Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa
File:                     34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa (raw, json)
Hash identifier:          Qz8oVXgN5YpEgYsxAfQi1SFoSqt45EkW4UjY0tA85ow=
Subject key identifier:   E2:7A:11:96:91:C2:22:6D:94:C4:A2:95:9B:AF:58:CA:71:A0:57:EF
Certificate issuer:       /CN=1014927E28103822EBD27A9BBFCE358A2ADB16B3
Certificate serial:       4DA3B8C64C9EB499B5BD9C95B53DACDFCDC0C4FF
Authority key identifier: 10:14:92:7E:28:10:38:22:EB:D2:7A:9B:BF:CE:35:8A:2A:DB:16:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa
Signing time:             Fri 26 Sep 2025 22:47:19 +0000
ROA not before:           Fri 26 Sep 2025 22:42:19 +0000
ROA not after:            Fri 25 Sep 2026 22:47:19 +0000
asID:                     268464
IP address blocks:        45.161.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.crl
                          rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a3:b8:c6:4c:9e:b4:99:b5:bd:9c:95:b5:3d:ac:df:cd:c0:c4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1014927E28103822EBD27A9BBFCE358A2ADB16B3
        Validity
            Not Before: Sep 26 22:42:19 2025 GMT
            Not After : Sep 25 22:47:19 2026 GMT
        Subject: CN=E27A119691C2226D94C4A2959BAF58CA71A057EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:7f:83:ab:3f:23:b5:f4:a1:d2:01:81:50:
                    a1:77:93:00:b7:6a:dc:72:8c:cf:e6:43:e3:4d:b5:
                    6b:09:4d:71:11:71:52:e0:d6:6d:36:50:58:7c:10:
                    6e:d5:79:3e:f6:5d:bc:a5:a2:44:6d:31:a3:45:13:
                    a2:c9:26:2b:b3:81:2a:df:0f:76:c3:3e:d5:a2:93:
                    42:e5:b2:ba:dd:d5:90:f6:d5:95:bc:1d:b4:c3:e2:
                    ba:1a:6a:37:a7:5a:e9:25:6f:bf:2d:ed:14:5e:1f:
                    e6:b6:cf:08:11:cb:cb:27:38:87:37:d8:ce:11:75:
                    85:8a:60:92:aa:be:b2:56:7e:43:a1:37:90:f7:e1:
                    90:e0:ce:b8:04:b8:dc:d3:25:56:a9:1b:24:20:01:
                    34:62:39:80:6e:e0:66:fe:51:34:02:01:27:9b:33:
                    34:20:4d:b4:de:6f:79:65:7b:ff:4e:09:c9:df:04:
                    bb:fa:2e:b9:b2:a6:b8:eb:a2:c5:0b:dc:1d:fb:66:
                    a6:62:99:b2:81:a5:51:1f:a4:b8:10:db:b9:4f:2e:
                    72:a9:9e:75:b2:96:89:e6:28:77:b4:53:10:d5:53:
                    8b:18:48:f8:19:89:9b:4c:91:cc:18:74:db:d1:fa:
                    e1:99:44:6d:ed:41:ac:0d:10:d1:5d:0d:6c:a0:5f:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7A:11:96:91:C2:22:6D:94:C4:A2:95:9B:AF:58:CA:71:A0:57:EF
            X509v3 Authority Key Identifier:
                keyid:10:14:92:7E:28:10:38:22:EB:D2:7A:9B:BF:CE:35:8A:2A:DB:16:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:91:ee:59:ea:46:0f:4a:ee:15:c8:c2:a6:d0:01:fa:83:4d:
         2f:c7:1c:56:df:83:72:0a:12:b1:f0:37:39:fa:43:bb:3d:09:
         49:ef:99:86:de:24:3e:0e:b7:46:09:80:33:5e:ec:a7:62:61:
         f0:10:07:6a:a1:4b:b6:e2:07:7b:e6:b4:e3:fa:eb:5c:ad:81:
         b0:43:e1:91:ca:36:01:4a:30:ea:26:5f:a2:94:55:93:c3:4b:
         94:62:03:95:76:0a:94:f7:f5:85:44:7d:27:e2:ba:01:ba:07:
         04:3f:46:4e:01:8a:33:e7:bb:c9:88:19:c3:61:88:a6:44:8c:
         f0:58:70:53:ce:23:c2:2e:1a:77:ff:6a:dd:6c:3e:c5:75:16:
         b0:de:d4:85:91:72:eb:1c:6b:7e:15:bf:7e:10:0a:57:f3:e8:
         17:ab:65:60:80:f4:17:29:7b:58:78:0e:6d:68:5d:84:38:67:
         9c:9c:91:c0:e7:8a:4c:01:79:61:c1:62:e9:c7:2a:8c:4d:dc:
         51:fd:b3:ee:07:59:eb:78:77:49:90:66:5b:e5:c6:9c:3f:7a:
         b4:7b:80:bc:7e:8a:4d:9b:0e:61:3a:70:3d:f8:96:5b:f7:fe:
         48:b7:f5:15:a2:42:da:f7:c4:52:21:d3:f4:78:2b:b3:76:38:
         37:be:ba:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:41:43 2025 by rpki-client