Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37372e302f32342d3234203d3e20323638383031.roa
File:                     34352e3137332e37372e302f32342d3234203d3e20323638383031.roa (raw, json)
Hash identifier:          7a67o+mENDIFROYW8r9W/RCasVJt/3+Bg4imlJqdii8=
Subject key identifier:   D3:9F:5C:5E:F9:AF:C4:B9:16:7E:DE:5D:86:AE:4D:2B:F6:91:E1:3E
Certificate issuer:       /CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A
Certificate serial:       42EC63E2FAB0435194953F7C1D56CA0D8CA9B4AD
Authority key identifier: 68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37372e302f32342d3234203d3e20323638383031.roa
Signing time:             Thu 18 Sep 2025 19:20:59 +0000
ROA not before:           Thu 18 Sep 2025 19:15:59 +0000
ROA not after:            Thu 17 Sep 2026 19:20:59 +0000
asID:                     268801
IP address blocks:        45.173.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl
                          rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ec:63:e2:fa:b0:43:51:94:95:3f:7c:1d:56:ca:0d:8c:a9:b4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A
        Validity
            Not Before: Sep 18 19:15:59 2025 GMT
            Not After : Sep 17 19:20:59 2026 GMT
        Subject: CN=D39F5C5EF9AFC4B9167EDE5D86AE4D2BF691E13E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6f:2f:3d:80:2c:a8:e0:57:c8:0f:6e:fe:03:
                    82:03:7f:27:9f:19:f8:50:94:37:cf:23:39:60:bc:
                    a6:b4:fb:b3:e1:d2:4b:66:ef:41:8a:fa:d5:c9:ad:
                    d5:10:78:9f:e6:24:8b:27:94:ac:2a:7a:8b:89:ad:
                    61:ec:b3:81:70:a7:1e:a8:c3:f0:ac:43:f4:c6:e7:
                    7a:fb:0e:18:7d:d9:3b:cb:6c:74:90:ce:4d:52:a7:
                    04:7f:e5:6d:bf:d9:1b:8f:bb:53:c9:ce:70:ae:e6:
                    9e:1d:c6:bc:25:2a:b5:b7:0f:73:23:c2:e0:32:fb:
                    a5:6e:75:98:25:e8:0d:69:62:97:2b:af:7c:00:66:
                    f6:31:6c:b9:c2:6d:be:b6:51:e4:3a:ad:7f:26:c0:
                    b5:53:b9:be:fd:a9:6f:ef:91:ae:0e:e8:f1:eb:4e:
                    54:86:1c:63:2e:6c:f7:32:3b:0c:e3:63:83:65:09:
                    26:ec:7f:f9:ed:3c:21:e0:b8:4c:e7:6f:f6:7f:1d:
                    04:01:5c:6e:94:9a:2b:e3:65:50:87:f5:60:b9:17:
                    ae:f1:f7:7a:28:79:f5:ff:74:d6:24:64:b8:5b:d6:
                    1c:4d:dd:fa:17:8b:10:dc:5e:d0:98:f0:52:e1:5b:
                    37:76:e8:af:96:45:9f:98:a1:0f:34:76:f8:3b:5e:
                    8e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9F:5C:5E:F9:AF:C4:B9:16:7E:DE:5D:86:AE:4D:2B:F6:91:E1:3E
            X509v3 Authority Key Identifier:
                keyid:68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37372e302f32342d3234203d3e20323638383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:0f:a1:2f:e4:67:9d:2b:50:b1:4e:40:a1:16:2d:79:cb:
         6f:af:cc:86:95:89:c5:2b:c8:26:98:50:f7:40:e6:fd:7a:9f:
         35:d5:09:4c:dc:ed:71:a2:0f:04:56:c3:17:0d:be:c2:68:fd:
         71:c7:07:cb:7b:d5:3d:cf:e3:97:c7:9f:6c:1f:3b:b0:ff:fb:
         c5:3c:b4:b2:42:9c:67:10:37:03:2e:2e:d8:ca:8e:5b:9a:19:
         ea:c8:00:c2:ab:04:1e:f1:75:24:cd:bf:9f:8c:5e:03:8b:50:
         6b:d9:5e:b4:a4:88:28:a9:86:be:be:1d:72:5a:29:f8:2a:69:
         61:a6:68:b6:4a:06:cd:bb:66:56:e1:59:0d:ae:6d:4e:20:e3:
         4b:52:79:2d:08:78:1d:13:ab:1e:0c:f1:c9:23:8f:ab:68:2b:
         22:3f:08:c0:fc:2e:c1:94:4c:01:c9:d4:e4:8a:58:0d:c5:c3:
         d6:90:11:dc:79:0e:68:2b:cf:f7:f6:11:3f:0d:e0:16:71:3c:
         8e:5e:37:79:7c:af:3a:7b:15:e7:76:78:29:15:f9:41:b3:1f:
         67:dc:35:33:68:ae:8b:53:7f:6a:e6:bd:40:91:48:ca:0f:87:
         16:06:a6:82:97:2d:51:1b:79:87:93:dd:62:d4:dd:03:c4:5c:
         11:8b:10:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:55 2025 by rpki-client