Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/34352e3138362e3231322e302f32322d3332203d3e20323639343336.roa
File:                     34352e3138362e3231322e302f32322d3332203d3e20323639343336.roa (raw, json)
Hash identifier:          klFo8mWfB6j04v87j5VFuJVqzd1vm+wvjD3lvbYhFcA=
Subject key identifier:   49:6B:CE:84:A2:D7:14:A2:2C:B3:ED:1C:5A:F4:91:88:70:6C:6F:CC
Certificate issuer:       /CN=E16C601E16EC0A865BC4255275BA7116A46EA76B
Certificate serial:       228A259E82E99472B9EB642692A8770A093B439F
Authority key identifier: E1:6C:60:1E:16:EC:0A:86:5B:C4:25:52:75:BA:71:16:A4:6E:A7:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16C601E16EC0A865BC4255275BA7116A46EA76B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/34352e3138362e3231322e302f32322d3332203d3e20323639343336.roa
Signing time:             Mon 18 Aug 2025 20:06:55 +0000
ROA not before:           Mon 18 Aug 2025 20:01:55 +0000
ROA not after:            Mon 17 Aug 2026 20:06:55 +0000
asID:                     269436
IP address blocks:        45.186.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/E16C601E16EC0A865BC4255275BA7116A46EA76B.crl
                          rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/E16C601E16EC0A865BC4255275BA7116A46EA76B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16C601E16EC0A865BC4255275BA7116A46EA76B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 12:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8a:25:9e:82:e9:94:72:b9:eb:64:26:92:a8:77:0a:09:3b:43:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16C601E16EC0A865BC4255275BA7116A46EA76B
        Validity
            Not Before: Aug 18 20:01:55 2025 GMT
            Not After : Aug 17 20:06:55 2026 GMT
        Subject: CN=496BCE84A2D714A22CB3ED1C5AF49188706C6FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:bf:e1:f2:f7:e6:79:cf:38:49:6d:6e:db:
                    9f:55:bb:3f:82:6a:84:ed:7c:e9:86:c7:29:15:ac:
                    27:af:75:7c:3b:c4:4b:4c:84:1e:3f:f0:6f:65:3d:
                    f8:e5:75:dc:33:88:9f:87:ff:37:0f:b7:86:b8:0f:
                    91:ac:48:34:46:c4:e5:cf:62:4e:6b:03:f4:c7:74:
                    75:55:ff:76:17:fa:6f:53:24:75:7c:71:35:2a:a8:
                    a0:16:a6:0f:22:9f:b9:67:87:9a:2f:1e:a8:08:f3:
                    47:66:3c:83:29:7e:46:ac:63:42:1c:41:2e:8c:96:
                    fa:d7:95:d8:e1:18:73:fa:a2:31:ff:de:91:6e:43:
                    f1:8e:c9:73:a4:a0:a9:7a:e2:7e:51:4a:77:77:25:
                    01:e4:ad:34:7d:4f:6d:e9:d4:41:5a:ed:c4:7e:d2:
                    93:9d:3f:7d:be:d1:0c:57:32:4d:6c:dc:4b:cf:f8:
                    d1:29:fd:d8:85:2c:a8:6b:ee:2a:1a:29:8e:5d:af:
                    07:b9:70:03:a3:1e:bd:4f:e4:fc:51:39:3b:f8:c5:
                    8a:a4:d4:b7:d9:3b:0b:5d:2d:88:f2:36:b9:30:d4:
                    43:66:14:3f:b1:8e:ea:39:99:ef:3f:44:9b:47:66:
                    d0:e7:16:a1:a9:63:57:c6:da:f0:69:a2:0e:6e:7a:
                    ee:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6B:CE:84:A2:D7:14:A2:2C:B3:ED:1C:5A:F4:91:88:70:6C:6F:CC
            X509v3 Authority Key Identifier:
                keyid:E1:6C:60:1E:16:EC:0A:86:5B:C4:25:52:75:BA:71:16:A4:6E:A7:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/E16C601E16EC0A865BC4255275BA7116A46EA76B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16C601E16EC0A865BC4255275BA7116A46EA76B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/34352e3138362e3231322e302f32322d3332203d3e20323639343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:35:fe:f9:ae:eb:6e:02:0e:41:4d:cf:49:10:32:de:dc:f6:
         f4:37:8b:e4:90:91:ec:a9:55:4c:86:7b:81:f2:50:de:9c:6f:
         04:91:d5:6e:02:cc:8d:b9:c6:f8:fc:c9:cc:95:c0:cc:21:f7:
         6d:83:84:01:8e:27:56:84:53:b0:0a:9f:71:d6:65:c2:08:32:
         cd:40:1d:8e:28:d1:62:47:44:eb:70:2d:0d:8e:35:79:69:12:
         f9:47:cb:34:50:ea:f1:62:26:25:57:74:1a:0a:e9:b1:e6:cf:
         d4:82:7b:dd:e4:35:c6:95:38:ab:ac:8c:52:c0:4a:61:1d:c9:
         1d:12:5c:83:fd:ef:72:0d:f6:a2:78:fa:af:32:32:ad:e3:a2:
         c1:e1:f3:12:de:a3:32:43:3f:62:93:a6:ba:b2:f5:ed:e3:8a:
         b4:c2:58:ce:d7:2b:e7:c7:e7:30:b4:e9:c4:fa:33:22:8d:c4:
         ba:51:70:04:09:ca:16:49:f9:9b:b4:86:c8:16:97:78:ac:2c:
         d9:bd:97:79:5b:19:a5:e3:fa:d2:d1:0f:2d:6d:a3:8b:14:a5:
         8f:cf:85:b1:ea:39:78:b1:09:90:e4:fa:32:ce:aa:bc:f2:b6:
         1c:80:15:a2:8e:f8:33:ef:fd:0b:9e:b8:4b:3f:c9:68:29:dc:
         2e:69:49:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:03:15 2025 by rpki-client