Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa
File:                     34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa (raw, json)
Hash identifier:          oveRIeBVElycPcDK2nT/HAVVbZ48NXEOPGn8JgFOp8U=
Subject key identifier:   E0:99:88:83:53:31:73:4F:AB:F7:C9:D0:4B:B8:48:90:0A:18:91:12
Certificate issuer:       /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial:       7F8739E09472123A5282CFF9E05BE47395749EAB
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa
Signing time:             Sat 02 Aug 2025 20:35:20 +0000
ROA not before:           Sat 02 Aug 2025 20:30:20 +0000
ROA not after:            Sat 01 Aug 2026 20:35:20 +0000
asID:                     269626
IP address blocks:        45.190.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:87:39:e0:94:72:12:3a:52:82:cf:f9:e0:5b:e4:73:95:74:9e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
        Validity
            Not Before: Aug  2 20:30:20 2025 GMT
            Not After : Aug  1 20:35:20 2026 GMT
        Subject: CN=E09988835331734FABF7C9D04BB848900A189112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:8d:b2:e8:36:2f:07:0d:6a:97:0d:3d:f3:
                    0b:c6:ee:66:8d:a0:06:e9:d0:14:2b:33:82:f9:3e:
                    5e:2f:a2:85:fe:29:21:1a:f2:5f:57:63:e7:47:89:
                    95:35:44:07:a7:f9:fe:d1:03:8a:64:4d:04:17:f8:
                    ec:a5:cb:c7:26:48:90:83:44:65:07:a0:3c:d9:bd:
                    ea:b3:0e:ca:f8:8a:41:f1:a2:7a:8c:72:79:cc:e7:
                    be:eb:9d:68:c2:ca:ad:5a:1b:d1:5c:a2:c9:5f:25:
                    18:be:41:05:39:88:12:17:92:9a:3d:41:c7:dc:2e:
                    c6:51:3b:09:61:1e:91:dd:6d:35:04:ca:22:d0:29:
                    6b:3e:c3:99:83:69:41:96:b4:25:6d:07:ce:94:10:
                    38:5a:17:46:54:43:2b:00:ea:ad:c3:8e:ca:2b:58:
                    91:5d:4a:02:60:00:ea:8f:e6:18:36:e3:7b:66:ad:
                    84:b8:bb:56:a4:20:21:19:f8:39:f2:ea:11:19:8b:
                    49:09:57:48:30:c5:35:3c:44:c2:53:4b:ad:f5:fa:
                    29:4a:98:2f:7c:11:d7:29:e7:d2:3e:65:68:51:eb:
                    47:a6:7e:56:74:1c:57:54:8a:f1:18:5b:ef:22:b0:
                    45:e0:41:a8:2d:7b:b9:6a:70:42:6f:1e:35:1b:7e:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:99:88:83:53:31:73:4F:AB:F7:C9:D0:4B:B8:48:90:0A:18:91:12
            X509v3 Authority Key Identifier:
                keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:c5:d1:3d:69:7a:00:a8:fe:5b:17:71:5a:79:51:f7:29:54:
         dd:bc:ff:52:52:a5:9d:3b:6e:41:de:ea:05:93:6b:8a:d8:0e:
         85:ed:f9:88:ce:30:2a:88:af:e4:d6:32:49:a7:ac:2c:60:98:
         99:ab:04:6e:9e:17:50:55:5c:4f:aa:8d:60:a5:ef:11:29:b4:
         ab:a2:e5:5b:3d:4d:9c:d1:0c:a5:12:8f:34:e2:bd:69:64:60:
         68:7b:3c:ed:ca:b3:72:dd:40:90:c5:45:54:b1:01:70:ce:9b:
         37:44:60:9b:c8:ae:b6:08:76:a2:c1:99:63:16:61:0b:10:b3:
         ea:6c:d0:fb:17:8e:83:77:9b:71:13:71:15:e5:76:e6:87:d3:
         7a:bc:35:8b:5a:97:04:54:68:1e:bd:24:c5:7a:a1:76:48:f2:
         a7:ff:23:3b:70:21:46:14:40:95:54:0b:0b:cb:a9:a0:7d:a7:
         46:2c:69:86:61:bc:dd:29:44:85:85:76:28:01:d0:b9:d2:3b:
         c5:97:5b:f0:0c:f2:a7:4e:a0:77:71:3b:28:c7:a1:c2:da:cb:
         3d:2d:55:bb:52:1c:57:7c:70:e4:3a:de:74:9d:00:f0:fb:b5:
         20:48:37:c3:0a:f7:14:70:d8:63:48:c2:6b:bd:30:0e:6e:95:
         05:5e:14:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:54:51 2025 by rpki-client