Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/34352e372e3134382e302f32322d3234203d3e20323636353836.roa
File:                     34352e372e3134382e302f32322d3234203d3e20323636353836.roa (raw, json)
Hash identifier:          r1Zc4tDCdENPcsVmTynxWlSrmzr3GqoqlxT4ZOC3pWc=
Subject key identifier:   A4:4C:C9:41:16:B4:49:85:6E:4F:CB:A0:33:82:80:B5:9C:1D:10:97
Certificate issuer:       /CN=6DE821507603193E76C33E7E992F43F744C39901
Certificate serial:       2A5C39D99C64BC74292709F9667EE6D9C33F18B3
Authority key identifier: 6D:E8:21:50:76:03:19:3E:76:C3:3E:7E:99:2F:43:F7:44:C3:99:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DE821507603193E76C33E7E992F43F744C39901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/34352e372e3134382e302f32322d3234203d3e20323636353836.roa
Signing time:             Mon 20 Oct 2025 11:53:27 +0000
ROA not before:           Mon 20 Oct 2025 11:48:27 +0000
ROA not after:            Mon 19 Oct 2026 11:53:27 +0000
asID:                     266586
IP address blocks:        45.7.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/6DE821507603193E76C33E7E992F43F744C39901.crl
                          rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/6DE821507603193E76C33E7E992F43F744C39901.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DE821507603193E76C33E7E992F43F744C39901.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 05:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5c:39:d9:9c:64:bc:74:29:27:09:f9:66:7e:e6:d9:c3:3f:18:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DE821507603193E76C33E7E992F43F744C39901
        Validity
            Not Before: Oct 20 11:48:27 2025 GMT
            Not After : Oct 19 11:53:27 2026 GMT
        Subject: CN=A44CC94116B449856E4FCBA0338280B59C1D1097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:94:3e:62:00:ba:30:ed:f0:1f:2c:43:f9:
                    75:b0:69:92:bf:55:e2:88:77:ba:9e:22:32:d2:1f:
                    64:52:db:ce:43:fc:3d:3c:07:8f:b8:7e:44:0b:8c:
                    6b:14:cc:66:73:61:4b:26:3e:ac:a3:c7:7d:52:20:
                    d0:4b:46:f9:58:fe:f1:75:2f:83:68:54:6f:59:21:
                    cf:87:f2:b8:bf:cd:ef:7f:cd:72:8e:55:bc:3f:1d:
                    81:7a:90:5c:2e:14:a3:3d:df:8b:6e:de:22:56:37:
                    c9:3a:f2:fe:ea:28:95:c8:aa:92:de:bd:7e:bf:b8:
                    7b:30:90:d4:78:97:f2:cb:49:f9:77:fd:56:9a:43:
                    ac:f3:5f:da:36:d1:2a:a8:0d:44:6a:69:4a:13:19:
                    50:3e:ff:93:06:ae:8f:a6:14:15:90:c1:be:91:79:
                    a6:14:a7:ab:ab:5d:1e:3a:63:34:dd:e8:3c:dc:98:
                    a6:16:ed:5f:48:a5:67:cb:39:ff:a5:80:00:fc:99:
                    1f:74:49:c5:b0:d8:bc:42:f5:f7:e2:02:87:9d:a4:
                    ec:e9:76:38:bd:67:00:38:50:63:da:03:41:53:dc:
                    38:34:81:31:22:ae:f4:c8:50:4c:db:f0:e8:af:ef:
                    d3:67:88:f1:35:14:90:56:af:63:fd:ca:b2:02:33:
                    d8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4C:C9:41:16:B4:49:85:6E:4F:CB:A0:33:82:80:B5:9C:1D:10:97
            X509v3 Authority Key Identifier:
                keyid:6D:E8:21:50:76:03:19:3E:76:C3:3E:7E:99:2F:43:F7:44:C3:99:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/6DE821507603193E76C33E7E992F43F744C39901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DE821507603193E76C33E7E992F43F744C39901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/34352e372e3134382e302f32322d3234203d3e20323636353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:f2:10:5d:86:73:aa:0f:ae:c1:9a:7f:a0:f8:0a:d2:19:77:
         eb:24:ff:84:6e:7b:0b:8b:03:35:08:9a:8c:a0:e1:1a:d1:a4:
         bb:39:8b:51:7d:2c:57:20:fa:06:c6:57:8d:5a:d9:76:e8:33:
         b1:2e:22:aa:11:4f:36:f2:7f:56:04:09:91:9a:26:2e:ac:70:
         71:2e:ce:d8:ad:22:b1:d3:05:59:9a:46:6d:ec:af:6e:e2:f8:
         8c:e0:82:87:1c:cf:72:23:70:a8:2c:be:c4:23:44:24:37:10:
         c8:28:3c:a1:9d:73:dd:e8:85:12:40:38:be:29:70:d7:fa:c2:
         7e:65:e6:6d:60:36:5f:3d:7f:ee:7c:9b:c4:56:d0:fd:ec:33:
         36:1e:7f:38:a3:9f:41:29:9a:62:73:33:42:14:65:ee:08:43:
         ae:96:52:7d:65:0a:d7:eb:74:ad:f6:ba:aa:96:a2:7a:4a:f0:
         7f:30:8c:ec:7f:43:2c:9b:57:bd:44:2e:30:cf:a4:67:14:6a:
         6a:35:89:1a:1e:7c:22:96:b6:33:8c:35:52:14:c6:2f:08:cb:
         f5:b9:79:3c:06:f7:53:af:ce:16:64:8c:f1:b7:31:5f:85:03:
         11:cf:32:1a:2a:e5:fd:58:3e:61:fb:81:3f:41:52:84:e1:be:
         d4:8f:c8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:18:02 2025 by rpki-client