Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39382e3132382f32352d3235203d3e20323637303230.roa
File:                     34352e3232362e39382e3132382f32352d3235203d3e20323637303230.roa (raw, json)
Hash identifier:          Tvq62HJxwhnoD0bCvCbYuTorFFm90hu8X0caUoUH4jg=
Subject key identifier:   EF:5E:A0:27:EA:2C:DB:66:CD:CA:B5:11:FA:6C:0C:38:52:A8:D8:0C
Certificate issuer:       /CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
Certificate serial:       22CC7D1D3CC1D002BF3D00A8B95D0E07B6AC9338
Authority key identifier: 12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39382e3132382f32352d3235203d3e20323637303230.roa
Signing time:             Tue 14 Oct 2025 03:43:19 +0000
ROA not before:           Tue 14 Oct 2025 03:38:19 +0000
ROA not after:            Tue 13 Oct 2026 03:43:19 +0000
asID:                     267020
IP address blocks:        45.226.98.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl
                          rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 23:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cc:7d:1d:3c:c1:d0:02:bf:3d:00:a8:b9:5d:0e:07:b6:ac:93:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
        Validity
            Not Before: Oct 14 03:38:19 2025 GMT
            Not After : Oct 13 03:43:19 2026 GMT
        Subject: CN=EF5EA027EA2CDB66CDCAB511FA6C0C3852A8D80C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:6f:9c:c3:31:db:71:8b:45:b6:37:88:fa:
                    48:81:66:3d:b7:54:17:73:83:89:aa:05:d1:75:92:
                    9e:00:b1:73:0a:f4:bb:09:a5:61:60:73:1c:e8:87:
                    33:cc:c7:2b:fc:4e:69:43:b3:12:40:9a:13:c4:26:
                    0b:ce:5d:74:a1:2f:10:90:bd:bf:83:7f:4f:e5:30:
                    79:3a:58:2e:92:a0:8b:1f:a7:f0:3c:de:82:bd:b9:
                    05:db:fb:be:7b:23:0b:b8:93:08:4f:0b:e3:ca:62:
                    67:9d:ce:34:51:22:4a:0c:58:a9:4b:81:7a:28:8a:
                    b1:5f:e7:af:34:ec:9a:31:19:a4:e9:51:a4:e9:0b:
                    63:81:60:b5:02:74:58:d6:f3:45:fc:0a:12:4a:31:
                    8a:0a:43:5b:21:82:b3:a0:be:39:34:ad:42:8a:ce:
                    dc:ce:1e:cd:77:fe:a7:97:d9:7a:a7:5d:61:69:86:
                    b2:e6:b1:6c:02:0a:98:6d:cf:79:1d:18:91:10:d3:
                    0b:f5:f8:af:78:62:f8:f7:38:0b:68:49:53:e5:98:
                    53:16:71:27:28:73:0e:91:33:24:1e:2c:b4:a2:de:
                    0a:88:e9:b8:6f:23:bb:ab:fc:08:2d:7b:9d:80:c9:
                    1b:3e:03:31:84:9b:e9:49:f4:bc:6a:33:32:ee:4a:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5E:A0:27:EA:2C:DB:66:CD:CA:B5:11:FA:6C:0C:38:52:A8:D8:0C
            X509v3 Authority Key Identifier:
                keyid:12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39382e3132382f32352d3235203d3e20323637303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.98.128/25

    Signature Algorithm: sha256WithRSAEncryption
         41:f3:09:fe:f4:dd:a5:ef:f4:8d:8f:5b:7c:2e:c2:8f:1b:25:
         1e:0b:3c:df:c4:4e:7f:9c:44:10:63:7e:19:45:28:4c:30:6d:
         4b:8d:22:36:d7:00:7d:dd:e5:b6:3a:20:6a:f4:fc:96:5b:82:
         1c:ae:71:4f:83:da:e2:a3:88:75:e4:3d:e6:39:c1:79:d9:51:
         7d:12:1e:96:a0:d3:b9:c6:34:29:d2:52:bd:6c:c4:bb:ef:89:
         ce:8a:94:3b:fe:8b:65:4a:4e:f2:5e:14:af:ca:5d:52:7a:49:
         3c:a1:cb:fe:b9:47:66:38:79:ed:db:e2:af:cd:09:da:74:26:
         de:50:3f:86:62:e5:c5:10:6f:f6:6b:1a:4a:46:5d:f5:bc:9a:
         be:90:64:e7:a6:80:7f:3e:ea:4a:b1:2b:f6:4a:1d:8e:b0:86:
         87:a4:c6:05:5e:9f:62:1a:2c:86:03:99:86:8c:80:5d:88:7a:
         aa:bf:12:b8:9b:ef:38:b6:0e:cd:0e:2f:d1:61:04:71:a2:54:
         97:24:ed:fe:e4:08:10:13:86:81:44:63:dc:b6:a7:a3:0c:1e:
         1d:eb:eb:e1:b4:6e:dd:05:cb:65:bb:a7:cd:a1:2f:71:67:26:
         a0:ac:18:1a:7a:c9:12:3a:94:e3:3b:e0:cb:43:4f:25:21:a6:
         95:eb:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:02:44 2025 by rpki-client