Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/34352e3138382e3230302e302f32322d3234203d3e20323639353338.roa
File:                     34352e3138382e3230302e302f32322d3234203d3e20323639353338.roa (raw, json)
Hash identifier:          G6pumi/p/Iff4aeDUMzedEXQCPQoGuKuzKpvJc0kf04=
Subject key identifier:   19:90:55:B4:B4:8F:A7:33:48:EF:BB:02:3E:B4:A5:8A:23:35:95:27
Certificate issuer:       /CN=6E00496EB796F8397F171C543AFB886D5E9BB93E
Certificate serial:       44978B02E605038FE962D17D4F0AC907ED4E773B
Authority key identifier: 6E:00:49:6E:B7:96:F8:39:7F:17:1C:54:3A:FB:88:6D:5E:9B:B9:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/34352e3138382e3230302e302f32322d3234203d3e20323639353338.roa
Signing time:             Tue 30 Sep 2025 16:18:38 +0000
ROA not before:           Tue 30 Sep 2025 16:13:38 +0000
ROA not after:            Tue 29 Sep 2026 16:18:38 +0000
asID:                     269538
IP address blocks:        45.188.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.crl
                          rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 05:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:97:8b:02:e6:05:03:8f:e9:62:d1:7d:4f:0a:c9:07:ed:4e:77:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E00496EB796F8397F171C543AFB886D5E9BB93E
        Validity
            Not Before: Sep 30 16:13:38 2025 GMT
            Not After : Sep 29 16:18:38 2026 GMT
        Subject: CN=199055B4B48FA73348EFBB023EB4A58A23359527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:84:8a:23:64:23:83:37:b9:25:eb:47:94:
                    6b:f8:c0:52:96:8f:07:26:24:76:6b:47:c4:e2:c9:
                    6d:11:50:89:85:a2:f0:75:b1:c5:9d:c2:6b:73:06:
                    3e:66:88:30:ee:2b:0f:58:81:13:f7:3a:31:04:c5:
                    60:b2:60:02:c5:de:83:ee:a6:e9:7c:64:8a:31:f5:
                    67:70:ff:e2:ab:a3:b1:e4:66:1f:d3:fe:39:64:10:
                    84:0b:14:73:06:dd:27:b1:76:ef:7f:43:68:76:ef:
                    95:2f:e1:54:fc:aa:f7:b2:67:fc:5b:33:54:7f:1c:
                    88:79:cc:31:e7:29:3c:96:af:25:fc:b2:29:c2:8d:
                    b4:59:8e:97:a6:ac:79:d5:03:cb:88:f1:23:e5:a4:
                    88:87:29:07:94:dd:49:c3:bf:eb:64:c5:81:eb:0e:
                    65:2d:5c:fc:4b:23:bd:e0:f2:95:50:84:91:90:44:
                    7d:64:ce:dc:87:e9:d6:d2:99:71:2a:07:d5:ef:f6:
                    fc:63:ae:85:3d:fe:83:ff:4a:7e:11:d2:de:49:4c:
                    05:4b:19:5b:1e:cb:63:b2:54:d5:ce:bd:b6:8a:24:
                    1c:fe:30:ff:a5:7c:86:56:11:39:58:46:4f:01:df:
                    bc:b1:25:41:cb:08:01:ba:93:3c:c0:43:5e:4b:ad:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:90:55:B4:B4:8F:A7:33:48:EF:BB:02:3E:B4:A5:8A:23:35:95:27
            X509v3 Authority Key Identifier:
                keyid:6E:00:49:6E:B7:96:F8:39:7F:17:1C:54:3A:FB:88:6D:5E:9B:B9:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/6E00496EB796F8397F171C543AFB886D5E9BB93E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E00496EB796F8397F171C543AFB886D5E9BB93E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1mrVL7Yq9TLA7hHviYbD8UL3tfA7dnkTceDK4cbHFbA/0/34352e3138382e3230302e302f32322d3234203d3e20323639353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:f3:92:2a:e7:a7:8f:21:1f:0f:76:26:96:c9:d8:a7:0f:cf:
         68:c7:2f:db:92:67:e2:18:52:c8:a6:ff:3c:43:0d:2f:ce:5c:
         1a:ac:11:63:9c:f3:3b:a8:28:3a:c6:d9:05:70:54:e5:77:a0:
         a8:1f:c9:fd:dc:95:43:b5:d6:3d:5c:2f:5a:2f:49:10:74:55:
         b0:c9:e0:15:0c:d5:cc:ce:a7:ae:fd:8c:4a:78:fd:4c:f9:6b:
         17:8e:5f:43:be:02:67:d8:8b:23:51:06:83:6a:3b:d7:38:c8:
         9e:ca:3e:0a:4c:65:75:f6:77:cb:3f:f2:64:ac:8b:c4:d5:85:
         23:85:96:42:2a:53:60:c7:13:23:f9:15:1a:b1:53:ac:c5:6b:
         d6:4a:64:4b:c0:db:d7:be:5b:b4:22:8f:8c:3d:29:b7:a7:9f:
         07:47:e4:61:84:ae:f0:30:72:a3:61:33:8a:8c:2d:f2:f4:a1:
         19:90:f5:86:e1:3c:2c:ba:ba:d3:06:89:8b:0b:6a:6d:b4:11:
         70:15:9f:e1:c5:bb:28:00:db:ec:f8:97:bd:bc:bd:ea:d7:6e:
         2c:9e:2f:84:53:a3:d4:26:05:bd:7b:35:60:72:02:88:fc:29:
         1b:81:71:f4:21:bb:4e:7a:db:db:87:e1:2d:e7:19:59:24:53:
         df:9e:73:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:11:28 2025 by rpki-client