Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/34352e3138382e36382e302f32322d3234203d3e20323639353233.roa
File:                     34352e3138382e36382e302f32322d3234203d3e20323639353233.roa (raw, json)
Hash identifier:          gISONST1NQLFqsuXqO3uEnLaFqPJhwMfJKfSCnWqVqY=
Subject key identifier:   88:5E:AF:78:EB:FA:9D:16:C6:46:0C:F3:D9:EF:E5:72:68:08:8B:4D
Certificate issuer:       /CN=57D626EF55C34DCC2CFD920E4CD90D504B1A471C
Certificate serial:       5DA42D82F77EAA21FAA491E600500B5F4D01B46B
Authority key identifier: 57:D6:26:EF:55:C3:4D:CC:2C:FD:92:0E:4C:D9:0D:50:4B:1A:47:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/34352e3138382e36382e302f32322d3234203d3e20323639353233.roa
Signing time:             Mon 06 Oct 2025 15:01:52 +0000
ROA not before:           Mon 06 Oct 2025 14:56:52 +0000
ROA not after:            Mon 05 Oct 2026 15:01:52 +0000
asID:                     269523
IP address blocks:        45.188.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.crl
                          rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a4:2d:82:f7:7e:aa:21:fa:a4:91:e6:00:50:0b:5f:4d:01:b4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D626EF55C34DCC2CFD920E4CD90D504B1A471C
        Validity
            Not Before: Oct  6 14:56:52 2025 GMT
            Not After : Oct  5 15:01:52 2026 GMT
        Subject: CN=885EAF78EBFA9D16C6460CF3D9EFE57268088B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:d2:55:4c:fc:56:23:14:f0:d0:10:72:e5:
                    05:0e:7e:21:fb:76:94:36:55:15:40:ba:32:36:31:
                    99:ba:d0:79:34:c1:3b:d1:9f:1b:e1:2d:91:f9:8f:
                    bd:d1:8b:51:8d:ae:0a:cc:e4:56:c6:7c:9c:e3:64:
                    20:57:38:9c:0c:3f:9a:de:05:18:e5:51:b5:81:c0:
                    76:1b:b3:0d:fe:ea:8a:b6:de:a7:07:41:68:6b:27:
                    0d:a3:7a:fb:72:bf:89:6d:b6:6e:1f:45:b3:21:3a:
                    08:04:03:fa:95:99:5e:e6:c0:a1:ab:14:fa:aa:c9:
                    e1:cf:a4:47:a0:a0:af:40:03:b2:ae:e7:a7:6e:36:
                    1d:b8:29:d7:c8:6a:26:dd:a8:e6:54:1a:ed:0a:1f:
                    5e:20:e9:c7:ed:92:3c:bc:2e:0f:19:42:06:0e:b4:
                    51:29:79:d1:a2:f1:9a:42:9d:f6:8c:dc:dd:97:94:
                    7f:b0:ac:35:fa:4f:6e:82:fa:73:a2:be:3c:6f:85:
                    60:9f:6b:e4:21:0a:ff:27:97:29:c8:f7:ee:63:10:
                    b6:e9:61:80:93:8a:3e:ca:b9:cb:a9:05:c0:93:c9:
                    d6:b2:7c:38:d9:ad:a4:ee:be:3d:54:4f:91:6f:75:
                    25:f7:f4:61:75:51:76:1b:37:a7:c8:47:e2:35:55:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5E:AF:78:EB:FA:9D:16:C6:46:0C:F3:D9:EF:E5:72:68:08:8B:4D
            X509v3 Authority Key Identifier:
                keyid:57:D6:26:EF:55:C3:4D:CC:2C:FD:92:0E:4C:D9:0D:50:4B:1A:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D626EF55C34DCC2CFD920E4CD90D504B1A471C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/34352e3138382e36382e302f32322d3234203d3e20323639353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:f5:a6:6b:0b:f6:ef:44:fb:c0:22:1d:04:d4:3e:4d:28:ce:
         97:3a:69:25:5b:9d:47:a6:22:73:3a:42:1f:30:5d:7f:5c:4d:
         0c:42:5e:9f:76:d4:af:90:2c:80:71:aa:8f:dd:24:c0:8e:8b:
         05:c7:80:00:62:1b:07:ef:77:fa:f5:94:d6:3c:81:4a:2d:31:
         d2:a3:bb:bb:36:d1:92:4c:ac:bd:e6:74:09:87:43:c0:1a:21:
         24:2f:ea:5f:1c:f0:01:b3:2b:ae:ab:d5:14:fe:da:78:15:f0:
         17:76:6f:65:9b:16:6a:75:4c:18:87:6d:ed:4d:93:c9:84:b8:
         14:1b:ee:cd:5d:c1:27:bb:c9:bc:bc:cf:55:20:ed:fa:cf:c0:
         cb:35:2b:20:50:b5:71:f5:da:37:d7:e5:cc:18:99:23:8b:00:
         27:66:2d:20:23:46:36:f6:de:26:6f:c2:06:fc:6f:ef:74:75:
         14:19:46:a2:aa:fc:bb:f1:5b:11:c8:ce:6d:7b:4d:50:d2:3f:
         24:2e:46:6e:08:05:06:c0:b3:93:ed:58:f1:a5:94:9e:95:3f:
         a0:75:a8:b1:a2:44:20:04:a4:87:bd:08:76:69:68:02:35:aa:
         49:56:2e:79:cf:3b:58:21:3d:01:0e:4a:5b:3d:46:13:e6:c4:
         46:79:6d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:56:01 2025 by rpki-client