Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/34352e3233312e39322e302f32322d3234203d3e20313938393439.roa
File:                     34352e3233312e39322e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          42XlXZjRnW496hr52PC3CEiCvD7+UAkJ+9Fapdrfp70=
Subject key identifier:   CC:4C:14:11:F0:CA:0D:B9:5A:27:DE:DC:81:0A:90:79:D5:0C:0F:2B
Certificate issuer:       /CN=4273B563259728F1EFD6BB3011E0F26828FB113D
Certificate serial:       0278026AD2E10EAB2962C656A4E32F2C71F4F367
Authority key identifier: 42:73:B5:63:25:97:28:F1:EF:D6:BB:30:11:E0:F2:68:28:FB:11:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/34352e3233312e39322e302f32322d3234203d3e20313938393439.roa
Signing time:             Mon 08 Sep 2025 21:24:40 +0000
ROA not before:           Mon 08 Sep 2025 21:19:40 +0000
ROA not after:            Mon 07 Sep 2026 21:24:40 +0000
asID:                     198949
IP address blocks:        45.231.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl
                          rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:78:02:6a:d2:e1:0e:ab:29:62:c6:56:a4:e3:2f:2c:71:f4:f3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4273B563259728F1EFD6BB3011E0F26828FB113D
        Validity
            Not Before: Sep  8 21:19:40 2025 GMT
            Not After : Sep  7 21:24:40 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:e3:c7:bd:ed:82:b0:cc:3b:46:bc:d3:2f:
                    04:65:07:92:e3:7f:99:26:80:41:f2:0c:f3:df:4d:
                    cd:25:3f:f6:5d:47:c2:71:11:ae:20:91:ee:c4:03:
                    db:a7:9b:d8:8e:b8:ff:ba:a3:a3:00:4a:05:67:5b:
                    3a:9c:f4:15:21:02:31:70:bc:37:24:54:ab:46:05:
                    e5:98:a6:22:ff:de:27:82:3f:f8:6f:63:7e:4d:93:
                    70:be:33:a1:b0:af:87:c7:72:b5:be:3a:f1:65:40:
                    e8:29:34:a8:8e:14:5d:b4:a9:30:1f:e0:52:11:bd:
                    61:01:71:5b:ac:22:0f:5d:c9:7a:7d:89:1a:e3:00:
                    bf:d3:6a:8d:47:e0:76:25:6f:13:2c:16:49:ca:db:
                    4d:2e:7a:30:55:17:75:16:1a:77:b2:35:a0:1f:63:
                    de:5a:d8:eb:15:7a:a4:26:5b:83:6c:9d:ce:35:4f:
                    01:ed:19:cb:61:4a:87:01:22:45:77:6a:75:75:07:
                    b0:d6:be:1c:f5:b3:3d:5e:75:e6:4e:3a:82:9b:1b:
                    b3:43:4d:77:2c:91:88:12:3f:38:45:61:a2:00:fe:
                    59:4a:65:18:4f:d9:a5:82:ad:b4:50:9b:03:e3:4a:
                    56:1d:ef:82:e5:56:ee:6d:45:72:b4:4b:ec:08:8e:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4C:14:11:F0:CA:0D:B9:5A:27:DE:DC:81:0A:90:79:D5:0C:0F:2B
            X509v3 Authority Key Identifier:
                keyid:42:73:B5:63:25:97:28:F1:EF:D6:BB:30:11:E0:F2:68:28:FB:11:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/34352e3233312e39322e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:ea:9b:55:39:3f:a6:30:0e:43:2d:05:ec:5b:b4:3a:13:
         ca:5c:b6:f5:1b:3f:2e:3f:58:18:cf:b4:8e:c4:78:21:36:e8:
         ad:c6:e1:c2:f7:60:82:e7:b8:7c:e4:6b:b1:ff:aa:fe:58:45:
         e3:f3:20:78:43:02:09:1b:dd:2c:1f:24:b0:0e:d5:7d:2a:36:
         76:f0:78:b8:67:b8:2e:05:b0:23:ca:b3:5d:d8:77:2c:2c:09:
         be:7f:57:22:f9:14:bf:51:6a:3d:ff:c5:ed:2a:9b:d7:63:5f:
         8f:7c:96:4a:07:f4:59:b4:46:bc:a0:45:73:5c:d0:7a:a2:08:
         01:2f:4d:55:f0:ad:9a:51:32:8a:e7:42:ce:76:bb:85:f3:b5:
         35:e4:35:2c:a3:94:06:af:f1:a2:ea:d9:f7:76:36:f5:41:ec:
         36:69:e7:53:ad:82:5a:a5:fb:71:c8:3b:86:47:0a:e5:e0:2d:
         c6:2c:ae:4c:f8:a2:49:9c:ed:9d:ad:2c:fe:38:44:17:90:bf:
         2d:b4:7b:cc:14:08:e9:06:7d:d7:8c:5c:eb:dc:67:fb:98:13:
         c3:6b:d8:ad:ff:5a:9f:ff:81:e0:2d:c3:07:7a:13:b0:39:5f:
         8b:9c:5e:f6:3f:c5:cf:b0:35:85:09:d9:ef:e5:55:78:4a:b4:
         91:be:0a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:56:09 2025 by rpki-client