Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136372e302f32342d3234203d3e20323639323838.roa
File:                     34352e3138332e3136372e302f32342d3234203d3e20323639323838.roa (raw, json)
Hash identifier:          XViF6KpgR8BimVjbtsk8BB56gelnkdHBfAT2I9fNMpU=
Subject key identifier:   9E:35:A1:56:D3:64:81:F4:F4:C6:EA:FE:8C:62:07:D3:21:17:88:C7
Certificate issuer:       /CN=C5423CDD002348905AC2D36D7816B81D97846978
Certificate serial:       5477857344252D46AC83B6ABC02EDE1649487D02
Authority key identifier: C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136372e302f32342d3234203d3e20323639323838.roa
Signing time:             Thu 09 Oct 2025 12:41:09 +0000
ROA not before:           Thu 09 Oct 2025 12:36:09 +0000
ROA not after:            Thu 08 Oct 2026 12:41:09 +0000
asID:                     269288
IP address blocks:        45.183.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl
                          rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:77:85:73:44:25:2d:46:ac:83:b6:ab:c0:2e:de:16:49:48:7d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5423CDD002348905AC2D36D7816B81D97846978
        Validity
            Not Before: Oct  9 12:36:09 2025 GMT
            Not After : Oct  8 12:41:09 2026 GMT
        Subject: CN=9E35A156D36481F4F4C6EAFE8C6207D3211788C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:61:51:b3:fe:e6:ad:01:8b:bb:16:cf:e5:
                    c7:e1:d2:29:2f:d2:e1:a0:cc:90:dc:e5:4b:c9:92:
                    9a:e3:59:62:ad:4f:63:5f:13:c2:73:6a:0d:a0:c7:
                    e8:0d:25:a9:81:b4:a2:bc:63:14:b9:60:ae:a0:8c:
                    46:8e:84:53:fd:76:a6:c7:88:de:61:b2:37:c8:6f:
                    0c:3f:55:f3:d0:7b:e2:68:7c:a1:ef:58:01:6f:40:
                    cb:a1:f5:d2:24:e8:d3:06:e7:7e:e1:06:2e:c4:1b:
                    4f:0e:c0:d6:9b:db:af:82:97:c6:c6:ec:5c:b7:2d:
                    6e:b1:84:09:e1:a6:2c:30:74:61:a7:f7:22:49:6b:
                    ec:e4:d9:cc:53:91:f0:75:72:54:35:5a:8b:f0:0b:
                    22:9b:bc:15:66:bf:28:4e:6a:bf:ed:c6:c2:a5:2c:
                    77:80:18:4e:8c:ff:3c:8d:cf:16:1e:68:5e:c5:7e:
                    4f:12:9f:4f:7b:bb:47:cf:eb:e2:12:f6:4f:d1:64:
                    65:d7:7d:49:31:97:61:df:04:0c:5b:d9:9c:2c:2d:
                    8e:05:0e:69:61:06:0b:4f:26:46:3b:4f:4d:ce:b0:
                    d7:40:16:7a:69:b2:7a:81:9d:11:99:06:1f:ad:37:
                    4c:a8:32:32:ef:b5:a4:d7:4c:80:85:1e:9b:fa:bc:
                    a7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:35:A1:56:D3:64:81:F4:F4:C6:EA:FE:8C:62:07:D3:21:17:88:C7
            X509v3 Authority Key Identifier:
                keyid:C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136372e302f32342d3234203d3e20323639323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:cc:91:85:87:60:b7:ff:1d:07:60:6a:53:81:9b:9b:37:fc:
         b6:eb:04:28:5f:ff:28:98:4e:4a:e9:45:f4:fe:af:c2:44:c2:
         78:e5:8b:f0:fe:01:88:eb:48:8e:b6:4d:2c:30:d8:94:2d:1f:
         4d:b3:95:fc:40:95:04:8b:c9:6b:ae:b1:4b:b9:07:81:1c:50:
         6f:9e:50:95:27:87:8c:b2:84:5f:c1:18:ac:d5:f3:03:75:78:
         3d:b9:75:fa:17:cc:fc:49:04:44:2e:33:d2:9c:40:56:9b:c2:
         b2:4e:dc:08:60:d3:49:59:66:55:c6:33:71:ce:1c:55:4e:96:
         53:a3:8d:41:da:32:df:17:c8:a0:f5:27:1d:c0:47:72:97:b9:
         b8:91:8a:52:72:09:6c:eb:93:ec:8b:d0:64:20:89:65:77:b1:
         48:60:0b:71:87:a0:d3:d7:79:36:a3:b8:c0:39:0a:a9:c3:cd:
         0e:53:9b:06:86:3a:5d:eb:4c:61:b7:8e:21:6e:9e:48:fd:9d:
         1c:eb:66:75:a5:37:6d:cd:28:48:e0:9b:86:fa:84:6e:21:b2:
         ef:84:53:dc:86:fd:05:fe:a9:15:f2:a2:80:12:e1:20:25:22:
         59:00:23:36:0f:d7:81:d4:b9:6f:6b:5d:08:66:67:2a:8d:59:
         5a:57:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:48 2025 by rpki-client