Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa
File:                     34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa (raw, json)
Hash identifier:          n5qQL8Qwe+npN0Nl/PQCSPCduJl3kS1i6jVGcInInDw=
Subject key identifier:   9E:11:68:1B:A0:14:0F:C7:DD:31:09:B9:27:38:80:DC:8C:B2:2B:44
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       5A1B3FC26F87FEACAA4520B3492B089846D9C0DE
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa
Signing time:             Wed 01 Oct 2025 12:53:13 +0000
ROA not before:           Wed 01 Oct 2025 12:48:13 +0000
ROA not after:            Wed 30 Sep 2026 12:53:13 +0000
asID:                     269014
IP address blocks:        45.176.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1b:3f:c2:6f:87:fe:ac:aa:45:20:b3:49:2b:08:98:46:d9:c0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Oct  1 12:48:13 2025 GMT
            Not After : Sep 30 12:53:13 2026 GMT
        Subject: CN=9E11681BA0140FC7DD3109B9273880DC8CB22B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:7e:be:e0:fa:83:cd:c4:c1:ed:cc:75:dc:
                    fc:87:df:0a:ab:36:be:67:8b:1a:68:3d:75:90:6f:
                    12:85:6d:1d:45:84:6e:c0:34:d6:c3:df:4e:96:ff:
                    cc:25:82:42:99:0e:99:57:d3:86:0f:54:eb:26:2d:
                    96:e1:3a:b5:9b:ff:a7:b9:96:60:3e:21:84:62:eb:
                    4b:e1:44:1a:3f:91:aa:ea:a3:9d:ef:25:dc:23:c8:
                    3c:4a:1f:b6:a3:00:1a:3f:04:c4:1d:ac:77:c3:01:
                    1f:c2:84:9c:96:26:78:83:3e:fb:ab:c6:e3:7b:06:
                    cb:a7:e3:1b:36:41:5a:5e:0c:0e:14:9b:17:54:3b:
                    2f:bd:1f:b7:22:48:b8:3b:4a:da:0d:53:e6:d8:56:
                    db:ec:9f:18:06:3e:76:84:49:aa:cb:51:aa:91:34:
                    e6:99:8a:eb:8f:db:d5:31:d8:fe:b2:7c:b7:3f:80:
                    74:44:08:a2:72:b0:75:f6:d1:73:05:1a:9a:60:5a:
                    36:34:14:a6:15:68:64:1f:a9:1a:ad:7a:b7:1b:8a:
                    f5:b2:48:20:4a:1e:31:93:98:5d:96:bf:85:72:64:
                    c6:6c:0a:00:33:28:6e:ef:4c:4b:b1:3a:49:01:7b:
                    4e:73:3a:c1:9f:4e:99:01:19:83:04:05:ba:d2:3f:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:11:68:1B:A0:14:0F:C7:DD:31:09:B9:27:38:80:DC:8C:B2:2B:44
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:70:ec:2b:c9:cb:27:de:8e:8a:be:b9:0c:d8:a2:6a:f7:f9:
         1f:6b:71:20:0b:90:ff:a4:df:1d:d9:08:dd:6d:a5:30:bc:8b:
         8f:b7:31:21:29:54:a9:3d:1b:ea:96:de:eb:cc:1d:7b:75:cf:
         b6:d8:7e:60:98:b4:2b:94:93:f3:ee:44:1e:35:d4:da:13:c5:
         aa:02:f9:8e:d6:7b:27:b3:3c:b4:0f:ed:6e:e8:ed:a7:64:c2:
         b4:d3:b0:a5:92:06:29:9c:3f:25:e8:81:32:fc:f4:d1:90:36:
         5f:d1:00:1e:a7:89:e5:3b:14:bb:18:32:54:78:7a:f7:fc:88:
         5c:9d:b8:e4:58:66:93:42:34:44:81:ad:5a:8c:e4:26:6b:c4:
         94:41:a2:0c:4d:7f:52:df:6a:a0:03:68:b5:7b:84:bb:16:57:
         29:11:5c:12:76:5e:86:64:1d:1a:1d:01:82:32:1b:3d:a1:b8:
         8e:56:07:74:e6:23:44:af:ba:79:24:a3:0b:86:81:16:cc:79:
         24:89:a2:a0:9a:c6:ca:50:90:fb:35:25:1d:6f:a4:79:b9:b3:
         ae:f0:9d:33:18:19:78:b7:d4:53:2a:a7:62:80:f5:1d:d4:b3:
         b1:6b:6c:2c:1e:e5:48:b2:96:ef:d1:7e:31:f4:61:b7:e7:c2:
         8e:bc:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:40 2025 by rpki-client