Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa
File:                     34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa (raw, json)
Hash identifier:          03MTSWx0aYFRYp/zR79V3fM04Z2nNMHJqdxHH0/q3tI=
Subject key identifier:   99:A5:26:55:0B:45:7E:A3:9E:D7:26:85:93:AE:CE:34:2A:28:B6:28
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       64EDABB3ECF57AD550DE03123AC24D685FFDF9B1
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa
Signing time:             Wed 01 Oct 2025 12:53:04 +0000
ROA not before:           Wed 01 Oct 2025 12:48:04 +0000
ROA not after:            Wed 30 Sep 2026 12:53:04 +0000
asID:                     269014
IP address blocks:        45.176.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ed:ab:b3:ec:f5:7a:d5:50:de:03:12:3a:c2:4d:68:5f:fd:f9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Oct  1 12:48:04 2025 GMT
            Not After : Sep 30 12:53:04 2026 GMT
        Subject: CN=99A526550B457EA39ED7268593AECE342A28B628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:2d:4c:2c:15:e4:2a:65:3a:ff:24:45:fe:
                    40:08:19:fe:e3:61:86:32:45:ab:f9:03:a9:fd:59:
                    5d:18:39:dc:3b:d8:68:b7:d0:ee:49:db:23:db:e6:
                    71:dd:8e:c0:2b:a0:e8:ff:db:67:88:27:b6:14:2a:
                    7b:0e:05:06:d5:e8:8e:05:6f:62:43:b0:75:c1:1c:
                    a4:42:b6:95:3e:77:39:8b:03:dd:24:4d:c5:78:df:
                    ff:ee:39:20:60:41:a6:75:77:e9:b1:8e:b4:90:cb:
                    f9:9f:bc:a3:9d:53:19:23:4c:6c:3e:ea:c0:d2:82:
                    d3:b7:3f:7f:56:2f:de:3d:02:cb:71:d9:24:89:67:
                    cb:6c:45:98:9a:aa:c0:db:8d:fb:b1:73:30:2e:1f:
                    30:64:95:77:a7:38:54:ae:45:17:12:90:62:3e:a3:
                    fa:90:96:6e:0c:af:1e:5c:fa:df:51:9c:09:0d:f0:
                    22:ba:e0:df:48:55:da:74:4f:3a:1e:25:ee:4d:9f:
                    3b:b5:3b:0e:85:9a:b2:71:f8:ef:e5:cc:db:24:f2:
                    ab:3d:d7:68:01:5f:ac:0d:12:34:13:e8:d2:df:13:
                    e1:b2:05:c8:2f:e5:38:cf:df:7d:eb:91:48:72:94:
                    98:11:eb:a6:ee:a5:6b:7e:f9:fe:26:cb:cb:81:55:
                    fe:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A5:26:55:0B:45:7E:A3:9E:D7:26:85:93:AE:CE:34:2A:28:B6:28
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:13:ef:54:51:41:7f:51:31:4f:12:2e:4d:a8:e1:73:23:77:
         82:e7:a8:6d:1d:9b:d4:7e:9d:b8:96:f6:a8:88:dc:2e:65:82:
         fc:70:a3:e5:c2:f6:a3:fd:4c:0b:50:1d:87:c4:fa:3e:e6:e5:
         0a:0d:22:57:d1:db:37:4f:ea:89:de:fd:1e:bc:cd:49:c6:31:
         95:81:59:5c:b4:c8:7b:c2:2b:86:49:9c:7b:35:3a:ee:8a:d5:
         d6:48:10:9c:96:4e:51:32:96:08:11:b8:5a:f6:cc:3b:8c:61:
         ca:24:48:22:a9:cb:64:d1:7e:34:24:ad:56:ba:72:31:32:57:
         cf:9d:76:11:c7:e4:8c:3e:c0:1b:bd:09:2b:04:53:e6:d8:fd:
         b3:de:8a:f0:d8:5e:b7:b8:a1:e4:24:fb:20:d4:00:cc:37:41:
         69:74:0c:71:1e:a5:7f:8d:b7:a7:5b:c3:15:eb:6c:b6:33:06:
         d6:06:f5:90:7a:1a:7a:95:57:7e:4b:47:81:46:b2:e5:68:a7:
         9d:ab:ff:6c:45:43:44:89:cb:6d:c3:70:69:6a:78:01:f5:71:
         01:37:ea:23:da:69:fe:dd:bd:10:44:3f:4f:c8:64:fe:34:a5:
         b4:35:19:09:07:bd:b8:54:26:59:b2:0b:db:48:59:a7:4a:6c:
         27:b3:47:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:43 2025 by rpki-client