Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa
File:                     34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa (raw, json)
Hash identifier:          nAs9vj+VE47MOhkAdRgyOAQJNeyiEPJ0Qny/Uje8WgE=
Subject key identifier:   7D:9A:72:F9:22:66:A6:66:7B:C6:E8:6D:ED:FA:62:31:2E:34:84:77
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       7E71A78AA9B3CCA781E6E44BD703933596336A32
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa
Signing time:             Wed 01 Oct 2025 12:53:56 +0000
ROA not before:           Wed 01 Oct 2025 12:48:56 +0000
ROA not after:            Wed 30 Sep 2026 12:53:56 +0000
asID:                     269014
IP address blocks:        45.176.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:71:a7:8a:a9:b3:cc:a7:81:e6:e4:4b:d7:03:93:35:96:33:6a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Oct  1 12:48:56 2025 GMT
            Not After : Sep 30 12:53:56 2026 GMT
        Subject: CN=7D9A72F92266A6667BC6E86DEDFA62312E348477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c6:89:b9:0c:3c:ab:c0:ef:cc:97:3e:07:4e:
                    70:61:88:55:67:c7:5a:f7:8c:8d:20:02:9b:1c:4e:
                    d1:26:a8:8d:78:03:3f:b9:39:78:7f:95:02:d1:c0:
                    53:b9:6e:ab:26:a2:8a:93:cd:94:8d:5c:61:ac:52:
                    67:58:4f:85:ce:3b:83:dc:02:85:64:26:bd:85:92:
                    8c:fc:29:6f:e0:6a:0e:ea:3a:7d:b3:a6:0a:7a:0d:
                    d7:59:e3:75:36:16:bd:44:ba:51:e3:b6:2c:8b:7e:
                    51:25:3f:43:97:c3:b9:af:04:42:2c:b8:3f:d2:3b:
                    f4:9f:12:04:ce:d1:d6:3e:7e:b6:e2:14:8e:ef:fe:
                    3e:28:1a:5e:f4:14:b3:29:9b:be:8b:b2:f6:e5:1b:
                    82:4e:ae:f9:28:9d:7b:57:e6:2c:91:47:51:94:f9:
                    13:08:b3:42:82:25:33:bf:a4:94:d6:29:84:8d:16:
                    c3:3f:5e:6d:c3:10:93:a7:38:d9:ae:b4:65:91:ed:
                    3f:04:67:4d:46:69:3d:3d:1b:61:f3:c4:a7:23:dc:
                    c9:2b:86:fc:ad:0c:dd:d3:ed:57:31:76:ba:cb:0b:
                    51:c4:9d:a0:6e:50:7c:6b:e4:c6:d1:33:15:4e:a8:
                    22:f5:e8:39:e4:83:2a:78:58:a7:9c:53:85:39:14:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9A:72:F9:22:66:A6:66:7B:C6:E8:6D:ED:FA:62:31:2E:34:84:77
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:6b:51:b2:59:be:de:19:68:c0:b0:1f:2b:83:d8:ba:a0:f7:
         ac:e6:4f:c7:3d:ba:b0:29:d8:d3:2f:08:09:c2:14:02:d8:50:
         7a:d2:be:b2:9d:7b:fa:2b:1d:1c:4f:c0:5c:3e:7e:78:96:2c:
         61:5b:8b:12:58:1f:78:ef:e2:90:f0:b2:98:87:9c:07:54:0f:
         d7:18:b3:17:5b:98:8a:34:28:22:72:34:38:b4:0b:a3:d8:71:
         b6:0f:1a:ad:17:0a:eb:9b:a7:e8:b5:82:ef:5f:ee:0d:46:8d:
         51:a4:8a:a2:39:f8:27:0d:0f:e4:24:f0:03:e8:cd:3d:4c:60:
         80:13:57:b3:76:34:3e:e5:29:b1:5c:46:71:9b:de:46:56:5e:
         2b:9a:8c:02:61:5c:8e:19:52:dd:cd:16:4f:60:41:8a:ba:06:
         ff:7d:51:a2:b9:c5:6e:28:13:c4:ab:9c:c2:e1:e0:34:f9:d6:
         01:28:72:d8:40:9a:d5:9a:cf:6c:33:b1:44:a4:09:5b:fe:5e:
         00:94:cc:fa:46:c6:5d:4f:1b:4e:95:7e:6f:21:bc:33:83:4e:
         ad:6a:b8:93:de:a0:20:08:c1:47:c0:ef:0a:0b:74:21:0d:f1:
         fc:6a:ed:28:e8:fe:e9:d1:f3:bc:53:e5:fc:28:f2:49:7f:15:
         18:7b:41:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfnGniqmzzKeB5uRL1wOTNZYzajIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENFMTJFQzBEQTQxQjU5QkU3NTIxNkUyOEEzRDc5OEQ0
MzEzQUZFRTAeFw0yNTEwMDExMjQ4NTZaFw0yNjA5MzAxMjUzNTZaMDMxMTAvBgNV
BAMTKDdEOUE3MkY5MjI2NkE2NjY3QkM2RTg2REVERkE2MjMxMkUzNDg0NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaxom5DDyrwO/Mlz4HTnBhiFVn
x1r3jI0gApscTtEmqI14Az+5OXh/lQLRwFO5bqsmooqTzZSNXGGsUmdYT4XOO4Pc
AoVkJr2Fkoz8KW/gag7qOn2zpgp6DddZ43U2Fr1EulHjtiyLflElP0OXw7mvBEIs
uD/SO/SfEgTO0dY+frbiFI7v/j4oGl70FLMpm76LsvblG4JOrvkonXtX5iyRR1GU
+RMIs0KCJTO/pJTWKYSNFsM/Xm3DEJOnONmutGWR7T8EZ01GaT09G2HzxKcj3Mkr
hvytDN3T7VcxdrrLC1HEnaBuUHxr5MbRMxVOqCL16Dnkgyp4WKecU4U5FBGVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfZpy+SJmpmZ7xuht7fpiMS40hHcwHwYDVR0j
BBgwFoAU3OEuwNpBtZvnUhbiij15jUMTr+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hUS0U2TDE0RkhmU0xybkIxa1EyYjVqaHRjaWY2UHh0aE5FOVpUNFRY
V1AvMC9EQ0UxMkVDMERBNDFCNTlCRTc1MjE2RTI4QTNENzk4RDQzMTNBRkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRTEyRUMwREE0MUI1OUJF
NzUyMTZFMjhBM0Q3OThENDMxM0FGRUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N4VEtFNkwxNEZIZlNMcm5CMWtRMmI1amh0Y2lmNlB4dGhORTlaVDRUWFdQLzAv
MzQzNTJlMzEzNzM2MmUzMjMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtsN4wDQYJKoZIhvcNAQELBQADggEBAHFrUbJZ
vt4ZaMCwHyuD2Lqg96zmT8c9urAp2NMvCAnCFALYUHrSvrKde/orHRxPwFw+fniW
LGFbixJYH3jv4pDwspiHnAdUD9cYsxdbmIo0KCJyNDi0C6PYcbYPGq0XCuubp+i1
gu9f7g1GjVGkiqI5+CcND+Qk8APozT1MYIATV7N2ND7lKbFcRnGb3kZWXiuajAJh
XI4ZUt3NFk9gQYq6Bv99UaK5xW4oE8SrnMLh4DT51gEocthAmtWaz2wzsUSkCVv+
XgCUzPpGxl1PG06Vfm8hvDODTq1quJPeoCAIwUfA7woLdCEN8fxq7Sjo/unR87xT
5fwo8kl/FRh7QaY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:29 2025 by rpki-client