Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37322e302f32322d3332203d3e20323638343439.roa
File:                     34352e3136312e37322e302f32322d3332203d3e20323638343439.roa (raw, json)
Hash identifier:          F5i/PSDWu4DJ8tYNAbgNEiFBIgrDglA7ho9bEvk0eAE=
Subject key identifier:   CE:CF:4C:2E:83:BA:F0:FF:8C:74:44:03:99:E5:1A:4C:72:D6:CF:93
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       158422AB23EF4E8B1ACB13FC806A7B9B10C96E87
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37322e302f32322d3332203d3e20323638343439.roa
Signing time:             Mon 25 Aug 2025 18:53:05 +0000
ROA not before:           Mon 25 Aug 2025 18:48:05 +0000
ROA not after:            Mon 24 Aug 2026 18:53:05 +0000
asID:                     268449
IP address blocks:        45.161.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl
                          rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:84:22:ab:23:ef:4e:8b:1a:cb:13:fc:80:6a:7b:9b:10:c9:6e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Aug 25 18:48:05 2025 GMT
            Not After : Aug 24 18:53:05 2026 GMT
        Subject: CN=CECF4C2E83BAF0FF8C74440399E51A4C72D6CF93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a5:f5:de:88:42:ae:7b:70:45:48:3b:b6:2d:
                    d4:48:5d:40:8f:42:45:a4:4f:08:86:7f:12:31:a4:
                    5f:c5:d4:7e:ab:51:91:a4:75:f0:53:21:fb:c4:c6:
                    32:0d:e3:b0:06:54:d8:ca:6f:71:21:88:08:84:1e:
                    53:ad:43:86:71:72:d0:e0:6b:1a:b9:18:dd:02:34:
                    9d:d8:06:c8:b6:e6:a6:58:4e:ad:a2:e3:a2:4e:87:
                    74:92:84:0a:d6:f8:5e:4c:16:96:24:e6:91:a2:da:
                    b7:86:15:2e:ac:c8:da:cf:b4:9f:5c:7e:97:e1:16:
                    ba:bc:26:de:c3:c9:44:4a:a7:61:31:d1:eb:d0:38:
                    9e:c3:77:c9:6d:45:f7:5c:dc:1e:31:4a:88:c5:3d:
                    76:fe:c4:3f:f0:cb:dc:45:0a:c1:19:6f:d9:e5:d2:
                    4a:38:b8:a2:14:d5:03:ba:ba:01:2f:6c:b5:28:ca:
                    58:d2:7d:97:f7:78:ea:37:5f:7e:4f:ee:23:09:a5:
                    65:56:f4:c5:a6:70:eb:ab:92:f7:2e:fc:f8:8c:42:
                    13:b5:a2:28:3e:62:26:d4:e6:45:41:8d:0a:2b:ea:
                    ed:06:d9:0d:54:38:d7:4a:54:29:c6:14:41:40:ca:
                    36:bc:f5:22:08:5b:2b:08:82:91:b8:0a:d6:e3:fd:
                    6c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CF:4C:2E:83:BA:F0:FF:8C:74:44:03:99:E5:1A:4C:72:D6:CF:93
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37322e302f32322d3332203d3e20323638343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:f5:c1:6b:11:2c:46:fb:4f:ea:32:03:54:4e:80:38:c8:df:
         98:08:f2:31:51:38:6f:95:7e:4e:b6:25:a1:8f:5a:7b:8d:b7:
         23:e9:73:e7:17:b4:d8:66:e0:04:ed:7e:67:ce:93:76:33:b9:
         ad:6b:24:fc:c0:8c:39:9d:23:d4:a2:32:3a:0e:df:4e:39:16:
         12:11:ef:4d:dc:b8:c2:94:04:11:be:57:86:e6:87:a2:0d:fe:
         45:40:23:9e:ea:64:c1:d5:e5:96:c1:fd:7c:87:79:cc:e0:9b:
         4e:ca:c0:cb:61:f6:e6:5d:bf:df:71:d0:e0:cf:67:53:43:f5:
         71:84:12:05:46:9d:65:e5:b3:d6:05:fa:17:fc:84:05:e0:1a:
         0d:6c:4e:97:df:5b:17:a7:af:fc:9c:51:be:ee:0e:b1:79:f8:
         55:b4:51:9f:dc:0a:62:70:f9:37:9f:50:c9:fb:3c:a9:db:60:
         b9:49:af:8b:22:82:57:4e:4d:fa:cf:9f:82:f3:0e:cd:7c:cb:
         cf:cf:6b:94:6a:4c:75:36:15:94:88:54:2b:cd:cd:10:5d:1f:
         d6:9a:23:c1:9b:ab:70:6b:80:07:9c:dd:37:0b:7e:e6:70:44:
         63:50:8f:26:45:d5:7b:05:5d:b1:c6:7c:49:88:b2:b6:1c:40:
         be:89:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:39:15 2025 by rpki-client