Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32332d3233203d3e20323637303539.roa
File:                     34352e3232382e3130382e302f32332d3233203d3e20323637303539.roa (raw, json)
Hash identifier:          E+GzmUJidbtUK3J/zOCCGQplXbtOWNZyo18pvf0BLFc=
Subject key identifier:   BB:B2:35:32:13:29:F2:A9:2C:AC:4F:67:15:49:BD:11:35:20:9E:47
Certificate issuer:       /CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Certificate serial:       5B31B471EECC7541925E7654B633188FC87D55A9
Authority key identifier: 13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32332d3233203d3e20323637303539.roa
Signing time:             Fri 17 Oct 2025 03:35:17 +0000
ROA not before:           Fri 17 Oct 2025 03:30:17 +0000
ROA not after:            Fri 16 Oct 2026 03:35:17 +0000
asID:                     267059
IP address blocks:        45.228.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl
                          rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:31:b4:71:ee:cc:75:41:92:5e:76:54:b6:33:18:8f:c8:7d:55:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
        Validity
            Not Before: Oct 17 03:30:17 2025 GMT
            Not After : Oct 16 03:35:17 2026 GMT
        Subject: CN=BBB235321329F2A92CAC4F671549BD1135209E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:80:8a:ed:af:d0:f4:00:88:78:51:6d:cb:
                    a4:98:83:a0:7d:55:b3:f0:33:6c:94:cb:a7:84:1f:
                    b8:18:c6:7f:76:0c:2e:f9:93:97:f7:72:66:5a:6c:
                    8d:04:ff:2d:dc:90:be:ff:3f:37:3e:f4:02:e2:70:
                    ba:1c:13:aa:7d:11:76:6d:71:45:58:b2:24:26:ab:
                    b8:e4:e2:59:f1:59:08:0b:08:46:98:09:30:bf:1c:
                    53:b4:ce:4b:99:00:2f:59:48:c6:f6:c2:c0:27:24:
                    68:3a:51:a8:af:3e:40:3e:07:a7:a1:be:b3:59:45:
                    46:ae:c0:bc:c3:41:93:3d:76:36:5d:3f:d5:95:81:
                    50:42:67:39:77:4c:a7:b6:d1:9f:07:c8:42:3f:1c:
                    cb:f7:ab:0d:cb:ac:2d:7f:7a:cd:00:b6:91:ae:bb:
                    2c:4c:a8:c8:d9:36:a5:04:7c:c7:49:2f:89:0e:45:
                    f9:f3:c8:f9:75:9a:b8:93:fe:68:f9:b5:2b:91:7a:
                    88:af:cf:64:03:52:26:8d:09:ee:e0:92:51:08:17:
                    bc:14:59:32:4f:ca:fd:a9:97:7c:f2:f5:ca:69:9b:
                    57:4b:39:24:76:c5:4d:92:be:a8:49:cf:dd:b1:5b:
                    29:88:10:89:53:47:98:3c:eb:3f:a0:01:2a:cd:5b:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B2:35:32:13:29:F2:A9:2C:AC:4F:67:15:49:BD:11:35:20:9E:47
            X509v3 Authority Key Identifier:
                keyid:13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32332d3233203d3e20323637303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:71:fe:7e:6f:52:bf:bc:25:94:7f:ec:56:8d:47:04:92:a2:
         9e:8b:0c:65:7b:02:a5:71:9d:42:24:e7:ee:93:60:75:3b:1f:
         b8:f7:9a:a4:de:5b:49:49:96:9c:02:53:04:a1:59:32:e0:e9:
         51:79:dd:be:c6:42:5c:3c:41:78:f5:0a:77:ba:58:43:63:29:
         8d:fe:6c:d3:f7:b9:e5:d1:2b:5c:fb:65:d9:1b:f8:b4:ee:cd:
         6c:b0:01:6f:51:f4:cc:63:c1:75:e6:f7:73:54:c6:48:3b:7d:
         4c:3b:08:b6:fc:82:99:95:3a:37:bb:e8:20:b5:57:6c:92:a3:
         41:08:70:85:a8:c2:a9:f5:83:80:bc:e0:bd:68:db:e4:34:ae:
         9e:22:d3:99:9c:22:54:6f:bc:24:23:f6:af:31:1a:6a:fd:8e:
         fd:f5:3a:e1:90:ee:c9:ec:ac:66:2d:8e:76:eb:e5:72:a2:5e:
         69:fe:0a:f7:8a:7d:d9:27:ff:c5:ec:5b:75:a1:7f:1f:e2:bc:
         c2:04:78:89:24:03:f9:b7:aa:70:be:82:9a:99:88:a7:39:5e:
         82:e1:c6:6b:e4:7a:b8:d1:e1:4c:70:8a:64:87:e8:96:40:e2:
         eb:6d:a4:ef:f2:59:df:66:02:83:c4:fb:20:fa:cf:0d:4e:f4:
         14:dd:b4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:34:41 2025 by rpki-client