Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e36382e302f32322d3332203d3e20323639313039.roa
File:                     34352e3137392e36382e302f32322d3332203d3e20323639313039.roa (raw, json)
Hash identifier:          IyZcDTXDvP2kF3jftamqMhb06YANOArcauWrWN5LViw=
Subject key identifier:   AD:AC:92:91:43:A3:F9:16:AB:71:3C:A2:D2:DF:0B:85:A6:33:6B:ED
Certificate issuer:       /CN=070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038
Certificate serial:       0957B4CC00D62DB67ED1AD23D8CC42CE967F7222
Authority key identifier: 07:08:45:DA:CC:1D:F7:8A:B0:DB:0A:E9:1C:C8:CF:8F:64:FF:A0:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e36382e302f32322d3332203d3e20323639313039.roa
Signing time:             Tue 16 Sep 2025 00:08:07 +0000
ROA not before:           Tue 16 Sep 2025 00:03:07 +0000
ROA not after:            Tue 15 Sep 2026 00:08:07 +0000
asID:                     269109
IP address blocks:        45.179.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.crl
                          rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 00:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:57:b4:cc:00:d6:2d:b6:7e:d1:ad:23:d8:cc:42:ce:96:7f:72:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038
        Validity
            Not Before: Sep 16 00:03:07 2025 GMT
            Not After : Sep 15 00:08:07 2026 GMT
        Subject: CN=ADAC929143A3F916AB713CA2D2DF0B85A6336BED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:54:43:ee:a4:c9:c6:a8:b5:4b:22:19:81:13:
                    33:6e:61:e3:43:df:3e:e9:de:35:9c:02:9f:75:02:
                    d7:0d:76:d6:0f:e6:a6:69:f8:61:de:de:65:dd:29:
                    da:ba:0f:a7:11:e1:fe:6f:b3:7a:1a:9f:98:a3:11:
                    ed:bb:c2:45:f8:33:25:87:34:fa:89:df:6f:19:0c:
                    60:f7:c9:bb:09:23:46:eb:73:4d:bf:cd:d8:e4:61:
                    98:9d:19:da:60:5c:0b:42:48:73:50:1d:25:3c:22:
                    e6:ce:2f:d8:c3:be:e6:fa:ae:10:36:07:fa:7a:bb:
                    6f:33:f5:2c:2f:89:34:56:67:18:ef:77:d0:27:6b:
                    9b:ca:ef:0d:eb:77:77:dc:90:06:5a:1e:e2:b4:d5:
                    96:c8:6b:24:2c:f5:cb:fa:06:6f:46:f9:d9:37:96:
                    52:79:dc:ad:14:92:bb:7a:33:76:c2:66:fa:fa:3a:
                    b2:63:f2:7f:7f:f5:28:61:94:36:a4:7f:c4:9c:45:
                    7b:63:7a:6f:09:53:4e:16:95:bf:d3:08:27:f5:88:
                    30:b3:12:65:bf:d8:a1:d7:b3:7a:4c:99:18:17:fa:
                    71:b9:9d:6c:42:8d:42:7d:64:dd:aa:0f:d5:bc:d1:
                    eb:8b:22:d4:46:3c:42:0e:60:7e:b0:d3:53:77:9f:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AC:92:91:43:A3:F9:16:AB:71:3C:A2:D2:DF:0B:85:A6:33:6B:ED
            X509v3 Authority Key Identifier:
                keyid:07:08:45:DA:CC:1D:F7:8A:B0:DB:0A:E9:1C:C8:CF:8F:64:FF:A0:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/070845DACC1DF78AB0DB0AE91CC8CF8F64FFA038.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e36382e302f32322d3332203d3e20323639313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:a5:29:bb:95:af:c4:e5:98:ae:7f:5f:ea:98:3c:c7:80:ab:
         f1:45:e4:5c:95:66:3a:38:8b:7d:8f:2c:82:68:d5:a5:d1:d7:
         97:c4:26:77:11:75:e3:46:97:c9:fb:f3:9d:58:2c:78:5e:9d:
         89:22:54:19:be:9b:14:8e:2f:fb:e4:43:7e:fc:44:b5:a8:6c:
         6a:36:48:e8:50:70:5e:a7:56:5b:74:f4:f9:fc:07:96:d3:d4:
         d3:17:ac:19:98:9c:9e:4b:27:22:2c:6f:4d:8f:2e:a5:ad:55:
         aa:03:e0:26:e1:a5:79:04:c2:4a:ff:38:49:59:66:8d:08:8e:
         e2:0e:29:d3:ff:9f:25:f2:39:c3:b3:c2:66:0d:95:88:0a:8d:
         45:f2:7e:1b:2b:f8:41:01:23:fc:0f:c3:58:08:b7:96:a4:c8:
         f3:31:f6:89:52:13:9f:95:b2:66:b0:ee:a0:fa:b5:a2:aa:87:
         be:13:8c:15:f7:d7:c2:c5:65:3e:78:7b:35:99:63:7f:32:93:
         4e:e7:9f:34:10:2a:5d:80:5a:17:07:f8:f2:78:9d:fc:f9:9e:
         81:9c:ad:88:37:43:e8:db:f9:79:a5:dd:f1:1f:7c:0a:ee:4c:
         b1:dd:5f:f2:44:4b:8f:9a:df:37:0a:b3:29:49:78:a8:43:f8:
         ee:bc:27:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:20:43 2025 by rpki-client