Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/34352e3232352e3234342e302f32322d3234203d3e20323730343137.roa
File:                     34352e3232352e3234342e302f32322d3234203d3e20323730343137.roa (raw, json)
Hash identifier:          GjG1Mv8q7/+5pTIyYEZdpGEF5+avf3SU6nfp83cgKxI=
Subject key identifier:   81:A7:20:1D:F5:42:88:FF:23:E3:4A:DF:CC:2E:34:5A:41:D9:09:59
Certificate issuer:       /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
Certificate serial:       4DF2222D6D82E6B300E9850519124419D16FC31E
Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/34352e3232352e3234342e302f32322d3234203d3e20323730343137.roa
Signing time:             Mon 13 Oct 2025 19:46:03 +0000
ROA not before:           Mon 13 Oct 2025 19:41:03 +0000
ROA not after:            Mon 12 Oct 2026 19:46:03 +0000
asID:                     270417
IP address blocks:        45.225.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl
                          rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f2:22:2d:6d:82:e6:b3:00:e9:85:05:19:12:44:19:d1:6f:c3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
        Validity
            Not Before: Oct 13 19:41:03 2025 GMT
            Not After : Oct 12 19:46:03 2026 GMT
        Subject: CN=81A7201DF54288FF23E34ADFCC2E345A41D90959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:e5:11:2f:12:9a:33:f9:54:cd:dc:36:52:
                    0c:5f:a3:d8:4f:a7:5e:8b:93:30:47:2a:e3:97:76:
                    54:25:ae:36:99:75:8e:6c:e5:68:43:fc:a4:e4:db:
                    d9:42:19:c0:d4:b7:51:5c:70:7c:e7:0b:58:bf:91:
                    14:c1:6e:08:fb:26:d6:6b:55:73:eb:64:13:48:1f:
                    ac:0f:0c:02:e3:ae:80:9a:51:35:2c:3b:4c:4f:c4:
                    ec:d6:4f:c4:34:e3:52:c3:19:b2:2c:7d:f5:50:03:
                    4a:76:17:37:38:6b:41:cf:fb:c4:09:d6:df:14:1c:
                    d6:fd:61:8c:dd:73:5e:fb:78:73:f1:80:46:63:b5:
                    9b:01:64:cd:44:7a:68:1e:9c:ad:95:fb:77:a6:a1:
                    9d:a1:b0:35:fb:1a:e8:68:1d:91:b5:bc:5b:eb:14:
                    09:1d:2a:71:b2:c2:f7:34:71:55:a0:6f:be:80:1c:
                    ca:78:3d:28:5a:0b:a5:4e:76:0f:6c:47:85:22:1a:
                    d4:b1:c5:78:7f:11:ea:28:c9:d8:83:24:2a:02:fb:
                    32:ed:84:01:9e:98:dc:f1:9f:9a:12:9b:ed:f6:47:
                    d1:25:69:ac:d3:54:04:98:c8:86:bb:6b:36:b1:b6:
                    b5:ac:f4:cc:4c:69:37:53:8c:6b:7c:9f:55:2a:c7:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A7:20:1D:F5:42:88:FF:23:E3:4A:DF:CC:2E:34:5A:41:D9:09:59
            X509v3 Authority Key Identifier:
                keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/34352e3232352e3234342e302f32322d3234203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:e8:47:3e:3b:42:70:f2:30:08:e8:ad:9d:2a:ed:9d:ba:46:
         d0:36:d8:07:3c:ae:ae:a6:1d:f2:3b:be:5c:7e:e0:dc:3b:96:
         3f:6e:62:48:df:34:89:1c:e5:83:e1:d3:3e:f4:20:c2:88:b4:
         61:5d:c4:8b:68:a0:e3:cd:dc:09:4c:98:b2:2b:ca:fc:6e:52:
         82:36:63:0e:13:ca:c3:6a:92:66:28:cd:dd:3e:72:77:38:76:
         ac:12:10:36:cb:ec:8f:c0:45:0d:c5:61:18:4e:0e:fa:27:78:
         8e:2f:86:c4:b0:9c:ac:ae:66:8c:ee:c4:b0:e9:ac:9f:e5:66:
         82:86:f7:ed:b8:fc:01:b2:70:78:bb:a3:ea:59:98:a5:cc:a0:
         ed:2f:6f:ff:4b:c9:4a:20:84:57:47:bd:c2:d4:37:8b:8e:0f:
         6e:05:36:81:b8:ee:f6:2d:4e:74:e0:30:f6:db:b1:fb:26:06:
         c3:0d:f1:37:20:4f:fd:4b:e4:a7:5b:37:b1:b1:3e:52:fb:9d:
         ab:c9:a7:09:2b:a1:ed:00:c3:93:ba:0d:16:6b:e3:fc:95:62:
         6c:24:2e:10:6a:10:43:13:8e:0b:ab:5f:ca:ff:65:38:11:6f:
         9c:41:5f:43:a7:b0:f6:95:fc:27:04:96:50:7c:48:9c:ba:96:
         6d:1e:b4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:26:47 2025 by rpki-client