Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/34352e3138312e3138342e302f32322d3234203d3e20323639323030.roa
File:                     34352e3138312e3138342e302f32322d3234203d3e20323639323030.roa (raw, json)
Hash identifier:          MjgAbGBA3MLIQEbDOEqfgH94qhnYSyUXbioQpjVsW7I=
Subject key identifier:   83:AD:1C:69:51:99:6B:B5:C7:33:7A:85:0E:1B:1C:AD:80:9D:34:BB
Certificate issuer:       /CN=B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94
Certificate serial:       74CA222DE7B0F17852866BA72187BC739B08F0D9
Authority key identifier: B6:29:AD:9F:55:FA:B6:BB:BF:BD:FF:EB:C0:5F:F5:6F:BC:A9:CC:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/34352e3138312e3138342e302f32322d3234203d3e20323639323030.roa
Signing time:             Thu 02 Oct 2025 16:47:14 +0000
ROA not before:           Thu 02 Oct 2025 16:42:14 +0000
ROA not after:            Thu 01 Oct 2026 16:47:14 +0000
asID:                     269200
IP address blocks:        45.181.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl
                          rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 01:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ca:22:2d:e7:b0:f1:78:52:86:6b:a7:21:87:bc:73:9b:08:f0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94
        Validity
            Not Before: Oct  2 16:42:14 2025 GMT
            Not After : Oct  1 16:47:14 2026 GMT
        Subject: CN=83AD1C6951996BB5C7337A850E1B1CAD809D34BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:7c:4d:4e:87:8b:af:be:3e:58:ab:b1:af:
                    45:fc:86:76:a7:42:6f:1a:ce:d9:12:c2:e0:f3:4e:
                    e2:37:c6:c7:93:88:de:fa:f3:15:0d:ca:07:e3:5a:
                    82:68:2c:fd:67:bb:e7:bb:5c:1f:60:c6:76:2b:22:
                    40:60:5e:27:5c:d7:49:13:f6:de:64:90:93:68:f6:
                    ff:f8:62:ef:58:60:1d:61:70:04:33:37:7b:ba:f3:
                    2b:f5:dc:ee:c6:da:e9:29:db:32:05:69:5b:6e:69:
                    cd:a6:48:48:7b:e5:e8:83:64:bd:3e:4c:6e:a0:5d:
                    08:f5:54:f4:d7:4c:fa:76:26:bc:4a:7e:c6:07:97:
                    c7:67:e7:d6:40:83:33:2a:a3:30:15:09:b3:e0:94:
                    83:7a:2e:8f:5d:98:ef:34:58:85:32:25:8f:e3:3f:
                    19:f6:7d:1a:61:22:be:cb:90:b0:5d:ec:9b:c7:d2:
                    24:e1:fa:47:0c:29:3d:ed:a5:b2:53:5e:cd:4b:a1:
                    da:24:8a:ee:73:72:d3:d5:ac:69:9c:cb:61:89:bf:
                    c0:a8:82:e2:92:80:0e:19:2d:25:91:74:74:40:e5:
                    09:c1:0b:84:dc:8f:37:00:35:7f:6f:c2:79:fa:49:
                    13:77:4b:42:ed:92:63:78:2b:02:3f:c7:3a:55:70:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AD:1C:69:51:99:6B:B5:C7:33:7A:85:0E:1B:1C:AD:80:9D:34:BB
            X509v3 Authority Key Identifier:
                keyid:B6:29:AD:9F:55:FA:B6:BB:BF:BD:FF:EB:C0:5F:F5:6F:BC:A9:CC:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B629AD9F55FAB6BBBFBDFFEBC05FF56FBCA9CC94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkCaY28h886xQtW1F4cXP2hot5dhattHfveCuSRvSbBq/0/34352e3138312e3138342e302f32322d3234203d3e20323639323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:fc:c5:77:c9:0d:f7:60:f5:b8:e0:78:2b:e2:a9:d2:f5:f8:
         34:3f:02:13:29:c2:9a:1f:4b:07:df:32:0b:a4:c2:99:66:89:
         b7:83:85:7d:3a:14:38:47:cb:2e:f3:06:3f:27:9d:37:63:61:
         5e:02:07:59:24:a4:00:2a:58:ee:76:1d:6d:34:b6:b2:bc:ee:
         f7:0b:66:14:2e:c9:24:0b:54:e1:b5:3c:7c:68:6f:96:a4:c3:
         e6:1e:e8:3e:b5:9e:09:d6:5c:48:85:1d:f1:80:83:1c:17:65:
         98:d9:ac:e4:4e:50:d4:a1:54:62:cf:e5:58:1b:6f:79:0c:33:
         c3:c7:6f:02:3d:79:d9:cd:77:f0:32:54:ef:6e:06:05:8f:4d:
         fa:e8:25:94:0a:b2:37:a9:b1:00:16:29:ea:c6:7f:04:43:69:
         f5:15:97:be:2e:3c:f5:77:48:81:6e:a5:ab:11:61:3e:1b:b7:
         a9:dc:bf:f8:29:d6:b2:d3:67:b3:df:31:ac:a5:d5:e8:c0:49:
         ce:47:92:15:7c:43:5f:1d:c4:f0:bb:01:03:c5:49:dd:5e:30:
         39:33:3a:c1:fc:33:d4:0c:47:6f:bb:ed:69:60:7d:f3:89:2b:
         a6:38:6c:39:b8:0f:17:5a:05:86:c2:32:70:54:1a:83:3b:55:
         9e:32:bf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:12:50 2025 by rpki-client