Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231362e302f32322d3234203d3e20323639313934.roa
File:                     34352e3138302e3231362e302f32322d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          invebdU4Kn2HGNA6CXsBiVxGRMW3xSHDfc+LQXRvGxw=
Subject key identifier:   DF:16:FE:6B:B0:D6:F2:FF:AC:E4:BE:D1:8F:7D:D9:EF:4F:25:78:5F
Certificate issuer:       /CN=48022DC200AC7F7DEFAB830880AA3789A2E0C153
Certificate serial:       1EEB28625AC300CEDC2588B921D78132D3F22933
Authority key identifier: 48:02:2D:C2:00:AC:7F:7D:EF:AB:83:08:80:AA:37:89:A2:E0:C1:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48022DC200AC7F7DEFAB830880AA3789A2E0C153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231362e302f32322d3234203d3e20323639313934.roa
Signing time:             Tue 28 Oct 2025 11:59:52 +0000
ROA not before:           Tue 28 Oct 2025 11:54:52 +0000
ROA not after:            Tue 27 Oct 2026 11:59:52 +0000
asID:                     269194
IP address blocks:        45.180.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/48022DC200AC7F7DEFAB830880AA3789A2E0C153.crl
                          rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/48022DC200AC7F7DEFAB830880AA3789A2E0C153.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48022DC200AC7F7DEFAB830880AA3789A2E0C153.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:eb:28:62:5a:c3:00:ce:dc:25:88:b9:21:d7:81:32:d3:f2:29:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48022DC200AC7F7DEFAB830880AA3789A2E0C153
        Validity
            Not Before: Oct 28 11:54:52 2025 GMT
            Not After : Oct 27 11:59:52 2026 GMT
        Subject: CN=DF16FE6BB0D6F2FFACE4BED18F7DD9EF4F25785F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5b:bb:b9:8c:58:e3:28:af:13:77:3e:ed:c5:
                    cd:98:55:b2:12:13:a6:28:71:e7:f7:90:53:3c:33:
                    bf:4f:b7:1e:9a:3a:79:c8:5b:1f:be:54:e9:50:01:
                    a3:07:f9:33:33:d5:31:dc:e9:65:59:5e:41:6c:31:
                    c6:c2:45:ca:6f:d0:76:36:b1:53:1c:e9:84:f2:f5:
                    96:34:a1:9c:33:cb:d3:ee:d0:d4:f4:d6:c7:11:0f:
                    25:48:e5:b8:c7:66:90:a9:b6:a3:33:e8:82:08:5e:
                    e5:9d:27:a8:35:96:43:7d:23:17:2d:56:aa:77:f1:
                    ea:94:e9:64:57:35:2d:7c:89:8c:61:2d:1b:d9:d0:
                    1d:21:f2:71:be:a1:28:4d:18:17:b9:d7:59:38:ac:
                    3a:37:04:d8:b4:70:a9:49:16:ad:36:6f:3b:b3:2a:
                    3e:bd:30:6c:ac:de:a5:e8:f7:0a:3c:77:75:51:90:
                    8a:0f:89:83:24:f7:ff:c9:8b:d5:b5:d1:d2:ab:c4:
                    dd:83:60:c9:0e:93:46:e5:b7:96:b6:8b:11:8d:f5:
                    43:c0:e9:96:3f:e8:88:54:e7:b7:6a:6b:4e:f7:96:
                    f4:18:e7:5e:3e:4c:27:a1:4f:e6:7b:d7:9d:48:ad:
                    36:df:ca:76:e2:19:22:1a:dd:bb:14:e6:ea:fd:ff:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:16:FE:6B:B0:D6:F2:FF:AC:E4:BE:D1:8F:7D:D9:EF:4F:25:78:5F
            X509v3 Authority Key Identifier:
                keyid:48:02:2D:C2:00:AC:7F:7D:EF:AB:83:08:80:AA:37:89:A2:E0:C1:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/48022DC200AC7F7DEFAB830880AA3789A2E0C153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48022DC200AC7F7DEFAB830880AA3789A2E0C153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231362e302f32322d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:dd:6b:bc:e5:a6:a7:12:07:49:25:22:2c:9e:b1:53:6c:7b:
         c0:7f:2e:89:eb:1a:75:8b:83:53:6f:c6:6c:b8:e9:70:d5:b2:
         b0:b4:41:da:93:b5:65:24:a1:ca:95:92:34:20:4e:85:85:e0:
         b8:9b:43:ac:43:53:c3:50:ab:b9:36:d8:6f:90:99:d9:08:f1:
         7d:ec:65:80:be:fc:74:e6:ae:5b:c4:31:5f:63:f0:e8:07:b1:
         57:44:cd:80:03:b2:08:00:cd:c6:4b:2f:11:00:c2:d0:0f:80:
         93:5e:07:ad:92:94:96:72:57:07:11:1f:b6:ae:6d:3e:07:bc:
         12:0c:9c:11:81:32:f3:af:65:f2:31:0d:06:dd:92:36:e5:6a:
         3d:86:54:0c:8a:58:81:55:e8:0b:33:9f:d2:87:2f:b2:92:07:
         c2:fe:5a:96:f9:db:0f:83:98:02:9e:f6:6d:13:45:67:b8:ab:
         41:b4:f1:15:35:07:13:86:5a:88:ac:8b:a9:ed:92:85:fc:80:
         a2:ed:ff:96:40:7f:4f:79:1e:4a:33:2c:49:b3:80:02:99:98:
         11:ed:87:57:cd:d5:da:c0:a4:68:dd:f3:4b:95:e9:9f:b1:7c:
         bc:e2:b6:ee:32:9f:d3:a1:f9:1a:c3:ab:2d:0e:c3:cb:18:43:
         67:07:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:00:56 2025 by rpki-client