Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa
File:                     34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          q4lJdcaLq2puSiZochBSHuOLkiS6gohdNhEik5FK0XE=
Subject key identifier:   BF:1C:85:37:FF:69:F0:BD:73:40:44:DB:F8:1E:07:FA:32:77:FF:0E
Certificate issuer:       /CN=2CACC99A330A3753D03224139703412FA1CB21D3
Certificate serial:       5DD015A785B93B27EDCA8EDE54BBBA576C2CADC6
Authority key identifier: 2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa
Signing time:             Mon 06 Oct 2025 14:20:39 +0000
ROA not before:           Mon 06 Oct 2025 14:15:39 +0000
ROA not after:            Mon 05 Oct 2026 14:20:39 +0000
asID:                     263661
IP address blocks:        45.190.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 02:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d0:15:a7:85:b9:3b:27:ed:ca:8e:de:54:bb:ba:57:6c:2c:ad:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CACC99A330A3753D03224139703412FA1CB21D3
        Validity
            Not Before: Oct  6 14:15:39 2025 GMT
            Not After : Oct  5 14:20:39 2026 GMT
        Subject: CN=BF1C8537FF69F0BD734044DBF81E07FA3277FF0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:df:68:0a:17:9a:d1:42:26:9c:0f:0d:82:
                    eb:6d:b6:da:93:8f:c9:a0:92:bc:a4:9e:bd:fb:22:
                    f3:f2:9c:60:1c:c0:13:90:ab:cf:ee:d0:a9:06:c1:
                    9d:db:ed:1d:ea:17:1b:8d:f1:a2:ce:2c:4f:42:d5:
                    cd:4a:5e:5e:57:d8:80:09:83:f8:69:88:53:fe:75:
                    32:13:a1:2d:07:21:3d:43:21:bc:15:2b:77:7c:1f:
                    62:2a:61:99:e9:11:ee:a6:94:4c:ab:26:3a:55:b4:
                    7b:48:d1:da:32:c8:85:45:7e:fe:6b:48:0a:7b:e7:
                    77:85:e9:45:7a:9d:31:8e:e9:6e:42:6d:f8:1c:35:
                    65:28:58:a1:22:1e:04:46:97:82:e0:ca:59:0b:d7:
                    30:f1:50:83:f1:45:de:b6:ad:6c:92:e0:8d:51:88:
                    3a:94:64:35:5c:5a:ec:c9:2b:47:23:80:fe:26:6c:
                    53:9d:8a:e7:ca:24:17:6b:ed:0a:30:2e:70:63:ff:
                    3e:b6:2d:1c:e8:2c:f9:da:ca:ea:38:9b:b1:33:96:
                    0f:aa:94:5f:bc:00:ca:82:f3:bd:25:a9:f1:29:29:
                    2b:ff:21:db:3c:fd:4d:3d:59:bc:ca:2c:a8:81:75:
                    44:f0:ce:d3:e9:9d:33:38:5e:64:74:b6:fb:c2:39:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1C:85:37:FF:69:F0:BD:73:40:44:DB:F8:1E:07:FA:32:77:FF:0E
            X509v3 Authority Key Identifier:
                keyid:2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:3a:d3:3d:11:7f:dc:f2:62:12:6d:d5:e8:3b:21:8f:43:61:
         6a:3d:79:48:95:ab:dc:3a:64:c6:b9:41:3c:a0:ef:18:f5:e1:
         b7:6f:bf:19:76:d5:fb:43:74:ab:7f:be:7d:ad:30:ce:f0:05:
         d2:8c:bd:b8:db:3a:f8:16:d7:fa:01:80:43:bf:5a:63:b6:71:
         00:2d:f8:35:c5:75:d1:6d:91:7e:e0:07:d0:fe:d2:6e:7f:58:
         27:42:6b:bb:7b:e1:72:f1:d8:17:50:f0:88:17:46:5a:ed:8d:
         f9:66:b5:e8:20:c6:b2:2a:6a:fb:20:23:03:4a:c5:9d:23:6c:
         d3:74:f9:23:67:11:ae:c2:0c:e7:9e:81:55:18:d3:66:ea:0d:
         dd:54:6e:72:c9:df:fc:17:7e:27:c7:dc:36:04:65:bc:15:ef:
         81:27:1f:ec:5e:18:bd:94:2b:f9:50:35:1e:67:a6:9c:f0:0a:
         be:43:ad:41:07:39:48:c7:5b:b1:af:23:28:49:0c:82:7b:4d:
         ff:06:45:be:e6:d3:ef:70:ef:70:4e:f8:81:5e:21:28:2b:ae:
         26:e9:41:40:a3:84:62:f4:6f:ff:28:fe:63:5b:c8:c6:a8:3b:
         f3:14:a9:9c:a3:d1:2c:b4:b6:b8:47:e6:0d:a8:6e:ba:cc:6e:
         34:65:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:03:28 2025 by rpki-client