Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32332d3233203d3e20323639303135.roa
File:                     34352e3137382e32302e302f32332d3233203d3e20323639303135.roa (raw, json)
Hash identifier:          DuWxe9ZqUbvfWLZjmuDliDg+Iiv56HgiRTi6assKwqA=
Subject key identifier:   D5:4C:AB:29:FF:EC:AE:CF:A2:72:9A:C7:26:F9:6F:F1:27:95:EC:CB
Certificate issuer:       /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
Certificate serial:       06D5DCDD86271995F2F12B1F0D91C0D6C9E9473A
Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32332d3233203d3e20323639303135.roa
Signing time:             Thu 02 Oct 2025 15:23:31 +0000
ROA not before:           Thu 02 Oct 2025 15:18:31 +0000
ROA not after:            Thu 01 Oct 2026 15:23:31 +0000
asID:                     269015
IP address blocks:        45.178.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d5:dc:dd:86:27:19:95:f2:f1:2b:1f:0d:91:c0:d6:c9:e9:47:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
        Validity
            Not Before: Oct  2 15:18:31 2025 GMT
            Not After : Oct  1 15:23:31 2026 GMT
        Subject: CN=D54CAB29FFECAECFA2729AC726F96FF12795ECCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:70:90:35:a2:4b:ba:0a:4b:fc:18:95:0d:
                    09:19:fb:44:e3:75:87:e1:8f:bb:cc:08:78:d0:da:
                    c6:61:94:85:f8:f1:75:fc:e2:5d:62:ba:08:36:4d:
                    1d:8f:fe:50:34:13:04:70:05:3f:8a:75:c4:c2:d6:
                    e5:82:b1:b8:59:2c:01:19:66:e1:64:0d:2d:c7:80:
                    31:b2:2c:5f:69:e6:62:8b:f0:c0:22:31:1e:c3:23:
                    84:3a:9c:59:fc:88:f5:c0:6a:b5:70:41:4f:5a:cd:
                    7b:bd:76:ce:52:4c:4e:90:8f:1b:7b:73:68:4a:11:
                    1b:3c:e6:6d:a6:e1:e4:3d:22:ee:1f:98:ff:4b:e3:
                    96:b5:28:07:61:c3:5e:06:a1:af:b5:ae:a6:12:c7:
                    42:ab:4f:79:7e:de:1e:04:e3:65:e2:26:5e:d2:33:
                    47:4b:91:e3:84:92:34:e7:3a:b7:7f:b3:fb:2f:b0:
                    e3:f8:ed:7e:87:9e:d3:01:44:30:26:6b:87:8c:94:
                    55:7b:2c:51:5b:a5:bd:ba:c2:18:eb:25:b3:d1:ff:
                    23:46:a1:48:e5:d5:34:93:1c:87:06:a2:1a:34:b2:
                    8c:cd:b8:a1:45:f5:b7:ed:c4:60:73:55:23:21:42:
                    d2:35:bb:bc:8b:f6:3b:e8:ea:35:f5:98:67:5b:34:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4C:AB:29:FF:EC:AE:CF:A2:72:9A:C7:26:F9:6F:F1:27:95:EC:CB
            X509v3 Authority Key Identifier:
                keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32332d3233203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:29:6c:bd:69:ef:77:36:60:8f:f7:0d:a7:4c:c3:20:5e:5e:
         6d:a6:e6:cb:8e:80:a9:8f:86:ff:74:0f:36:0c:fe:48:4c:44:
         0d:e8:c3:47:96:36:cd:21:3e:af:24:4d:fc:ba:4e:ae:bf:09:
         15:8a:a5:6a:e6:37:3e:03:fe:95:c1:04:4a:75:8b:41:4e:df:
         b1:ed:92:d8:99:48:3f:48:32:e2:f6:59:9c:a0:c5:35:ed:77:
         69:8f:a9:5b:6c:b5:f0:64:61:7f:15:12:8d:a7:db:12:37:22:
         67:45:32:02:e7:bf:80:b3:4c:fc:e2:f3:5f:71:e5:a5:92:c9:
         5f:d0:18:6d:4a:6c:db:a0:78:5b:06:63:ce:5c:29:4b:73:f7:
         b7:e8:0b:74:61:1a:09:fa:9a:02:13:57:9d:75:3f:ed:32:f8:
         84:ff:05:6b:54:b6:b9:22:49:6c:24:9f:d1:af:10:1e:8a:39:
         a9:09:86:6d:91:13:63:58:f9:09:c1:01:fc:44:ba:36:45:05:
         8d:0f:5c:ef:26:54:67:40:f8:9b:c9:45:da:88:97:6d:8c:bf:
         0f:93:1e:60:8c:d3:0a:67:fc:ac:39:e1:ba:df:6d:f4:c1:60:
         dd:da:95:e2:05:06:72:1d:2d:c9:a3:f4:99:aa:7e:4d:de:69:
         09:53:59:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:14:11 2025 by rpki-client