Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS268424.roa
File:                     AS268424.roa (raw, json)
Hash identifier:          6HqnTf0mMoz8Lr/GPrqSrmU+VfSj4MyEwYhWoLgByfY=
Subject key identifier:   0C:38:FE:E6:65:84:C9:1F:BE:D4:F0:42:5A:E0:51:CE:22:80:EB:D7
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       6697BEF3BECE49903B71C134D540EB680742F87C
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS268424.roa
Signing time:             Fri 12 Sep 2025 12:34:18 +0000
ROA not before:           Fri 12 Sep 2025 12:29:18 +0000
ROA not after:            Fri 11 Sep 2026 12:34:18 +0000
asID:                     268424
IP address blocks:        45.161.4.0/22 maxlen: 24
                          2804:5100::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 06:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:97:be:f3:be:ce:49:90:3b:71:c1:34:d5:40:eb:68:07:42:f8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Sep 12 12:29:18 2025 GMT
            Not After : Sep 11 12:34:18 2026 GMT
        Subject: CN=0C38FEE66584C91FBED4F0425AE051CE2280EBD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:a0:42:eb:77:d8:5f:68:99:e7:dc:6f:55:
                    ae:d2:5a:aa:a5:5f:ae:2a:6e:c9:26:a1:13:d0:57:
                    4a:2e:7d:99:d9:4a:af:51:64:8c:e1:5e:16:de:c3:
                    08:de:4b:7a:1a:c0:cb:37:b6:0d:4f:18:b1:f7:6b:
                    da:9f:38:5b:a9:67:14:c4:42:be:14:93:32:aa:91:
                    3a:b9:52:12:9d:1d:98:0e:9f:93:65:ff:ab:92:c1:
                    73:60:a8:21:42:71:09:5b:e6:0c:81:f4:28:3e:0b:
                    b3:3e:89:82:dc:bb:2f:c1:ee:89:02:a3:32:1e:86:
                    81:c4:5b:cd:70:50:ad:30:20:74:7b:de:c7:57:9b:
                    50:b6:2e:f3:a9:44:12:cf:d1:0f:d1:93:e6:17:a9:
                    fe:ed:b6:0d:d2:0b:24:c1:08:41:49:d5:8c:1e:05:
                    0f:f5:02:82:9e:7b:9d:81:ba:85:73:46:77:1f:b9:
                    5a:5a:18:15:b5:35:61:b2:ac:4d:94:92:51:80:5d:
                    fc:e3:fa:29:aa:70:79:a4:ba:4e:e1:ea:02:87:cb:
                    e7:23:c4:f5:62:66:ca:0f:87:9b:5d:f5:3c:1e:3d:
                    be:bd:a8:53:fa:ea:97:0a:1a:56:29:19:d1:68:14:
                    f2:1b:59:72:bd:98:d5:8d:4d:78:72:c2:ca:d5:ef:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:38:FE:E6:65:84:C9:1F:BE:D4:F0:42:5A:E0:51:CE:22:80:EB:D7
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS268424.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.4.0/22
                IPv6:
                  2804:5100::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:85:1b:0b:4c:bd:1d:4d:f3:87:11:d7:6f:d1:09:db:93:ec:
         58:2c:44:e7:b5:c2:9c:c7:64:e5:ed:55:bb:f0:18:db:db:6d:
         94:2c:ee:39:86:72:2a:df:59:42:cc:5d:9e:d6:c3:7f:12:09:
         07:c5:02:d9:dc:72:31:06:a8:d4:9d:f8:30:4d:00:2a:cc:44:
         a7:b2:fe:50:3b:3c:2a:16:ec:55:d8:e0:ca:d9:be:21:bc:c5:
         aa:72:9b:78:1e:6d:73:f7:5d:3e:64:9d:6f:b3:67:c2:45:5d:
         93:c0:56:98:01:fd:9c:20:e4:bf:34:12:f8:06:15:db:46:76:
         65:05:b9:9b:fa:2a:14:36:d1:fb:ad:a7:cc:69:df:96:f3:f3:
         5e:86:0b:af:22:e2:ab:1a:32:e0:3b:e0:32:af:94:e2:0c:33:
         25:5b:e5:71:eb:78:1b:bd:a4:e6:80:69:ac:27:3f:c0:f0:dd:
         6e:9a:f7:09:91:d2:20:10:9b:46:e4:33:f2:94:ec:f7:ea:b3:
         11:70:bf:90:a0:aa:28:0e:a9:ef:e9:cf:93:93:2b:78:b9:d4:
         94:d2:e2:4c:52:0a:63:71:ff:72:18:aa:b5:46:84:e1:86:e2:
         93:85:38:8b:49:1c:fa:a1:5d:1f:91:6b:c9:f0:56:ac:68:fd:
         8f:de:2a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 23:31:31 2025 by rpki-client