Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa
File:                     34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa (raw, json)
Hash identifier:          2hev66JOFX0FKC7O7RoNH9Wt/SFuRIWNEh42DhEj6Z0=
Subject key identifier:   A0:51:E3:29:E0:A6:67:4D:E9:FC:82:C2:8B:B1:5A:19:9C:6E:83:63
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       4CFEB4BE87DA238D929DF75045BC421F4559383D
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa
Signing time:             Wed 01 Oct 2025 12:53:42 +0000
ROA not before:           Wed 01 Oct 2025 12:48:42 +0000
ROA not after:            Wed 30 Sep 2026 12:53:42 +0000
asID:                     269014
IP address blocks:        45.176.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fe:b4:be:87:da:23:8d:92:9d:f7:50:45:bc:42:1f:45:59:38:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Oct  1 12:48:42 2025 GMT
            Not After : Sep 30 12:53:42 2026 GMT
        Subject: CN=A051E329E0A6674DE9FC82C28BB15A199C6E8363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:b5:31:50:f3:71:51:99:78:44:24:14:4c:
                    8b:62:44:46:66:bf:a2:6f:7c:4d:e6:d1:d1:87:cc:
                    fb:1e:ef:df:2f:34:88:f4:67:0e:8c:60:17:7b:ea:
                    81:b7:4e:61:a9:e2:06:d4:6c:26:bb:75:9d:26:19:
                    50:7e:99:19:9d:8c:26:3f:ad:7b:cf:4f:66:6f:0c:
                    06:50:b1:1d:98:28:38:77:98:9d:57:95:74:43:bb:
                    cd:07:0c:d8:79:cc:34:53:a6:b4:21:31:f5:80:85:
                    a1:01:30:7e:54:76:8c:50:5f:c3:98:9a:d9:e7:c1:
                    dc:89:83:7e:af:7f:d3:83:98:7a:88:46:bb:0b:9f:
                    2d:71:8f:8d:7a:27:80:33:dd:ba:27:3a:e6:5a:00:
                    0e:ce:ac:25:b6:ac:2a:ec:ce:d3:3f:63:01:3e:5b:
                    49:2d:91:bd:2d:f1:bb:36:f0:43:a1:b8:19:3b:4f:
                    a1:42:dd:6b:d1:e1:1c:87:93:15:b2:5a:78:ad:eb:
                    3b:ab:3b:aa:a2:a7:6b:26:4b:88:67:3b:54:73:33:
                    2a:23:62:09:03:e8:b4:f0:0e:5f:da:47:3d:f2:77:
                    f7:91:0b:df:11:d7:2a:cf:79:67:a6:26:d9:80:d9:
                    e1:15:41:d1:ca:3d:59:c9:c6:9f:7a:9c:71:d9:6a:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:51:E3:29:E0:A6:67:4D:E9:FC:82:C2:8B:B1:5A:19:9C:6E:83:63
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:67:7c:57:8f:5f:7e:81:b0:76:47:9b:c1:57:07:de:22:3a:
         99:88:f4:ef:59:e6:19:06:8b:6a:9c:3c:d6:47:6a:48:91:6e:
         02:61:8c:14:60:bf:64:8f:b4:78:53:c3:25:36:f7:ac:59:90:
         ce:c0:f4:88:05:13:58:6c:2b:05:5a:ba:ef:c3:aa:a6:0c:00:
         79:7b:7f:9c:d0:a5:57:54:a8:67:c6:ef:43:28:d0:5b:51:c6:
         40:eb:0e:df:4e:83:cd:91:d4:fb:e1:d2:9b:af:34:45:d9:46:
         a9:83:81:0b:dd:49:56:3c:7a:ce:91:e1:eb:c1:76:ea:cb:c4:
         c7:56:ea:70:9d:8c:6e:48:16:2b:6e:bc:53:57:39:2f:33:71:
         fa:d0:a8:d0:ee:55:74:a1:5b:34:3a:1d:55:9c:87:94:54:57:
         5a:28:14:91:43:4b:b5:d6:5d:00:55:fc:f4:67:30:0f:87:35:
         48:d5:1a:f0:ca:81:b2:78:f8:86:54:13:a8:75:61:3d:dc:9f:
         76:a0:35:61:07:72:b0:fe:22:8e:55:55:6c:09:4d:de:56:65:
         ef:a0:27:2f:20:73:f2:16:20:ba:7e:b9:36:07:33:d5:48:31:
         ea:d7:6b:12:44:a3:a6:d9:28:03:04:b7:4a:bf:f5:8f:49:ee:
         a8:65:b4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:20 2025 by rpki-client