Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3136302e3231352e302f32342d3234203d3e20323637303536.roa
File:                     34352e3136302e3231352e302f32342d3234203d3e20323637303536.roa (raw, json)
Hash identifier:          Q8bMNmO9lA2D1lHozYjMiSECVwJwap0hkmNp1A0df2U=
Subject key identifier:   84:98:11:FC:BA:7A:0A:55:54:45:98:64:1C:48:90:D1:34:B9:66:C2
Certificate issuer:       /CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8
Certificate serial:       337F93815DB965FE15C1D6386CE2EC770907E17C
Authority key identifier: AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3136302e3231352e302f32342d3234203d3e20323637303536.roa
Signing time:             Mon 06 Oct 2025 22:58:39 +0000
ROA not before:           Mon 06 Oct 2025 22:53:39 +0000
ROA not after:            Mon 05 Oct 2026 22:58:39 +0000
asID:                     267056
IP address blocks:        45.160.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl
                          rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7f:93:81:5d:b9:65:fe:15:c1:d6:38:6c:e2:ec:77:09:07:e1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8
        Validity
            Not Before: Oct  6 22:53:39 2025 GMT
            Not After : Oct  5 22:58:39 2026 GMT
        Subject: CN=849811FCBA7A0A55544598641C4890D134B966C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:ea:d5:2f:88:de:2a:62:e5:54:9c:d8:a7:
                    ae:8f:41:06:7e:86:c3:b8:ca:fb:7d:ba:a6:ce:c6:
                    0a:dd:99:5d:e7:f3:6c:08:73:1d:7b:d6:ac:1a:e5:
                    28:d2:57:c1:65:3f:10:1b:a2:f3:f3:c0:a0:8d:1d:
                    f7:73:ff:f9:53:96:ed:af:44:1e:b3:94:bb:4a:74:
                    fb:6d:fc:4c:78:00:84:57:a0:d6:76:9d:1a:6d:c9:
                    af:73:0e:aa:f5:06:29:6b:81:bd:e3:a2:14:7f:45:
                    d2:dd:b3:6d:bb:65:66:b4:e3:17:35:e6:2f:c1:03:
                    4d:04:0e:85:6b:aa:2d:a4:33:1c:88:3f:32:f6:78:
                    ac:6c:d8:e3:11:20:f7:39:76:dd:a8:40:e4:a3:3c:
                    e3:a0:d0:3d:e0:7a:f9:45:b6:52:45:ea:9b:72:30:
                    5a:1b:41:fe:1b:6f:73:7c:e2:63:cf:e0:75:76:ab:
                    71:4d:c7:7d:ac:71:ec:55:8d:08:62:f1:b5:a4:dc:
                    da:c2:9c:c2:ea:13:7c:0a:8c:b0:ba:d1:a7:6f:aa:
                    4d:41:cf:4d:fc:18:52:18:17:5c:fa:ec:25:6e:41:
                    15:44:42:db:c4:88:d7:64:32:7e:89:86:d7:5f:c4:
                    31:6b:1f:6a:81:b3:14:c6:69:b0:6d:97:21:51:2c:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:98:11:FC:BA:7A:0A:55:54:45:98:64:1C:48:90:D1:34:B9:66:C2
            X509v3 Authority Key Identifier:
                keyid:AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3136302e3231352e302f32342d3234203d3e20323637303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:69:0e:a7:ff:7d:9c:06:44:d3:9e:7c:dc:f1:52:3e:6e:5e:
         cd:83:92:21:e7:56:92:d0:b8:6c:5f:96:d8:86:be:a2:f7:4b:
         60:8a:2e:0d:a3:b3:03:db:71:45:1c:bd:1f:ba:72:5b:24:25:
         33:7e:e2:6b:35:aa:47:54:19:78:25:cf:45:9c:38:a4:96:fc:
         5a:1c:90:cc:df:2f:f4:dc:a4:19:56:f5:c9:87:55:ec:99:12:
         a3:37:4b:ea:d3:d9:51:c0:12:91:66:45:a6:86:1d:1b:a4:e7:
         a5:8a:25:62:5c:15:08:87:69:66:cb:b1:89:38:6b:cc:df:c1:
         a6:37:83:8d:3c:2b:ad:39:84:68:68:7d:4f:45:f4:ed:e4:63:
         98:f5:79:a7:f6:6d:1a:7b:ac:41:c3:73:9e:73:6b:b3:58:ae:
         ae:fa:8a:3c:05:ed:99:f0:5e:a2:15:bc:39:04:15:df:95:bb:
         d5:0e:48:25:f2:83:e4:3f:af:11:a1:bd:b8:9a:a0:eb:be:69:
         3f:d9:28:a2:49:2c:4b:63:99:c7:a1:d0:28:e8:2f:a6:9a:75:
         4e:c9:c4:e6:95:f9:05:e8:41:d5:b2:65:b4:05:25:ec:10:1b:
         03:38:d3:8e:e4:f0:f2:2a:bc:70:eb:c3:b2:89:74:0c:8c:15:
         e6:8f:5b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:36:59 2025 by rpki-client