Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa
File:                     34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa (raw, json)
Hash identifier:          Z1jL/gsyMMOX23bFF/05TTpxpCMQIiKAlL299WKVFXQ=
Subject key identifier:   03:06:6D:EF:BB:DB:53:8D:C2:7F:BC:09:DC:48:41:EE:7B:9B:74:DB
Certificate issuer:       /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial:       3AC2265E447180D0347819B248F98F9435E240FC
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa
Signing time:             Sat 02 Aug 2025 20:35:20 +0000
ROA not before:           Sat 02 Aug 2025 20:30:20 +0000
ROA not after:            Sat 01 Aug 2026 20:35:20 +0000
asID:                     269626
IP address blocks:        45.190.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c2:26:5e:44:71:80:d0:34:78:19:b2:48:f9:8f:94:35:e2:40:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
        Validity
            Not Before: Aug  2 20:30:20 2025 GMT
            Not After : Aug  1 20:35:20 2026 GMT
        Subject: CN=03066DEFBBDB538DC27FBC09DC4841EE7B9B74DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:c8:07:cf:f6:b8:3f:d6:9f:8f:6e:9a:17:
                    f9:85:0f:a0:94:86:35:13:c2:d8:a9:a6:2b:90:54:
                    4d:3d:0a:9d:8b:3f:ac:07:b0:fe:cd:69:ab:f3:e8:
                    55:6e:ec:86:17:ae:57:f8:80:fa:1f:97:a6:e1:7f:
                    9e:bd:e8:43:85:b5:9e:fb:e3:ef:ac:0e:46:94:58:
                    4a:e8:da:86:41:4c:8b:3b:1c:9d:e6:e4:97:99:29:
                    d2:9f:44:82:5f:ee:a8:71:48:66:6b:5f:c9:ad:4a:
                    cb:02:4e:c0:ad:ea:49:c6:80:40:98:e7:cf:10:9c:
                    9d:14:87:a0:cb:02:d0:a3:a5:b9:e2:1d:eb:38:34:
                    96:11:88:5c:b5:38:54:69:bf:17:d7:d9:df:d1:20:
                    48:a2:3c:a6:4a:42:73:69:78:35:f6:75:bc:aa:19:
                    cf:0e:c8:f5:56:64:d4:d4:96:88:96:fb:bf:b0:90:
                    4f:91:53:c9:58:87:43:ce:cf:68:61:2e:c0:66:86:
                    62:fd:48:df:1c:6f:90:64:a3:97:c7:fc:a7:0f:db:
                    6a:1b:73:e8:f6:fb:11:62:f3:14:ae:69:6e:f8:f9:
                    14:b1:4f:b6:1d:67:00:05:31:78:b3:47:d8:04:08:
                    ff:00:a5:e2:86:f4:07:1f:0e:f2:f2:90:84:29:37:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:06:6D:EF:BB:DB:53:8D:C2:7F:BC:09:DC:48:41:EE:7B:9B:74:DB
            X509v3 Authority Key Identifier:
                keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:10:9a:d1:75:82:7a:db:6e:34:0c:47:2b:b2:8c:fd:4e:5e:
         25:93:b8:16:52:17:7a:a9:92:c3:74:c9:2c:19:89:97:c8:e2:
         3e:f5:7e:74:27:3a:08:b5:b3:65:ce:f8:29:ff:7c:b1:d0:59:
         72:71:e4:64:3d:a1:e2:ca:73:a6:29:a8:50:9f:dc:85:58:59:
         55:08:85:fb:7a:09:d8:da:02:4f:18:6d:13:bb:24:a4:d2:e2:
         08:b1:3c:18:3a:ee:9b:1a:cf:4d:2c:e7:bd:a7:30:f7:50:20:
         3f:64:3f:c7:2e:1a:b3:7e:1e:2b:01:58:69:2e:95:68:5f:63:
         b0:2d:69:c3:c5:f7:1a:11:54:2c:36:26:f0:6d:80:d3:39:c5:
         3d:b2:c8:40:7b:ae:33:fc:90:87:ef:6a:35:93:de:c4:3e:78:
         21:d8:54:61:64:26:9b:d1:20:14:7a:46:c7:1f:7d:cb:fd:16:
         ec:27:aa:98:20:e4:65:e3:2f:07:43:d0:ea:88:2c:cb:6f:c4:
         b8:a7:ae:1b:9c:c6:53:01:b7:5d:2c:a9:50:1b:f7:a7:f1:85:
         1f:2a:dc:f9:c5:61:ba:dd:4e:bb:85:a2:4b:f1:a9:e8:7f:70:
         9b:8a:6f:a9:79:1c:c7:fe:9a:6c:ab:50:dc:de:ce:36:ab:8b:
         5a:d9:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:49:35 2025 by rpki-client