Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa
File:                     34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa (raw, json)
Hash identifier:          CCo7JO1gW2ifzltv64/NpFubhb8vmWpme17iH1E4rsI=
Subject key identifier:   C2:3A:23:B2:C9:E7:48:E0:D5:FD:FA:23:9E:9E:CE:8B:F1:74:A3:49
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       64E1D9F6C2F4AA50C093AEA1ADFA1421CEFB7682
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa
Signing time:             Wed 01 Oct 2025 12:53:25 +0000
ROA not before:           Wed 01 Oct 2025 12:48:25 +0000
ROA not after:            Wed 30 Sep 2026 12:53:25 +0000
asID:                     269014
IP address blocks:        45.176.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e1:d9:f6:c2:f4:aa:50:c0:93:ae:a1:ad:fa:14:21:ce:fb:76:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Oct  1 12:48:25 2025 GMT
            Not After : Sep 30 12:53:25 2026 GMT
        Subject: CN=C23A23B2C9E748E0D5FDFA239E9ECE8BF174A349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:8b:e7:b7:20:41:b6:f1:37:d7:7b:eb:db:
                    f3:b2:3e:8e:1f:56:4a:73:e3:22:4a:a9:75:07:02:
                    8c:c8:1d:55:71:8a:9b:13:e6:05:3e:56:80:ac:76:
                    8f:8a:f0:83:6f:99:ec:bd:e0:6b:93:f1:2d:10:89:
                    a6:d0:8b:27:7e:ae:65:f6:f2:b2:04:2b:df:dc:79:
                    51:cc:cf:6d:f7:52:d8:17:16:5b:ec:84:5f:8a:08:
                    2c:ee:84:82:ef:ce:2e:aa:a3:97:e2:f3:92:27:46:
                    cb:b6:22:88:aa:88:8a:23:e1:b8:a9:ec:29:2c:ee:
                    e6:3e:33:5b:8a:37:c5:e6:c0:b6:12:6f:8a:b0:ca:
                    5e:4e:98:a6:ef:9d:68:49:17:2d:93:f7:09:af:31:
                    ea:56:a1:64:6b:df:9e:60:f2:cc:c9:17:da:6d:d9:
                    f1:e1:bd:6a:c9:e4:06:73:d4:b1:03:34:d9:14:05:
                    84:82:c9:b3:ff:75:d4:55:77:36:fe:6c:b3:fd:7c:
                    0f:7f:82:eb:9d:83:1d:9c:75:7b:4f:e3:0d:5b:12:
                    8d:26:f6:96:b2:1c:7d:7c:d2:6d:bd:0d:cc:da:0d:
                    ac:dd:c0:58:0a:78:25:0b:14:e4:d8:eb:f3:f8:7e:
                    ff:ea:b7:ca:c1:34:79:64:0b:22:03:a5:ca:2f:ad:
                    27:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3A:23:B2:C9:E7:48:E0:D5:FD:FA:23:9E:9E:CE:8B:F1:74:A3:49
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:82:b9:9a:22:39:b4:04:07:f0:0d:e0:51:e7:77:5c:e9:3f:
         e6:e9:a2:6b:b0:37:a9:64:1e:75:03:87:9f:db:2c:90:9a:8f:
         cc:4c:73:ac:17:eb:45:1a:01:ec:dc:12:65:21:7c:98:87:7f:
         c2:cf:38:ab:6b:12:1f:b9:f9:8b:4d:a0:2d:96:d8:a0:e3:44:
         69:d8:de:ac:9d:6d:df:52:73:8c:e3:e8:00:fb:cc:cd:87:78:
         29:ea:db:ad:bd:43:f1:e0:3a:f2:da:f2:5b:2a:27:da:75:49:
         92:44:16:e0:60:48:ff:78:f0:36:f9:80:b6:45:6e:0d:c5:25:
         b7:0b:71:37:37:ee:e4:58:1e:b6:b6:c8:53:8a:6f:88:49:6e:
         bd:c8:39:ed:c2:77:c0:b3:e0:11:71:66:7b:da:9e:95:e4:7f:
         95:46:ed:72:50:2e:8b:5a:8d:e2:be:70:43:a0:84:41:d1:b6:
         b8:80:0a:23:1f:eb:f6:c0:92:27:95:20:40:00:22:1f:be:5d:
         49:d2:56:88:60:d3:14:ae:99:c8:70:cc:7a:3f:80:da:32:f3:
         0e:35:bc:7d:8a:51:5d:7b:54:77:d3:a8:0b:12:b1:0d:64:77:
         ce:1a:48:10:cf:f3:07:5d:32:bb:88:96:5c:c1:c6:6a:33:ce:
         60:c4:a7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:40 2025 by rpki-client