Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32342d3234203d3e20323637393931.roa
File:                     34352e3136372e35322e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier:          clGVd0jz0Q4CUG6yVlCV2zbaK7wPY9xAp2FeijySIog=
Subject key identifier:   A1:8D:FD:54:41:BE:5A:F5:ED:EB:CE:D1:39:D6:C3:D5:23:CE:97:85
Certificate issuer:       /CN=199E6A493967FE55BA0140061BC6435DD8779FD9
Certificate serial:       17E081938B42CF226E96B4C119ADFD8172D6B39D
Authority key identifier: 19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32342d3234203d3e20323637393931.roa
Signing time:             Fri 17 Oct 2025 12:00:27 +0000
ROA not before:           Fri 17 Oct 2025 11:55:27 +0000
ROA not after:            Fri 16 Oct 2026 12:00:27 +0000
asID:                     267991
IP address blocks:        45.167.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e0:81:93:8b:42:cf:22:6e:96:b4:c1:19:ad:fd:81:72:d6:b3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199E6A493967FE55BA0140061BC6435DD8779FD9
        Validity
            Not Before: Oct 17 11:55:27 2025 GMT
            Not After : Oct 16 12:00:27 2026 GMT
        Subject: CN=A18DFD5441BE5AF5EDEBCED139D6C3D523CE9785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:91:eb:91:5f:59:ac:24:a4:b8:7b:08:43:
                    c6:8a:73:f1:73:24:00:bc:8a:a7:e1:44:13:3b:d4:
                    74:4d:fd:9e:71:56:88:41:fa:1d:9f:de:8e:1c:77:
                    4e:2b:d7:81:f3:8e:18:ad:d3:aa:ff:12:fc:0e:2b:
                    22:bd:15:6b:9e:17:0f:8d:cc:e5:e9:39:c9:06:25:
                    76:7c:cc:69:6f:4d:75:d6:79:a1:71:47:8f:0a:23:
                    06:f3:a6:0c:e1:a1:36:4b:3e:29:fe:b5:7f:84:be:
                    68:d6:d7:11:90:c4:8a:00:aa:59:fa:38:5c:8e:a4:
                    6f:61:10:cd:b1:09:ea:77:00:78:10:69:3b:bf:df:
                    a0:f3:a2:a9:4b:1e:50:60:67:bb:81:81:25:cc:36:
                    9c:33:00:20:c9:c7:d9:19:25:20:5e:50:e1:be:e1:
                    53:b5:20:d8:b5:f9:b5:88:d6:52:34:e4:4a:c4:b7:
                    fb:b9:ec:8d:e4:75:9e:75:16:ba:04:94:93:8b:9d:
                    91:3a:fe:82:32:c0:b5:75:2f:1b:05:db:dc:7a:59:
                    d3:ec:66:f3:1f:86:bf:77:91:47:6b:87:c5:2e:5f:
                    d4:7d:d9:21:47:25:09:e2:11:e1:68:fa:30:5f:31:
                    18:8b:99:f7:de:38:bb:db:26:47:a7:73:56:97:ef:
                    a4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8D:FD:54:41:BE:5A:F5:ED:EB:CE:D1:39:D6:C3:D5:23:CE:97:85
            X509v3 Authority Key Identifier:
                keyid:19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32342d3234203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:12:99:cc:d7:03:60:31:65:06:75:0b:0d:5b:bb:f4:85:06:
         89:ed:73:47:43:b7:fe:0a:48:8a:78:ea:6d:cb:13:8f:67:36:
         a5:5a:91:59:d6:6e:3d:ab:82:1a:4a:26:3a:e9:4a:f7:2d:c7:
         64:64:f7:6d:27:57:9d:8c:e7:73:2e:48:46:46:65:8e:70:e7:
         97:a4:6e:46:33:fa:41:d3:1d:86:43:48:92:4c:81:3f:f5:75:
         8b:d4:d8:98:0d:d6:a1:72:56:7a:b5:47:9d:4d:a2:f8:ed:ae:
         55:52:22:10:ba:20:06:c7:94:61:38:bf:c8:c8:34:8b:28:3e:
         a6:73:b1:d7:7b:15:22:6e:ec:ad:30:f8:a0:e5:39:aa:56:7d:
         57:3d:4d:07:f4:ef:d3:d3:6c:2e:b0:f5:cf:c8:6e:33:09:ad:
         07:8b:e7:cc:c1:73:fa:fc:4a:9b:83:b0:6e:3b:c8:31:55:7b:
         a6:8e:a8:fd:f3:0f:7b:69:52:a8:03:91:56:2e:fc:c2:07:07:
         76:d0:bc:ca:a4:f4:f5:70:7f:83:01:a9:c9:70:b1:9c:68:0c:
         74:bf:45:4a:72:64:27:80:6e:46:ed:fd:f9:bb:d1:cc:46:87:
         68:a5:41:0e:8c:a0:cd:1d:6c:dc:03:20:52:48:57:5b:cb:b1:
         7d:65:b3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:39:56 2025 by rpki-client