Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/34352e3139312e3134302e302f32322d3332203d3e20323639363734.roa
File:                     34352e3139312e3134302e302f32322d3332203d3e20323639363734.roa (raw, json)
Hash identifier:          MumvzVRHnljiYunsiz3sRTEn8B4k3rM2KyTsshUdTNY=
Subject key identifier:   DF:26:03:92:9F:53:72:BE:FB:F4:D6:BF:F9:84:0C:25:77:5F:53:1E
Certificate issuer:       /CN=69CE20FA9020F27973CD76BE91FBDEB28AD7336D
Certificate serial:       248F6F2A70DA76BB35C7BAF7B1CC94E668246671
Authority key identifier: 69:CE:20:FA:90:20:F2:79:73:CD:76:BE:91:FB:DE:B2:8A:D7:33:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/34352e3139312e3134302e302f32322d3332203d3e20323639363734.roa
Signing time:             Wed 13 Aug 2025 22:42:47 +0000
ROA not before:           Wed 13 Aug 2025 22:37:47 +0000
ROA not after:            Wed 12 Aug 2026 22:42:47 +0000
asID:                     269674
IP address blocks:        45.191.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.crl
                          rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8f:6f:2a:70:da:76:bb:35:c7:ba:f7:b1:cc:94:e6:68:24:66:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69CE20FA9020F27973CD76BE91FBDEB28AD7336D
        Validity
            Not Before: Aug 13 22:37:47 2025 GMT
            Not After : Aug 12 22:42:47 2026 GMT
        Subject: CN=DF2603929F5372BEFBF4D6BFF9840C25775F531E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:36:9a:85:a1:e5:71:8a:ff:82:d5:27:29:53:
                    ba:e4:bf:93:e9:bf:61:a2:0a:5e:d8:b8:b3:20:29:
                    4c:6c:67:79:bf:e8:64:5b:d2:f2:18:c2:bb:50:cb:
                    a5:1f:4b:40:4e:5f:1c:e0:39:5b:16:fc:c0:e0:ab:
                    64:97:a7:92:64:76:58:fa:db:de:ff:1e:35:56:04:
                    d7:73:fb:eb:3d:1d:de:d0:5a:b7:ff:c9:9e:d9:95:
                    d0:9b:55:94:f2:a2:b9:18:60:80:dc:1f:80:17:3d:
                    b0:2e:d0:c3:21:34:4f:ef:3e:f4:01:e9:86:b4:13:
                    81:ee:61:36:b9:d2:57:e7:e8:7c:9a:cc:56:ea:57:
                    18:d2:4b:7f:bf:1b:1c:4e:f7:39:ab:d9:44:f6:38:
                    b2:a2:cd:93:a8:10:a1:87:2e:11:b4:34:29:70:0c:
                    c7:69:79:62:e1:ac:2f:24:99:aa:d6:43:e2:b5:6c:
                    ab:e9:2e:6b:77:29:0b:a3:00:40:1f:76:75:34:31:
                    62:65:37:9d:31:b3:72:81:34:f2:1b:76:7d:fe:95:
                    1e:15:8a:7e:66:2d:82:49:71:ab:b8:e5:c2:70:40:
                    73:71:00:d5:b9:06:3e:38:d3:d5:3e:51:53:ad:74:
                    29:ca:c1:74:8d:1a:3a:5a:68:cf:e4:98:56:a4:32:
                    5c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:26:03:92:9F:53:72:BE:FB:F4:D6:BF:F9:84:0C:25:77:5F:53:1E
            X509v3 Authority Key Identifier:
                keyid:69:CE:20:FA:90:20:F2:79:73:CD:76:BE:91:FB:DE:B2:8A:D7:33:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/34352e3139312e3134302e302f32322d3332203d3e20323639363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:1a:9f:5b:ec:9d:a4:59:c6:62:b0:af:3f:c9:31:7c:fb:0f:
         f1:19:63:35:4c:76:82:37:5e:3a:6f:1b:65:19:aa:5c:bc:75:
         5e:38:c2:bf:2d:e2:ab:e8:65:5e:ca:7f:53:d5:0e:6d:a2:91:
         f3:60:67:80:ff:0b:52:c7:b3:ef:38:bd:97:2a:b7:35:bb:5f:
         52:20:21:45:47:6d:93:a3:78:bd:69:67:1b:da:30:51:94:d3:
         41:09:2a:49:b9:15:c1:f0:44:2f:89:8f:a5:f3:5a:55:90:13:
         50:75:9d:a3:05:3a:7c:44:89:b0:77:07:7c:01:aa:c3:7e:44:
         de:6b:3c:95:42:2f:75:bd:fa:d0:83:97:32:84:52:60:94:df:
         18:fd:f7:84:d4:b6:ed:0c:42:76:66:8c:22:6e:e2:15:ea:4c:
         e9:5f:fd:d3:59:dd:ba:28:8f:c8:85:7e:49:37:ed:cd:6c:56:
         df:f4:89:8c:5e:37:6e:da:3b:09:88:93:9d:70:9c:11:04:3b:
         0d:72:f2:7b:9e:08:93:03:74:50:e5:51:f3:00:89:71:eb:9e:
         98:9b:97:4b:54:15:58:43:3c:34:b5:9a:0b:29:4b:c9:46:9c:
         b3:e7:59:f9:61:49:f7:98:16:a0:82:75:b3:b2:b7:46:59:7c:
         91:41:18:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:54:46 2025 by rpki-client