Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37392e302f32342d3234203d3e20323638383031.roa
File:                     34352e3137332e37392e302f32342d3234203d3e20323638383031.roa (raw, json)
Hash identifier:          y/X9o5vIJn4KUTUrJhshDVklQMZk7ZRt7/ms4iIX8eQ=
Subject key identifier:   FA:57:AE:7A:73:95:4D:65:2A:63:3E:EB:BE:88:7A:4D:DB:7D:A2:EC
Certificate issuer:       /CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A
Certificate serial:       5024F6C24112CF4D01743257B2FFBED9B27A2B02
Authority key identifier: 68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37392e302f32342d3234203d3e20323638383031.roa
Signing time:             Thu 18 Sep 2025 19:21:07 +0000
ROA not before:           Thu 18 Sep 2025 19:16:07 +0000
ROA not after:            Thu 17 Sep 2026 19:21:07 +0000
asID:                     268801
IP address blocks:        45.173.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl
                          rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:24:f6:c2:41:12:cf:4d:01:74:32:57:b2:ff:be:d9:b2:7a:2b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A
        Validity
            Not Before: Sep 18 19:16:07 2025 GMT
            Not After : Sep 17 19:21:07 2026 GMT
        Subject: CN=FA57AE7A73954D652A633EEBBE887A4DDB7DA2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:34:62:c9:b7:1f:60:51:be:c6:ca:1d:ce:
                    81:9f:5e:22:69:b9:08:dc:37:fb:78:23:85:05:4a:
                    fe:bf:7e:78:cf:1b:28:13:3c:c6:19:da:22:73:a1:
                    e5:64:27:e6:83:8e:c8:ec:c3:cb:e3:69:79:d1:77:
                    bf:29:35:b5:bf:51:1d:35:82:52:c2:61:72:5e:54:
                    2d:aa:c5:29:e3:9e:84:f4:4f:32:c9:9a:b4:dc:63:
                    51:3d:13:98:54:64:cc:d3:e8:ad:df:a5:28:96:3c:
                    ad:ca:25:50:7f:66:f6:70:3a:6b:db:55:1a:8f:b4:
                    3e:5d:e4:eb:b9:38:54:10:dd:b7:04:12:36:23:d0:
                    fd:30:5d:e8:b9:6c:35:fb:c0:90:58:1c:07:b3:f1:
                    e9:61:e1:78:20:a9:0a:e7:c0:45:7e:98:2a:01:6d:
                    e7:b6:f5:8e:3f:19:79:4a:f0:01:38:fa:59:90:cd:
                    b6:c9:b0:b0:cb:d6:04:94:99:a7:40:e0:c6:f3:47:
                    ec:d1:08:a5:17:a4:41:f6:76:51:2c:a9:30:c0:98:
                    6f:e9:8e:e0:34:29:0c:e1:66:e6:e6:51:10:e9:1d:
                    5c:d5:a8:98:6c:05:a7:e4:69:1a:ec:6f:c0:02:e6:
                    ce:d7:19:d7:ab:bb:6d:62:9d:69:6a:6f:c3:12:2a:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:57:AE:7A:73:95:4D:65:2A:63:3E:EB:BE:88:7A:4D:DB:7D:A2:EC
            X509v3 Authority Key Identifier:
                keyid:68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37392e302f32342d3234203d3e20323638383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:70:e3:83:5c:e8:1c:95:ce:a7:35:d9:3e:65:81:01:05:4d:
         2b:bd:4f:13:c5:31:96:ae:1d:62:fd:16:e0:e2:22:60:ec:e0:
         33:dd:ac:ae:ee:25:e6:69:cf:80:7f:6a:0b:0f:22:a4:bd:59:
         db:66:81:27:7a:76:ba:25:f9:78:8a:b9:aa:2e:b1:90:74:c8:
         d6:9f:fa:18:d7:e8:4f:b1:6c:26:6f:dc:f2:0d:36:05:84:99:
         aa:4b:18:c7:e8:85:c4:c8:e7:a9:a5:e4:22:1a:40:40:df:a0:
         38:f2:2c:e8:a0:e0:50:95:9f:c2:c7:32:20:76:3d:ca:91:42:
         ab:58:5e:51:fd:37:ed:c2:c1:53:d8:b3:34:49:7d:14:e8:ac:
         81:5a:6a:03:86:b0:b5:1c:47:d6:5d:39:94:ff:0d:fa:1c:71:
         c3:5b:b0:7b:95:fa:95:81:ae:80:2e:b3:1e:90:7e:56:11:84:
         8f:25:ca:48:9a:b5:d5:8f:08:e7:6e:66:92:b3:36:64:f0:db:
         08:d4:75:8b:61:7e:e6:6d:2a:62:52:04:59:c7:f2:9c:4a:f2:
         08:5c:65:0b:87:b2:de:ee:eb:0c:69:74:79:8f:3b:56:06:6a:
         71:37:e8:46:4e:a3:f8:25:06:63:e2:cb:15:f3:d9:95:e2:dc:
         ee:09:f8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:51 2025 by rpki-client