Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/34352e3138382e3131362e302f32322d3234203d3e20323639353231.roa
File:                     34352e3138382e3131362e302f32322d3234203d3e20323639353231.roa (raw, json)
Hash identifier:          Ny+jwETrwj8yGux5fE8esPR9B4yr/sa7bPxVaCh1Rgo=
Subject key identifier:   68:3A:EC:DF:F3:CC:78:EE:AB:E1:7F:B5:7F:D1:74:87:F5:93:33:52
Certificate issuer:       /CN=206F1492B1B5481E32DB722BD82E3656411655C5
Certificate serial:       3616707364A527E096F12792B3977567208ACE55
Authority key identifier: 20:6F:14:92:B1:B5:48:1E:32:DB:72:2B:D8:2E:36:56:41:16:55:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206F1492B1B5481E32DB722BD82E3656411655C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/34352e3138382e3131362e302f32322d3234203d3e20323639353231.roa
Signing time:             Fri 22 Aug 2025 17:03:40 +0000
ROA not before:           Fri 22 Aug 2025 16:58:40 +0000
ROA not after:            Fri 21 Aug 2026 17:03:40 +0000
asID:                     269521
IP address blocks:        45.188.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/206F1492B1B5481E32DB722BD82E3656411655C5.crl
                          rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/206F1492B1B5481E32DB722BD82E3656411655C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206F1492B1B5481E32DB722BD82E3656411655C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:16:70:73:64:a5:27:e0:96:f1:27:92:b3:97:75:67:20:8a:ce:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206F1492B1B5481E32DB722BD82E3656411655C5
        Validity
            Not Before: Aug 22 16:58:40 2025 GMT
            Not After : Aug 21 17:03:40 2026 GMT
        Subject: CN=683AECDFF3CC78EEABE17FB57FD17487F5933352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d2:f1:af:ac:97:fe:84:55:8f:df:6e:d2:59:
                    36:bb:aa:87:a7:5a:15:47:fd:dc:de:da:c9:27:3f:
                    77:05:d5:dc:f8:cb:14:e8:3d:c1:79:26:a6:5e:29:
                    4b:67:50:cc:45:be:dd:b0:de:d3:f4:e9:10:f4:51:
                    b6:a1:92:9e:a5:f7:6e:eb:d5:4f:20:ea:d8:9a:3a:
                    07:33:ec:5e:f4:e1:1d:26:bc:d6:74:d0:e2:96:f9:
                    34:73:3a:48:9e:f3:d4:58:99:ec:98:0c:ea:41:7a:
                    22:92:c0:f4:66:64:fa:10:f6:eb:a2:1d:b0:4a:4d:
                    f5:39:c0:b5:d1:62:d8:49:28:31:0e:4f:97:dc:4e:
                    03:6a:f2:73:95:46:27:fe:74:9a:d2:e4:1c:7c:4d:
                    51:20:55:41:4f:85:05:28:45:5d:d9:28:6a:db:c6:
                    58:3d:14:fc:f4:60:74:63:8d:9b:20:aa:8a:46:ea:
                    8f:95:5c:25:ba:76:e3:86:ba:08:2d:48:1a:40:df:
                    40:e9:d6:d1:c1:6c:32:c4:24:31:7b:5d:65:c3:c6:
                    2d:95:e4:38:c3:df:eb:08:14:c4:f9:b0:0a:d3:07:
                    76:58:83:fa:83:99:54:33:f2:5e:dd:94:3a:7b:0e:
                    49:c3:d9:cb:6a:e0:4b:60:4d:1c:d8:0e:db:9b:a7:
                    37:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3A:EC:DF:F3:CC:78:EE:AB:E1:7F:B5:7F:D1:74:87:F5:93:33:52
            X509v3 Authority Key Identifier:
                keyid:20:6F:14:92:B1:B5:48:1E:32:DB:72:2B:D8:2E:36:56:41:16:55:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/206F1492B1B5481E32DB722BD82E3656411655C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206F1492B1B5481E32DB722BD82E3656411655C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/34352e3138382e3131362e302f32322d3234203d3e20323639353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:f6:ea:de:d2:7e:3a:fc:77:0f:d6:be:69:d2:79:8b:f9:00:
         67:56:b9:06:ea:d2:11:93:bb:99:77:ed:21:f2:09:f9:32:1f:
         c1:74:4b:a6:e3:98:cc:ae:c1:4c:13:b0:33:64:0a:c3:6f:ef:
         cd:cd:20:01:ad:7f:ac:1f:b5:a6:1a:36:9e:e9:4a:72:54:9d:
         e5:ae:06:68:92:96:46:c4:87:90:97:6d:c0:d9:51:77:f0:b6:
         23:43:e4:8f:29:26:dd:f6:2b:ec:d8:b4:bc:f9:a6:06:91:bd:
         58:e0:8f:0b:fe:97:c5:b3:bc:7c:40:4a:c6:c9:ec:8e:1d:31:
         35:da:d1:57:86:63:92:77:fe:35:7b:73:34:d6:fe:7d:35:a7:
         21:65:69:84:26:51:e9:c6:2e:83:d2:40:ff:b7:8d:7a:a2:2a:
         a5:55:07:e2:09:89:70:2e:33:37:2c:54:28:2b:a8:83:e0:9e:
         f7:43:c5:52:99:b6:cf:70:d3:36:ea:52:7a:c5:82:23:bb:da:
         4b:95:db:af:80:23:73:6e:17:7e:67:91:d1:d6:99:55:49:52:
         ee:64:86:1e:48:98:2f:85:42:41:67:83:3b:77:ce:02:ab:2a:
         c9:fd:29:9a:ec:e6:54:75:f2:df:98:72:84:3a:ad:ce:2e:8a:
         e4:0a:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:12 2025 by rpki-client