Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa
File:                     34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa (raw, json)
Hash identifier:          d3JK5wefkO3IaEmhKjERbIY8TPnMP48SylmDzwiMfvU=
Subject key identifier:   39:2E:22:1B:E8:E7:94:BC:FD:A5:E2:C8:59:EE:D1:0A:7D:26:55:F8
Certificate issuer:       /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial:       2CBBF5D132400B03C9760D28612CF3B41E832A28
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa
Signing time:             Sat 02 Aug 2025 20:35:20 +0000
ROA not before:           Sat 02 Aug 2025 20:30:20 +0000
ROA not after:            Sat 01 Aug 2026 20:35:20 +0000
asID:                     269626
IP address blocks:        45.190.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bb:f5:d1:32:40:0b:03:c9:76:0d:28:61:2c:f3:b4:1e:83:2a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
        Validity
            Not Before: Aug  2 20:30:20 2025 GMT
            Not After : Aug  1 20:35:20 2026 GMT
        Subject: CN=392E221BE8E794BCFDA5E2C859EED10A7D2655F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:b3:45:fd:dd:83:95:a5:1c:ca:98:36:0a:
                    47:4e:4f:4c:b6:69:f3:5e:d1:7b:19:be:a2:0d:67:
                    87:86:81:77:53:69:2f:d8:be:af:e6:21:13:fe:b9:
                    ae:f2:4b:9a:f2:f2:d9:0e:17:da:19:bf:40:d4:6d:
                    33:af:34:3e:84:6a:40:98:9c:95:3d:e2:75:17:13:
                    91:e5:a9:be:60:c9:b0:7f:8d:40:ef:ce:df:ea:7a:
                    78:2e:45:dc:b9:1f:66:d7:0a:fd:d7:bf:d5:04:db:
                    91:a0:39:71:09:72:e4:c2:fa:d4:c6:cc:3c:51:f2:
                    d6:74:27:ad:1c:ac:59:2e:5b:44:22:72:b6:df:1d:
                    5a:dc:c8:73:ae:90:ac:03:af:93:1e:84:3f:1d:38:
                    d9:b6:54:c2:4a:3d:04:c5:ec:9e:50:54:24:be:17:
                    f0:e2:99:0d:0d:33:f7:c3:14:b3:51:23:68:0f:05:
                    f8:d7:7c:70:cf:94:d2:b2:bf:6a:8c:3a:a5:e1:3e:
                    18:82:17:7d:f2:46:a3:12:16:b3:9d:3d:67:74:c4:
                    17:11:4d:02:91:ee:94:84:5b:15:2d:65:fa:3e:3c:
                    6d:97:be:64:fa:80:5e:ea:c0:2b:63:f1:9f:02:d5:
                    13:a6:bf:39:cc:c8:92:87:f1:95:67:88:88:34:a0:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2E:22:1B:E8:E7:94:BC:FD:A5:E2:C8:59:EE:D1:0A:7D:26:55:F8
            X509v3 Authority Key Identifier:
                keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:33:de:21:4f:1b:71:a5:37:16:f4:10:de:f1:c1:ba:2f:76:
         b4:c8:fc:97:a9:2b:8e:c4:f2:8b:b1:ed:a1:14:d2:4a:4f:d8:
         f0:f6:d4:fa:e7:89:5a:45:2f:bf:49:51:ff:28:f4:57:36:e8:
         aa:af:3e:78:f0:1a:8c:ff:4c:52:5d:5f:c7:ce:79:32:8f:a0:
         a1:fe:fe:7e:42:46:40:50:59:15:0d:65:f5:88:43:71:45:f9:
         f6:7c:b7:28:7a:b3:bc:3c:29:0c:fc:c0:aa:4c:9f:83:95:26:
         04:e3:74:4c:c3:61:5a:58:2d:15:e4:c9:f4:68:e6:3f:23:44:
         1a:6c:20:d7:cd:83:d0:43:de:a5:c4:62:e2:0d:68:b8:92:7e:
         d3:e3:e9:66:99:a9:c5:3f:29:20:77:6f:b9:c1:c3:d9:d6:6d:
         5b:2a:cf:b8:9a:bc:c7:3f:1e:85:a1:63:6d:8a:c4:a9:05:c8:
         76:55:10:2b:87:cf:e1:c8:2e:1c:b2:70:56:a2:c6:7d:44:08:
         31:70:9d:16:fd:fb:38:ca:1d:df:a0:c4:08:24:6a:02:a5:85:
         e8:33:38:90:39:01:13:c3:a2:f9:27:aa:43:57:b5:1e:79:63:
         43:2d:5d:73:96:db:5a:2e:96:3e:a8:71:e5:6d:b2:e0:2b:5f:
         5a:6e:81:46
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULLv10TJACwPJdg0oYSzztB6DKigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFERERGMDQ3QTU0MkMxMDgyRjZERDlEMTc1NEVBQUVF
M0NEMEFEQzAeFw0yNTA4MDIyMDMwMjBaFw0yNjA4MDEyMDM1MjBaMDMxMTAvBgNV
BAMTKDM5MkUyMjFCRThFNzk0QkNGREE1RTJDODU5RUVEMTBBN0QyNjU1RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3w7NF/d2DlaUcypg2CkdOT0y2
afNe0XsZvqINZ4eGgXdTaS/Yvq/mIRP+ua7yS5ry8tkOF9oZv0DUbTOvND6EakCY
nJU94nUXE5Hlqb5gybB/jUDvzt/qenguRdy5H2bXCv3Xv9UE25GgOXEJcuTC+tTG
zDxR8tZ0J60crFkuW0QicrbfHVrcyHOukKwDr5MehD8dONm2VMJKPQTF7J5QVCS+
F/DimQ0NM/fDFLNRI2gPBfjXfHDPlNKyv2qMOqXhPhiCF33yRqMSFrOdPWd0xBcR
TQKR7pSEWxUtZfo+PG2XvmT6gF7qwCtj8Z8C1ROmvznMyJKH8ZVniIg0oKetAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOS4iG+jnlLz9peLIWe7RCn0mVfgwHwYDVR0j
BBgwFoAUId3fBHpULBCC9t2dF1TqruPNCtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUdacHhKMlN5M3Z1M21iNGoxb1doeXRHNGhIRmpOR0dFYjZRZG9YcFZM
U1QvMC8yMUREREYwNDdBNTQyQzEwODJGNkREOUQxNzU0RUFBRUUzQ0QwQURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRERERjA0N0E1NDJDMTA4
MkY2REQ5RDE3NTRFQUFFRTNDRDBBREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FHWnB4SjJTeTN2dTNtYjRqMW9XaHl0RzRoSEZqTkdHRWI2UWRvWHBWTFNULzAv
MzQzNTJlMzEzOTMwMmUzMTMwMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNjMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtvm0wDQYJKoZIhvcNAQELBQADggEBAJYz3iFP
G3GlNxb0EN7xwbovdrTI/JepK47E8oux7aEU0kpP2PD21PrniVpFL79JUf8o9Fc2
6KqvPnjwGoz/TFJdX8fOeTKPoKH+/n5CRkBQWRUNZfWIQ3FF+fZ8tyh6s7w8KQz8
wKpMn4OVJgTjdEzDYVpYLRXkyfRo5j8jRBpsINfNg9BD3qXEYuINaLiSftPj6WaZ
qcU/KSB3b7nBw9nWbVsqz7iavMc/HoWhY22KxKkFyHZVECuHz+HILhyycFaixn1E
CDFwnRb9+zjKHd+gxAgkagKlhegzOJA5ARPDovknqkNXtR55Y0MtXXOW21oulj6o
ceVtsuArX1pugUY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:54:45 2025 by rpki-client