Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa
File:                     34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa (raw, json)
Hash identifier:          FrsphXcWqkDuFn0CXa+pBZziIZeOJM3cPaTZIWpiT50=
Subject key identifier:   41:CE:9B:1F:60:AA:90:75:BE:2B:33:97:D9:E9:36:87:92:53:81:D3
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       12B394BB495B419167C41358FCD841FA339FA334
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa
Signing time:             Wed 01 Oct 2025 12:53:34 +0000
ROA not before:           Wed 01 Oct 2025 12:48:34 +0000
ROA not after:            Wed 30 Sep 2026 12:53:34 +0000
asID:                     269014
IP address blocks:        45.176.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b3:94:bb:49:5b:41:91:67:c4:13:58:fc:d8:41:fa:33:9f:a3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Oct  1 12:48:34 2025 GMT
            Not After : Sep 30 12:53:34 2026 GMT
        Subject: CN=41CE9B1F60AA9075BE2B3397D9E93687925381D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:74:cf:9c:84:0e:7c:7b:e4:88:34:c7:f7:
                    85:fd:3e:8e:d0:cc:9f:ca:c8:a4:d3:de:96:ec:07:
                    ca:65:46:29:f5:f8:81:d5:db:18:ef:b4:af:67:04:
                    fc:77:8a:ff:23:f0:3a:d0:33:89:d1:8c:22:9c:c5:
                    90:45:5e:e5:0e:24:67:0c:95:b8:e4:09:4e:4e:87:
                    25:68:6f:26:a4:ea:8c:0a:5f:1f:a9:29:6b:26:e8:
                    39:cb:04:2f:ca:bd:07:14:ff:1a:7a:af:87:06:c4:
                    66:8f:45:9f:a0:04:ed:d6:60:a7:e3:9a:92:54:58:
                    01:72:f8:57:71:de:43:e4:f8:a1:cc:8a:c8:96:96:
                    8c:10:81:30:08:80:4b:31:70:24:34:f8:90:28:c2:
                    78:03:f9:bf:42:c8:9b:ba:60:a0:8c:0f:af:17:4b:
                    f3:d3:7e:8a:e8:36:1e:dd:a5:84:8e:11:10:08:ea:
                    aa:8c:57:cd:0e:f8:3e:b0:1e:7a:96:c8:eb:9f:5f:
                    13:ee:5e:f4:59:8c:dc:d3:26:a4:a8:9d:4d:0c:64:
                    df:8f:03:9f:08:e3:f9:bd:cd:f9:d4:e9:0a:85:78:
                    f3:94:0a:4a:67:ac:ca:dd:fc:79:e0:a0:c1:5d:ec:
                    96:31:91:f1:ba:22:9d:d6:7b:c2:d2:6c:86:55:fd:
                    5b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CE:9B:1F:60:AA:90:75:BE:2B:33:97:D9:E9:36:87:92:53:81:D3
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:00:12:ad:ca:f9:24:4f:e7:90:61:a7:b4:6f:58:b8:6c:
         52:53:44:e1:ff:ed:0d:8d:1f:cf:89:46:ee:be:98:92:b9:bd:
         30:2b:5b:b4:a6:06:95:c2:84:bb:e9:83:38:1e:be:36:13:a2:
         72:55:07:0e:7c:16:9d:dd:62:17:ac:ac:a3:af:b7:ac:c6:d4:
         47:72:c3:5f:ab:72:f2:d3:e8:86:17:70:8c:df:5a:eb:a4:19:
         02:27:e7:c5:5c:7b:2e:1a:a9:95:bd:88:7a:fe:63:c7:32:40:
         19:d7:cf:c8:ca:8b:47:dd:b9:71:6a:c5:94:7a:7f:5f:80:6b:
         9f:60:8d:85:18:de:c1:2a:de:6a:14:32:35:05:22:cb:1d:3b:
         07:f4:c6:60:32:86:b5:94:23:a1:04:f3:a6:23:e7:4f:a3:4d:
         35:92:87:d1:ce:df:ab:1d:b5:22:8f:c9:01:92:fb:10:43:03:
         74:15:e4:5b:18:fb:91:6a:9b:e6:7b:be:fa:23:57:32:5d:08:
         2a:b2:45:83:a0:ec:de:3d:8e:ee:8a:b2:29:8f:c9:cc:8b:e4:
         d4:f0:cb:0e:0e:7d:bc:24:2c:9c:ad:7c:97:a2:c7:1d:a2:65:
         8e:0e:39:aa:94:b9:32:ec:7d:b4:1a:1f:48:2b:71:22:ba:83:
         cf:f0:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:31 2025 by rpki-client