae:36:
                    16:f0:97:28:e1:04:91:4d:e1:43:28:b0:81:13:4d:
                    d3:fc:a8:31:25:22:5e:47:99:0c:4d:b2:25:fe:1c:
                    47:33:b1:53:11:59:29:6a:1c:2e:1e:af:08:9e:7c:
                    8b:8e:78:6b:13:33:4c:0e:78:0a:c4:36:c8:2d:1d:
                    00:1d:55:4f:c7:0f:17:62:9b:12:1a:87:e7:63:6b:
                    ec:a6:6a:9d:c6:6d:ff:d0:ad:4d:4a:6c:ce:76:b5:
                    d6:78:6e:86:d5:98:e5:c2:aa:2e:bb:9f:20:1e:eb:
                    8b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:88:18:04:FF:F0:14:D1:D5:B5:ED:1C:92:40:E6:18:A2:39:5C:38
            X509v3 Authority Key Identifier:
                keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32342d3234203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:c3:06:d3:f8:2d:11:0f:cb:05:ed:ee:68:da:40:bc:0a:53:
         99:85:c6:74:4b:59:a8:b3:58:c6:4e:0d:96:82:a9:7f:e1:63:
         11:e4:0b:ae:b3:04:3c:94:7a:ef:1c:e7:f2:1f:0b:7a:b6:46:
         14:f0:1b:12:91:53:7d:92:2b:63:90:9e:1e:df:2d:b5:1b:1d:
         6c:d5:67:43:d9:2b:a5:f1:bb:c0:6d:b2:a8:d5:72:7d:df:a1:
         cc:b9:26:aa:7c:5b:18:b1:c6:37:60:c7:a4:ba:d3:6b:e6:90:
         81:27:7e:ef:39:ae:f6:b4:79:69:e4:52:3e:1f:1e:8d:a5:c9:
         ba:2b:12:80:3b:e2:11:00:27:d6:15:4d:dc:96:5c:0a:6c:69:
         99:68:46:b1:05:e6:d7:ab:aa:8a:d3:a9:81:19:88:4a:92:db:
         c2:4a:00:43:3a:10:ad:48:20:f0:0f:a7:3f:b8:9b:ed:ff:6d:
         7b:3d:96:43:fd:7f:b1:25:03:5f:27:57:f0:78:77:28:e1:5f:
         fa:61:2e:fe:65:42:b3:81:32:bd:65:e3:6d:4e:c0:48:ab:c6:
         1e:79:7c:29:e6:c7:08:6b:00:55:3d:e3:4e:b3:26:50:cd:35:
         51:80:22:21:6a:ac:52:f3:b3:69:55:01:0b:17:d8:b3:2b:8a:
         bb:a2:3e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:53:42 2025 by rpki-client