Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32342d3234203d3e20323639313735.roa
File:                     34352e3138312e39322e302f32342d3234203d3e20323639313735.roa (raw, json)
Hash identifier:          ANsqWHqth14ZWKODZ5h13kA4N5vTPS+XeK2sHhiZcN4=
Subject key identifier:   96:48:44:EE:25:68:2E:39:B7:94:A0:18:9A:F8:9F:4F:67:A7:A9:36
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       1BF9074E042E01284DB52142752139D42179460C
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32342d3234203d3e20323639313735.roa
Signing time:             Tue 12 Aug 2025 19:55:29 +0000
ROA not before:           Tue 12 Aug 2025 19:50:29 +0000
ROA not after:            Tue 11 Aug 2026 19:55:29 +0000
asID:                     269175
IP address blocks:        45.181.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 01:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f9:07:4e:04:2e:01:28:4d:b5:21:42:75:21:39:d4:21:79:46:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Aug 12 19:50:29 2025 GMT
            Not After : Aug 11 19:55:29 2026 GMT
        Subject: CN=964844EE25682E39B794A0189AF89F4F67A7A936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b6:20:bb:9c:6f:6d:c0:9b:1e:4f:f8:b9:be:
                    21:3c:c2:0a:ee:71:da:d0:3c:75:7c:71:73:b8:0f:
                    a5:34:24:14:a6:38:58:08:90:83:e9:3b:b4:d2:28:
                    7a:ed:9b:14:7b:1e:22:b7:df:1b:d4:dc:c7:4c:86:
                    49:12:de:5a:ab:f9:d4:13:e8:81:51:80:2b:5c:39:
                    c5:8c:a2:8e:b7:b8:5d:2c:8f:4e:b1:06:eb:ca:20:
                    d9:7c:a6:86:4f:78:98:37:3a:51:0e:54:4e:46:20:
                    84:42:00:11:4d:ec:8b:72:67:ee:76:26:2f:51:cd:
                    b6:21:5e:26:06:ce:5a:64:94:e3:57:55:dd:83:27:
                    c9:67:a2:cb:4a:17:dd:bc:b2:9b:97:c5:b6:10:26:
                    ac:fc:28:70:4e:b1:05:77:5e:f3:37:4c:65:84:0e:
                    64:09:41:2f:42:21:a2:38:ff:e4:9a:09:8d:dd:88:
                    d1:b5:f4:c4:87:96:08:8d:f4:46:ae:51:70:6f:fe:
                    8f:a2:32:e6:92:aa:f2:99:a1:28:35:b2:4c:6f:3e:
                    49:f2:a8:0a:e1:04:0e:50:09:44:b3:e5:22:ba:9a:
                    de:84:41:f9:6a:d1:0e:29:f8:fb:9e:92:3b:71:c2:
                    1b:88:b8:89:fa:e2:5c:5e:6a:57:a5:dc:88:bd:14:
                    25:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:48:44:EE:25:68:2E:39:B7:94:A0:18:9A:F8:9F:4F:67:A7:A9:36
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32342d3234203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:23:45:a3:99:60:8f:87:b6:f3:13:31:57:24:5a:52:e4:ae:
         ac:a1:28:28:7b:57:81:2a:5c:70:02:ec:b8:8b:00:ef:38:01:
         f8:6d:88:01:a7:fc:8e:c2:d3:01:5c:b9:cb:d7:fc:4c:e1:16:
         dd:ec:08:4f:8c:ad:1a:86:df:a8:c8:d6:9d:85:b1:e6:e1:e4:
         b1:01:4d:25:6f:59:6d:fa:07:49:ea:ce:16:46:fe:5b:c1:fb:
         0a:28:7b:3c:fc:14:42:ed:69:c8:83:82:7e:59:3e:ba:a3:64:
         9c:42:c1:78:9c:9b:63:7e:89:2e:11:c4:fd:78:9b:1b:29:36:
         47:9e:e4:9e:c9:75:ed:52:a5:15:1c:8c:6d:b3:23:86:27:e6:
         ff:9b:b4:cb:11:e0:20:3f:04:46:e1:25:c2:8b:59:06:bc:8a:
         d3:27:cf:84:05:32:3f:e4:0f:81:eb:0b:7a:77:ba:82:37:cb:
         31:04:90:1c:6a:71:9a:08:ce:43:18:0b:b7:29:bc:e8:f9:8e:
         06:cd:58:d6:4c:a3:25:6d:b0:76:e2:50:87:5a:9c:48:37:77:
         cf:8b:b3:be:4d:c5:6a:16:bf:41:1f:18:07:bb:06:5a:7b:5f:
         68:0d:01:c1:d2:c8:bd:81:b4:95:84:45:5a:79:32:92:de:3e:
         3b:ab:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:46:38 2025 by rpki-client