Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231342e302f32332d3233203d3e20323639323932.roa
File:                     34352e3138332e3231342e302f32332d3233203d3e20323639323932.roa (raw, json)
Hash identifier:          eCicn8ImATtRCvC9cDtGoHFzEjsxcilD3e7acHERHGI=
Subject key identifier:   A2:9D:78:28:3F:6D:9E:37:BF:33:D6:1F:60:A3:EB:78:BE:0D:A4:BA
Certificate issuer:       /CN=891876379661096633CCF1E14D82D1BBB9CBF133
Certificate serial:       1C4A0B6E2976F01F56191424E64C70E63D9C7135
Authority key identifier: 89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231342e302f32332d3233203d3e20323639323932.roa
Signing time:             Tue 16 Sep 2025 17:07:05 +0000
ROA not before:           Tue 16 Sep 2025 17:02:05 +0000
ROA not after:            Tue 15 Sep 2026 17:07:05 +0000
asID:                     269292
IP address blocks:        45.183.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl
                          rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4a:0b:6e:29:76:f0:1f:56:19:14:24:e6:4c:70:e6:3d:9c:71:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891876379661096633CCF1E14D82D1BBB9CBF133
        Validity
            Not Before: Sep 16 17:02:05 2025 GMT
            Not After : Sep 15 17:07:05 2026 GMT
        Subject: CN=A29D78283F6D9E37BF33D61F60A3EB78BE0DA4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:4b:df:1d:10:b9:fb:84:bb:6f:de:3a:ae:
                    17:75:2c:9d:7f:7d:6f:71:6f:80:e9:02:e8:ba:21:
                    c5:c1:e4:84:a3:04:d3:f5:cb:2f:22:0b:02:93:2f:
                    c4:aa:55:69:17:76:d2:b0:13:18:e4:a9:86:a3:cf:
                    fa:cc:0a:54:7d:dd:a5:71:30:56:df:71:3a:13:55:
                    f8:6a:ea:38:7d:cb:8d:73:cf:b7:e9:f8:d7:52:61:
                    5b:d1:d3:11:4c:a8:26:72:0a:68:d3:89:57:5c:26:
                    0e:8d:a6:ae:67:dc:03:1d:62:24:29:88:e8:48:fa:
                    6c:d1:32:e2:3b:1e:eb:8e:fd:00:3a:31:ac:a5:de:
                    3e:1b:68:5c:db:bb:f0:46:2c:82:cc:4f:7f:92:fa:
                    a0:34:f5:ae:b8:75:77:eb:a9:f7:68:88:fe:d0:99:
                    51:d1:e0:6b:bf:30:a0:73:95:fb:ee:d7:b9:4a:cb:
                    37:de:03:7f:0a:11:74:8a:50:82:2c:1f:64:29:b9:
                    dc:72:c2:5a:ac:bb:55:0c:72:29:b8:c5:ca:4a:88:
                    b1:76:fa:d0:9e:39:d0:e8:9a:f8:7d:8d:e3:5f:c5:
                    fc:3c:f6:66:93:e0:88:61:bc:1b:da:52:a7:4c:bc:
                    3c:0a:bc:81:38:b4:1d:9e:48:bb:27:86:f8:28:71:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9D:78:28:3F:6D:9E:37:BF:33:D6:1F:60:A3:EB:78:BE:0D:A4:BA
            X509v3 Authority Key Identifier:
                keyid:89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231342e302f32332d3233203d3e20323639323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:a3:28:5a:fe:29:da:c5:27:d0:30:a0:ff:e1:f4:9b:80:12:
         6a:a0:b3:db:d0:b9:6b:6a:e9:6f:f1:57:a1:cb:6b:2f:8a:0b:
         c5:74:ae:c0:26:c7:9a:f9:3f:20:75:28:cd:39:df:91:22:39:
         d7:4c:02:ad:85:0f:2b:eb:92:e7:c5:0e:50:d9:4a:43:13:22:
         5c:0c:b4:21:ca:99:a0:c9:a7:34:1a:06:d5:24:88:b7:eb:ec:
         e2:40:4f:69:88:7f:98:8d:7f:60:12:1b:0f:2b:9c:78:1a:27:
         ee:e9:30:29:87:97:2b:a4:8b:1c:eb:75:44:38:ce:f5:10:bd:
         be:ce:d4:bb:9c:a0:fb:e7:44:00:6f:1c:bb:33:46:ca:a1:5c:
         e6:8d:36:59:e4:04:39:de:29:cd:94:12:26:0b:ba:f0:4e:4c:
         ca:49:f2:44:4d:e0:63:55:0c:b4:27:49:36:fa:d5:c8:38:60:
         40:19:83:07:cb:11:29:17:5d:22:bf:88:2d:b1:05:09:a5:b8:
         a5:44:aa:e3:b1:96:b5:db:aa:d4:3b:8d:89:55:e9:b5:f4:1c:
         37:88:a6:dc:41:0c:86:80:19:a7:db:96:cf:12:bd:56:f5:52:
         4b:b4:1b:9d:47:33:00:d4:32:84:4c:2d:d7:08:1e:f3:65:08:
         89:a9:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:04:53 2025 by rpki-client