Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa
File:                     34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa (raw, json)
Hash identifier:          WKF9kW3IdQe0HNhrevkSmsuPdqnfBA4ywbhAMolFvfE=
Subject key identifier:   A0:08:89:E0:27:1B:1F:0C:F3:F9:99:45:B1:DF:CB:CD:99:D3:B7:FF
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       41222403E8C12CFF3F94489CCB4B025D91674A8E
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa
Signing time:             Wed 01 Oct 2025 12:54:04 +0000
ROA not before:           Wed 01 Oct 2025 12:49:04 +0000
ROA not after:            Wed 30 Sep 2026 12:54:04 +0000
asID:                     269014
IP address blocks:        45.176.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:22:24:03:e8:c1:2c:ff:3f:94:48:9c:cb:4b:02:5d:91:67:4a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Oct  1 12:49:04 2025 GMT
            Not After : Sep 30 12:54:04 2026 GMT
        Subject: CN=A00889E0271B1F0CF3F99945B1DFCBCD99D3B7FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:16:39:98:b3:7f:d6:e3:d7:73:7f:ac:4b:
                    5e:3b:f3:f5:f8:12:4c:c9:a7:63:36:02:24:93:51:
                    65:db:08:a7:47:da:d6:26:f4:67:81:c6:81:d3:70:
                    a1:9c:89:f5:17:ef:cf:09:c5:09:08:96:20:7f:b5:
                    5e:40:e8:df:fd:20:9a:96:6c:1b:13:a2:a7:5f:9b:
                    6b:50:4b:4b:50:ee:47:5d:f5:e9:b8:fb:8c:79:01:
                    e6:08:56:a0:c7:cf:2f:e7:77:f5:5d:f4:cd:07:c9:
                    1e:f3:1b:7e:de:ce:4c:ea:38:a9:40:be:6d:0d:96:
                    ba:89:23:90:76:8a:70:e4:c5:86:72:e0:0b:40:0a:
                    cf:91:94:77:8c:01:ea:3c:f8:44:7f:95:80:78:e3:
                    29:14:cc:df:61:a8:8f:37:f3:9a:00:6d:cb:92:6f:
                    b1:5e:96:6c:9b:e6:bb:28:21:0a:94:c4:00:e0:fc:
                    a7:d4:f8:93:37:e8:9d:7c:07:e8:8f:f0:11:c0:d0:
                    7d:6f:2d:d9:bf:af:2e:6e:77:54:93:08:42:ce:cb:
                    7b:89:34:20:86:d7:75:53:32:63:21:7e:e6:44:ec:
                    c1:08:a6:35:21:9f:f4:80:ae:88:3b:fa:f4:f2:e8:
                    29:73:22:71:21:24:9f:1e:28:ce:1e:20:f0:0f:28:
                    be:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:08:89:E0:27:1B:1F:0C:F3:F9:99:45:B1:DF:CB:CD:99:D3:B7:FF
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:87:cd:23:68:60:41:cf:d1:07:82:68:65:2a:83:f3:a6:61:
         ef:d8:cd:df:77:58:b2:33:6b:ce:00:b1:e6:10:a6:ca:e5:0b:
         14:3b:f5:a6:8b:ce:08:86:9b:8b:b6:05:4d:78:89:04:3c:26:
         0d:b7:43:24:60:47:89:8b:6f:3b:87:6e:71:aa:43:20:2e:95:
         6d:cd:49:df:1e:09:73:3a:ea:ef:9b:d8:c9:f2:92:fd:4c:d2:
         b0:e3:7f:f9:9b:3f:94:86:17:d9:da:70:90:c0:92:58:5e:2e:
         a5:68:b4:ec:aa:8f:d4:36:56:71:21:ea:23:86:78:d7:98:95:
         34:99:ed:87:e4:48:d6:d6:cd:af:0d:c0:b0:f0:7d:33:46:67:
         0b:a2:71:de:d5:48:a4:02:50:8d:7a:7e:e9:46:49:e5:ab:8d:
         1c:68:61:f8:09:4f:7e:7e:3a:bb:f8:76:a8:2f:9c:aa:e4:97:
         35:5c:68:b0:08:12:83:56:ff:47:69:4c:0d:1b:0f:6c:51:17:
         07:cd:87:31:c8:dd:77:8f:af:8e:03:4c:a5:55:7f:86:e3:99:
         bd:a3:6a:6b:30:bf:44:15:ce:05:50:40:ff:ca:2a:4a:8a:c9:
         50:09:2a:6d:78:2f:0e:c0:bb:b0:aa:94:b6:bf:59:3a:9d:2c:
         4d:01:82:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:28 2025 by rpki-client