Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32322d3234203d3e20323639343334.roa
File:                     34352e3138362e3138382e302f32322d3234203d3e20323639343334.roa (raw, json)
Hash identifier:          XPoOskamJp5BBseszmqDtr+9uwfrs/poRXyEwMzNll4=
Subject key identifier:   B0:3A:CA:32:2D:2C:3C:48:B9:CB:39:61:E4:02:3C:CB:0C:FF:69:47
Certificate issuer:       /CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Certificate serial:       14D61644B55B1211706291EE5E858B759C8612D5
Authority key identifier: F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32322d3234203d3e20323639343334.roa
Signing time:             Thu 14 Aug 2025 19:03:51 +0000
ROA not before:           Thu 14 Aug 2025 18:58:51 +0000
ROA not after:            Thu 13 Aug 2026 19:03:51 +0000
asID:                     269434
IP address blocks:        45.186.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl
                          rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 21:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d6:16:44:b5:5b:12:11:70:62:91:ee:5e:85:8b:75:9c:86:12:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
        Validity
            Not Before: Aug 14 18:58:51 2025 GMT
            Not After : Aug 13 19:03:51 2026 GMT
        Subject: CN=B03ACA322D2C3C48B9CB3961E4023CCB0CFF6947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:fb:c0:b3:a4:2f:38:7f:75:94:c9:3d:67:
                    44:6c:91:76:a3:a6:01:ff:b0:73:cb:17:18:73:a6:
                    a0:50:c7:04:d5:20:84:6c:e8:27:26:83:3b:a0:16:
                    68:29:43:aa:a4:98:a7:85:77:16:21:32:6f:ec:2b:
                    70:35:8d:1d:ab:19:88:b4:ac:64:63:98:10:8f:07:
                    f5:5f:1e:10:f8:11:37:d9:8a:0b:03:5b:84:0e:09:
                    01:bd:45:9f:bf:86:62:34:b4:a4:f7:a1:00:06:c5:
                    7a:c0:1d:7a:fa:3f:64:a7:c5:bd:19:29:f8:b0:d3:
                    eb:dc:69:0d:5e:70:cf:e0:92:64:18:84:29:34:c8:
                    92:c5:05:ae:a9:13:c7:86:12:4d:31:0a:b8:aa:b5:
                    80:0a:5b:49:9f:01:55:3a:23:84:a0:77:a0:00:e0:
                    67:7b:e7:82:c6:96:79:e7:ed:43:ec:f2:b4:f3:48:
                    5e:af:9c:f8:ab:1c:05:1e:3c:28:fc:d3:8e:64:25:
                    86:43:ff:d5:b5:d0:eb:69:ee:e1:49:20:36:e4:2d:
                    4e:61:2e:ee:fe:5e:da:97:c9:d0:cf:b7:5f:d6:07:
                    e1:93:db:9e:9b:04:45:0a:74:33:0d:4b:76:c0:67:
                    5e:ab:4a:08:d7:6a:3d:93:cb:49:1b:40:19:53:0e:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3A:CA:32:2D:2C:3C:48:B9:CB:39:61:E4:02:3C:CB:0C:FF:69:47
            X509v3 Authority Key Identifier:
                keyid:F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32322d3234203d3e20323639343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:62:1c:3f:1b:4c:7b:3f:62:8e:da:12:d1:bb:17:ed:38:10:
         86:68:b5:09:17:ab:de:01:3a:08:b5:68:cc:47:84:f3:01:ed:
         1f:80:fb:50:b0:a8:cc:77:9b:70:4f:ab:c1:e4:05:63:22:ed:
         54:82:cc:60:bd:2a:54:67:f9:f7:39:8b:ed:80:a3:56:db:ff:
         e2:14:09:27:a6:f0:9d:ee:c0:58:e5:5c:1f:41:32:13:33:2d:
         b6:d4:16:73:fd:ef:1e:a1:d8:02:98:63:96:19:b6:9b:7e:91:
         32:22:5a:ac:a3:d6:f5:f2:4b:44:7c:0e:f1:de:f8:6d:94:da:
         44:1d:eb:13:35:7d:04:15:da:25:13:c4:67:98:b0:79:fa:34:
         4c:8a:a3:44:0a:6a:31:e7:af:3e:7d:77:9e:c0:b1:da:79:e3:
         76:1c:af:0d:18:a3:f7:e4:79:1d:34:98:f5:ad:e8:07:f2:37:
         df:76:67:03:62:45:ae:86:51:04:ce:50:e8:c8:d6:d4:72:b5:
         2e:b9:79:3c:44:4c:c4:c9:4f:b2:2d:e5:17:00:ce:ea:a6:d3:
         78:37:c2:de:96:61:80:dd:70:bf:1b:c2:ee:43:e7:7d:99:95:
         48:7c:32:5c:2f:ae:7f:c7:b8:86:05:14:98:2b:21:30:54:58:
         fd:d5:77:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:02:04 2025 by rpki-client