Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39382e302f32352d3235203d3e20323637303230.roa
File:                     34352e3232362e39382e302f32352d3235203d3e20323637303230.roa (raw, json)
Hash identifier:          R7whsP3vlfSdPCRhyNvO/olKOiJLU2Fo1ZzrCbNCnOM=
Subject key identifier:   00:81:69:AF:36:04:A3:4F:2F:22:ED:49:20:F6:16:D7:67:53:82:A8
Certificate issuer:       /CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
Certificate serial:       57C832E4C12674379DC66DFA435A82E33B334F80
Authority key identifier: 12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39382e302f32352d3235203d3e20323637303230.roa
Signing time:             Tue 14 Oct 2025 03:43:19 +0000
ROA not before:           Tue 14 Oct 2025 03:38:19 +0000
ROA not after:            Tue 13 Oct 2026 03:43:19 +0000
asID:                     267020
IP address blocks:        45.226.98.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl
                          rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 23:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c8:32:e4:c1:26:74:37:9d:c6:6d:fa:43:5a:82:e3:3b:33:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
        Validity
            Not Before: Oct 14 03:38:19 2025 GMT
            Not After : Oct 13 03:43:19 2026 GMT
        Subject: CN=008169AF3604A34F2F22ED4920F616D7675382A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:ae:68:2f:23:3a:63:fb:03:90:53:c5:1d:
                    71:13:83:ea:76:f4:cf:47:4c:63:cd:b4:59:a9:57:
                    f1:0c:e1:1f:50:88:91:13:d3:58:8f:cb:de:09:5f:
                    47:6d:38:fd:34:05:4f:0d:93:1d:ca:d3:15:3a:f9:
                    ab:bb:73:d7:aa:c1:41:98:38:6f:b2:98:94:f3:4e:
                    71:a4:a9:63:f0:85:b6:dd:f1:f0:7e:e9:7f:c2:c3:
                    b4:29:87:a1:fd:41:f6:3d:d1:4b:10:95:0d:c3:38:
                    71:51:dc:48:57:98:91:ee:52:35:73:34:7c:32:58:
                    e3:ba:5e:fc:65:c3:20:f7:70:cf:2e:20:dc:d0:22:
                    85:d7:1c:e4:2a:51:6d:0e:16:dc:e1:68:da:5c:3d:
                    aa:81:ed:38:f8:1d:9a:f3:59:ef:d7:f8:f1:dc:06:
                    d2:bf:db:c9:81:dd:5c:b6:7e:36:29:9b:d8:84:72:
                    1d:be:54:fc:1b:28:e9:6a:1d:85:cc:18:c7:cc:38:
                    2f:c7:b3:22:11:c8:00:47:81:2e:ab:00:f9:3d:66:
                    84:b8:bb:93:11:35:df:b0:8a:a9:c1:48:c8:c7:a6:
                    61:06:ba:81:17:a8:e6:13:c9:ea:22:da:43:28:56:
                    4f:33:82:64:58:f4:60:24:1b:35:38:be:5a:3c:5c:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:81:69:AF:36:04:A3:4F:2F:22:ED:49:20:F6:16:D7:67:53:82:A8
            X509v3 Authority Key Identifier:
                keyid:12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39382e302f32352d3235203d3e20323637303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.98.0/25

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:d6:8d:d8:cd:fb:68:39:4f:c2:67:d7:be:a8:5b:3b:00:
         30:4c:5f:81:3b:05:eb:3a:09:77:05:fb:2b:14:21:26:c7:8c:
         56:34:f1:10:95:94:b2:cb:93:ee:43:5d:a2:02:e5:c5:4f:14:
         9e:6a:88:07:1e:a8:39:cf:4e:7c:aa:c4:85:9c:d9:5c:79:c4:
         c8:d2:2f:e2:49:81:9e:c5:2a:c7:4d:72:00:4e:73:dd:44:cd:
         09:1f:95:f9:05:93:a5:0f:f4:5e:a1:30:29:f7:d9:12:65:f4:
         7d:32:b0:8f:38:03:3a:18:bf:3d:34:28:35:c7:49:6d:7a:59:
         47:20:9e:ff:27:bd:b3:7f:ca:76:c0:0e:cb:1e:7b:3f:4f:c1:
         65:57:f3:52:27:5d:76:99:14:33:63:dd:87:f0:f8:97:88:8c:
         de:81:e6:8d:ba:58:c0:50:ab:aa:8d:10:0f:19:56:6a:82:b7:
         eb:70:15:f2:22:63:94:ad:ed:17:de:09:f2:cb:8b:42:7f:86:
         d9:1c:11:a2:1b:54:05:94:6c:a7:f5:6d:29:4c:a6:f3:1a:af:
         cc:51:4b:4b:b7:45:62:8c:a8:41:df:2a:4c:07:bc:5d:08:57:
         36:c6:17:97:99:ff:68:e5:bd:73:33:6f:34:f4:d4:3b:2d:f1:
         f6:72:bf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:25:05 2025 by rpki-client