Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39372e302f32342d3234203d3e20323637393938.roa
File:                     34352e3136372e39372e302f32342d3234203d3e20323637393938.roa (raw, json)
Hash identifier:          Ytrdo261nu68G5iYQF5kllJQrLZFTEmfyesz1UaQMsc=
Subject key identifier:   5A:36:BE:43:5B:8E:B6:59:EA:C8:7B:E1:8A:A1:B7:BB:BD:DC:4A:53
Certificate issuer:       /CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
Certificate serial:       133671995754E0435670C1437888AF92154148AD
Authority key identifier: 11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39372e302f32342d3234203d3e20323637393938.roa
Signing time:             Tue 23 Sep 2025 21:08:32 +0000
ROA not before:           Tue 23 Sep 2025 21:03:32 +0000
ROA not after:            Tue 22 Sep 2026 21:08:32 +0000
asID:                     267998
IP address blocks:        45.167.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl
                          rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:36:71:99:57:54:e0:43:56:70:c1:43:78:88:af:92:15:41:48:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
        Validity
            Not Before: Sep 23 21:03:32 2025 GMT
            Not After : Sep 22 21:08:32 2026 GMT
        Subject: CN=5A36BE435B8EB659EAC87BE18AA1B7BBBDDC4A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:ac:b4:b2:7f:a6:36:4a:39:44:20:12:fb:
                    96:6d:a9:1f:c4:6c:4d:e8:ac:29:fb:09:20:82:b4:
                    8f:f8:9f:a7:e4:e2:59:f7:49:7e:09:98:1f:a9:37:
                    a9:92:53:d6:64:6b:e1:a7:2d:35:db:63:3f:30:fa:
                    b3:e2:59:3a:83:c5:fe:d2:28:13:14:93:20:8f:da:
                    dc:2c:4f:05:d4:74:ba:71:08:6f:eb:47:60:17:11:
                    c9:4d:0c:e0:42:cf:da:4b:c9:b8:18:5a:48:1e:02:
                    db:cc:ba:6e:f8:02:c9:1c:90:66:6d:e5:9b:79:1d:
                    2b:2d:68:9c:a7:27:7b:e9:de:63:1e:aa:5a:bb:cf:
                    fb:3a:a6:37:13:e8:f9:d4:22:8e:04:9c:65:16:92:
                    88:b4:d7:56:ee:94:16:5b:ff:3a:24:be:ec:33:2b:
                    ed:4d:d0:54:07:c0:3b:b3:fb:f2:dd:06:d7:25:d9:
                    c1:ed:35:07:57:c8:8c:59:46:6f:97:9e:d3:66:18:
                    33:4f:74:3f:c5:28:75:a4:9e:8f:f0:6a:bd:3e:62:
                    27:1c:13:d7:5b:8f:e5:2d:30:16:e6:4c:d6:93:3e:
                    5f:f3:18:92:99:f8:c2:a7:ec:4d:7d:37:02:0d:78:
                    9a:ba:d8:a8:88:15:4c:8e:1e:04:2b:6a:58:e0:b1:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:36:BE:43:5B:8E:B6:59:EA:C8:7B:E1:8A:A1:B7:BB:BD:DC:4A:53
            X509v3 Authority Key Identifier:
                keyid:11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39372e302f32342d3234203d3e20323637393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:7d:56:41:c9:2a:58:e3:a8:7c:1d:13:54:02:41:a6:d5:57:
         4c:42:51:11:0a:74:50:88:97:88:2a:a4:37:33:ef:ce:36:fe:
         2d:d3:7b:4e:b4:ae:69:f8:6f:73:d6:09:ff:42:3d:dd:52:a6:
         94:b8:be:1f:b4:a9:16:1a:24:bb:fa:b6:da:8d:6b:da:e4:3e:
         e2:6b:cd:12:b0:66:da:3f:a2:6e:8f:48:69:73:7c:67:35:c5:
         fa:10:4d:49:81:24:8c:d7:f3:0d:f0:41:8b:a3:5c:97:99:de:
         13:28:4f:ca:b9:67:89:f0:71:f4:76:59:58:aa:f0:f3:8d:77:
         43:ed:d7:e2:df:84:90:fa:51:80:24:cc:55:67:3b:4a:86:f7:
         25:50:27:cf:5c:71:20:ab:62:53:4f:78:e3:5a:a1:31:46:76:
         5e:f9:e7:3a:5c:bd:66:27:eb:20:63:7a:2a:d9:ed:dc:28:93:
         5e:1f:5f:0d:27:86:c5:76:e0:85:ca:67:32:29:07:9d:60:0d:
         92:06:9c:1b:62:3c:65:43:81:3e:16:a3:79:84:4c:ad:8f:86:
         97:9a:99:da:8d:da:41:5f:31:1f:12:8f:36:f0:ea:98:2e:9f:
         ad:5a:db:75:c0:73:d4:52:f1:52:36:7b:9f:6a:4b:c1:66:63:
         e8:71:d7:64
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEzZxmVdU4ENWcMFDeIivkhVBSK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGQjFFRDVBODg5NERBNzQ5QTdGNUFENEYxMEU4MEM5
NDRENDIxQzAeFw0yNTA5MjMyMTAzMzJaFw0yNjA5MjIyMTA4MzJaMDMxMTAvBgNV
BAMTKDVBMzZCRTQzNUI4RUI2NTlFQUM4N0JFMThBQTFCN0JCQkREQzRBNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/ay0sn+mNko5RCAS+5ZtqR/E
bE3orCn7CSCCtI/4n6fk4ln3SX4JmB+pN6mSU9Zka+GnLTXbYz8w+rPiWTqDxf7S
KBMUkyCP2twsTwXUdLpxCG/rR2AXEclNDOBCz9pLybgYWkgeAtvMum74AskckGZt
5Zt5HSstaJynJ3vp3mMeqlq7z/s6pjcT6PnUIo4EnGUWkoi011bulBZb/zokvuwz
K+1N0FQHwDuz+/LdBtcl2cHtNQdXyIxZRm+XntNmGDNPdD/FKHWkno/war0+Yicc
E9dbj+UtMBbmTNaTPl/zGJKZ+MKn7E19NwINeJq62KiIFUyOHgQraljgsXDLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWja+Q1uOtlnqyHvhiqG3u73cSlMwHwYDVR0j
BBgwFoAUEfse1aiJTadJp/WtTxDoDJRNQhwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHh6aFFZblk3S1JkRUxuNXRUSmNGRVNMZ1V5ZXR1cGpIeVZ5Mmh1MlFl
SmovMC8xMUZCMUVENUE4ODk0REE3NDlBN0Y1QUQ0RjEwRTgwQzk0NEQ0MjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExRkIxRUQ1QTg4OTREQTc0
OUE3RjVBRDRGMTBFODBDOTQ0RDQyMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4emhRWW5ZN0tSZEVMbjV0VEpjRkVTTGdVeWV0dXBqSHlWeTJodTJRZUpqLzAv
MzQzNTJlMzEzNjM3MmUzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALadhMA0GCSqGSIb3DQEBCwUAA4IBAQCyfVZBySpY
46h8HRNUAkGm1VdMQlERCnRQiJeIKqQ3M+/ONv4t03tOtK5p+G9z1gn/Qj3dUqaU
uL4ftKkWGiS7+rbajWva5D7ia80SsGbaP6Juj0hpc3xnNcX6EE1JgSSM1/MN8EGL
o1yXmd4TKE/KuWeJ8HH0dllYqvDzjXdD7dfi34SQ+lGAJMxVZztKhvclUCfPXHEg
q2JTT3jjWqExRnZe+ec6XL1mJ+sgY3oq2e3cKJNeH18NJ4bFduCFymcyKQedYA2S
BpwbYjxlQ4E+FqN5hEytj4aXmpnajdpBXzEfEo828OqYLp+tWtt1wHPUUvFSNnuf
akvBZmPocddk
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:59:27 2025 by rpki-client