Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37362e302f32342d3234203d3e20323638383031.roa
File:                     34352e3137332e37362e302f32342d3234203d3e20323638383031.roa (raw, json)
Hash identifier:          KHZld2qFHMoL9CWwZszOmGwZWtFSonmkqWhUfRRAwO0=
Subject key identifier:   3C:09:05:D2:2E:DC:11:8C:74:66:9F:0D:AA:9C:25:DD:1B:79:FD:E7
Certificate issuer:       /CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A
Certificate serial:       265F7A4421B636130982DCEA7B6E14A0F3A9049B
Authority key identifier: 68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37362e302f32342d3234203d3e20323638383031.roa
Signing time:             Thu 18 Sep 2025 19:20:46 +0000
ROA not before:           Thu 18 Sep 2025 19:15:46 +0000
ROA not after:            Thu 17 Sep 2026 19:20:46 +0000
asID:                     268801
IP address blocks:        45.173.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl
                          rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5f:7a:44:21:b6:36:13:09:82:dc:ea:7b:6e:14:a0:f3:a9:04:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A
        Validity
            Not Before: Sep 18 19:15:46 2025 GMT
            Not After : Sep 17 19:20:46 2026 GMT
        Subject: CN=3C0905D22EDC118C74669F0DAA9C25DD1B79FDE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:9e:b7:ad:e8:d7:00:4d:df:65:39:91:3f:
                    be:54:85:18:e6:3d:d6:aa:31:8d:81:fe:51:53:39:
                    ff:71:0e:a8:75:30:93:52:b2:5e:e9:f1:b4:b9:5e:
                    59:f7:05:d7:1d:82:1a:9c:2a:84:9b:fd:83:ae:b1:
                    38:8d:14:7a:bc:a9:e7:d0:2c:1d:80:d6:4c:e9:a3:
                    8f:37:5c:1b:99:ce:8d:0d:e2:4e:90:b2:e0:09:3d:
                    23:c6:0e:9c:e8:a6:73:0b:61:92:3e:d9:da:5a:02:
                    b7:d5:58:29:9b:43:53:07:b0:fa:c0:ae:32:76:e9:
                    1c:55:09:de:ba:1f:60:78:40:55:da:51:13:fa:f3:
                    a9:aa:90:bb:90:28:83:53:3f:c7:16:68:0e:12:5f:
                    39:a8:88:a6:01:7c:91:81:ac:10:2a:6e:dc:5b:9f:
                    68:a1:11:d4:e2:97:01:50:d2:ef:4a:f4:b9:d2:05:
                    af:b0:b9:72:7b:8e:c1:91:9b:08:2f:26:46:c0:b5:
                    78:e8:ca:5d:2c:65:14:b2:6c:03:53:79:f4:58:e1:
                    8b:80:93:15:52:6d:7f:b9:82:a4:36:9f:69:71:44:
                    23:25:a5:3a:e4:7b:19:e7:6a:66:0d:a9:21:8c:41:
                    5f:78:32:0d:0b:5b:cd:33:31:05:4d:2e:59:d6:87:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:09:05:D2:2E:DC:11:8C:74:66:9F:0D:AA:9C:25:DD:1B:79:FD:E7
            X509v3 Authority Key Identifier:
                keyid:68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37362e302f32342d3234203d3e20323638383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b4:81:89:b2:8a:55:82:a5:74:76:cd:c4:3e:2d:7a:25:88:
         6b:e2:86:0f:d0:85:ce:4b:82:5b:79:ef:52:44:a9:a5:4f:57:
         38:a0:4d:f1:c3:40:5c:21:46:1d:14:94:2d:a9:aa:7b:bc:22:
         7d:a2:20:07:76:03:86:20:7b:91:f1:3a:6d:ff:7d:ff:8b:54:
         4c:02:f2:f4:ed:2e:a2:e7:82:7c:06:11:c4:fd:f6:cf:53:9e:
         1c:db:16:48:f5:cb:d9:5a:60:23:47:43:34:9d:69:b8:06:ab:
         cf:00:64:39:4f:09:11:00:7a:b6:a4:e8:38:82:e5:43:75:c3:
         c2:06:3c:5b:9a:bc:e5:45:32:0b:04:d8:1c:75:61:4f:4a:b3:
         cc:f4:be:a0:30:3d:66:8d:a8:fa:d5:69:6d:1e:5f:de:c4:06:
         90:f0:4d:6d:92:20:57:87:24:1d:04:c2:f8:46:38:31:e6:31:
         96:75:7d:6a:51:60:ff:c9:1a:3b:82:63:eb:36:f6:55:0b:14:
         aa:e2:2d:37:75:a3:3d:1c:9d:55:cc:99:4c:e4:b4:c9:44:37:
         09:09:6d:a3:29:84:37:65:b5:27:cf:f7:52:1d:00:23:de:fd:
         ae:95:1f:a0:46:ff:48:3e:db:74:65:70:ab:2c:5e:51:ef:49:
         e6:9b:35:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:58:15 2025 by rpki-client