Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37382e302f32342d3234203d3e20323638383031.roa
File:                     34352e3137332e37382e302f32342d3234203d3e20323638383031.roa (raw, json)
Hash identifier:          PcSa1+6yDncpT/u+KksZP/rtvW86OdA00qI8FyD7PRU=
Subject key identifier:   0D:35:D2:72:B5:A3:5C:E0:DB:2F:98:3F:25:66:AC:2D:16:15:19:87
Certificate issuer:       /CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A
Certificate serial:       7CAB509393E619001E2701C08B5CCC510336D75B
Authority key identifier: 68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37382e302f32342d3234203d3e20323638383031.roa
Signing time:             Thu 18 Sep 2025 19:21:02 +0000
ROA not before:           Thu 18 Sep 2025 19:16:02 +0000
ROA not after:            Thu 17 Sep 2026 19:21:02 +0000
asID:                     268801
IP address blocks:        45.173.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl
                          rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ab:50:93:93:e6:19:00:1e:27:01:c0:8b:5c:cc:51:03:36:d7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A
        Validity
            Not Before: Sep 18 19:16:02 2025 GMT
            Not After : Sep 17 19:21:02 2026 GMT
        Subject: CN=0D35D272B5A35CE0DB2F983F2566AC2D16151987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:47:34:26:06:32:de:a4:8b:b8:1d:e2:76:
                    b3:82:b6:48:15:c7:e2:0b:ce:9f:27:3e:c2:96:83:
                    47:f8:8e:a7:3e:cf:dd:76:66:16:a1:20:ef:eb:fc:
                    bc:dd:b0:a9:ff:bd:ea:90:38:99:89:83:0f:ec:25:
                    1e:64:4b:0d:ef:85:b4:c3:a3:66:f8:75:a8:f1:08:
                    c7:64:fa:ce:45:32:9e:af:08:1c:e0:38:14:54:64:
                    0b:a1:d6:e1:be:cb:f7:c0:63:2a:a7:ba:1d:b3:6b:
                    05:6d:d0:22:98:0f:8e:3b:20:f2:f1:ee:34:4b:90:
                    58:48:04:1f:23:fa:a3:70:8e:46:93:3a:a0:07:59:
                    be:9a:dc:31:2f:bc:06:c1:3a:e0:26:66:2e:60:6c:
                    ea:ce:b6:9d:5c:b4:aa:99:6b:15:16:3b:e0:86:9d:
                    7f:ff:95:89:0f:f4:33:9b:c7:78:cb:28:4e:fc:ab:
                    3d:dc:11:45:22:b1:97:b1:f4:84:67:fc:47:c9:e9:
                    f4:37:f4:8e:57:0c:18:ee:f6:ab:54:61:86:c1:43:
                    aa:4b:81:6d:5c:7d:2a:9f:fb:f3:ea:49:7a:c6:58:
                    2d:db:c7:14:c4:6d:96:70:bf:39:7a:cc:50:7f:dd:
                    ce:c2:f7:24:54:02:42:a9:2b:81:fb:3a:31:56:c9:
                    93:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:35:D2:72:B5:A3:5C:E0:DB:2F:98:3F:25:66:AC:2D:16:15:19:87
            X509v3 Authority Key Identifier:
                keyid:68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37382e302f32342d3234203d3e20323638383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:13:24:c3:ae:6a:51:70:eb:09:98:5b:fc:8f:da:c2:ca:59:
         7d:9c:65:c0:0b:8b:eb:cf:09:9b:89:6a:cc:41:67:7a:81:35:
         b1:bb:34:e1:e5:6b:84:fb:95:fa:28:81:d4:3d:dc:03:93:49:
         c8:98:82:dd:bd:14:b1:94:b9:de:1e:fe:8a:f1:f6:2b:3e:9f:
         41:56:29:42:ec:b0:51:d5:99:9a:ab:20:97:a6:3e:7a:53:e2:
         24:3b:21:bd:db:5a:4d:cb:ce:6e:1f:fc:4b:57:52:33:60:6a:
         d0:df:cf:18:5d:37:85:a8:da:dd:6d:e6:6b:07:3d:37:a0:ed:
         ca:4c:f9:c0:0d:5d:3b:f6:1f:32:fb:8c:70:ab:99:a7:2b:13:
         a6:19:46:f9:20:5f:4e:2f:25:a2:c2:5a:b2:c5:fe:69:eb:b8:
         a9:40:d8:82:85:1d:a7:6a:eb:c9:93:39:de:6c:87:48:5c:77:
         c3:a5:7e:c6:5f:de:dc:b8:03:fe:35:7c:0c:f1:71:54:c7:cb:
         0c:b4:43:7f:ea:c0:17:4c:b9:32:6d:aa:09:0a:47:9b:79:69:
         71:9e:e7:43:1c:6f:69:33:02:97:3b:f8:19:60:30:9f:78:b5:
         59:20:75:15:97:53:8c:25:87:c9:46:95:fb:42:28:27:41:fb:
         af:f7:8d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:51 2025 by rpki-client