Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa
File:                     34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa (raw, json)
Hash identifier:          GM9m8Nxkgz0nOuZZ3rhefyU2T7V3y0x9VDTmL6sgtjE=
Subject key identifier:   DB:2A:80:3C:D3:C9:66:1E:F8:C1:0F:C8:D8:0D:81:ED:B9:10:05:29
Certificate issuer:       /CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Certificate serial:       0875C3B88B49F2D3DF6430E5FBDBCC98FD769C59
Authority key identifier: 13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa
Signing time:             Fri 17 Oct 2025 03:35:17 +0000
ROA not before:           Fri 17 Oct 2025 03:30:17 +0000
ROA not after:            Fri 16 Oct 2026 03:35:17 +0000
asID:                     267059
IP address blocks:        45.228.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl
                          rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:75:c3:b8:8b:49:f2:d3:df:64:30:e5:fb:db:cc:98:fd:76:9c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
        Validity
            Not Before: Oct 17 03:30:17 2025 GMT
            Not After : Oct 16 03:35:17 2026 GMT
        Subject: CN=DB2A803CD3C9661EF8C10FC8D80D81EDB9100529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:d6:94:e5:0b:89:e9:97:66:eb:ca:6a:95:
                    94:8d:ce:11:7c:49:61:94:06:41:68:21:79:c4:19:
                    88:ea:77:d4:62:09:04:a0:eb:94:1a:a7:19:3d:e1:
                    85:5f:aa:c5:78:cb:97:3f:68:a0:3e:5b:1e:24:f7:
                    06:4e:44:b3:3a:c8:1b:08:13:e4:44:65:90:5e:cf:
                    05:80:26:49:ab:b5:89:72:d7:34:12:12:f8:4a:30:
                    7d:2f:7a:89:ff:d9:4b:08:77:55:e7:d8:a9:e3:f4:
                    9f:7e:56:ff:9a:e6:83:59:1f:c8:bc:37:6f:ac:23:
                    ce:36:e7:ea:b1:25:e0:ae:19:da:cf:cb:7e:9c:bd:
                    4b:ba:3e:55:e1:82:10:27:72:23:03:77:fe:4e:f2:
                    e4:21:79:19:a6:70:3d:ba:09:ae:9c:a6:89:c5:81:
                    6f:ea:bd:5d:c2:4c:21:48:19:d1:cb:0f:b8:43:67:
                    b9:10:72:58:3a:e9:34:b5:a9:10:8d:e2:d8:a9:d7:
                    d9:44:fd:63:0e:fa:7a:fe:1b:8b:49:31:f5:da:6f:
                    a1:68:15:97:b0:3c:af:2d:f7:f2:8f:36:89:a3:f6:
                    16:27:92:b7:bc:04:1e:1f:c8:94:25:4d:0b:ec:44:
                    de:98:2e:2f:3a:33:04:53:65:fd:30:73:20:40:34:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2A:80:3C:D3:C9:66:1E:F8:C1:0F:C8:D8:0D:81:ED:B9:10:05:29
            X509v3 Authority Key Identifier:
                keyid:13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:ac:4e:5c:d5:c0:cf:78:2c:18:71:a7:eb:45:a3:b3:1e:ba:
         0d:9a:d3:57:10:ed:ef:aa:81:19:4c:e8:a3:48:83:20:64:9e:
         e9:ff:b7:27:d6:d5:3c:10:2e:5d:5c:6e:81:d4:6b:b2:6d:c9:
         ae:4d:2c:78:22:91:99:f2:39:e4:8a:fb:ed:3b:33:b5:cd:4f:
         f9:15:8e:de:f0:19:86:90:23:2d:a2:ff:12:99:c3:0e:a0:82:
         0c:d9:cd:af:98:1e:50:c7:d7:b4:43:79:78:04:13:b3:05:1f:
         e7:fa:fa:d3:0b:07:bd:60:8d:4a:0e:47:b1:83:c6:18:1c:c8:
         99:ac:1a:0b:a7:83:ff:83:62:3a:aa:b6:19:e7:5d:94:30:2b:
         01:0f:5e:fe:88:3d:4b:a9:48:00:c4:99:d7:6f:23:0c:c3:3f:
         62:9b:ab:d8:be:54:05:84:3f:23:dc:ad:c8:57:d3:9d:a8:91:
         cb:0c:17:ac:62:e4:36:5c:b4:8d:2d:43:ce:0b:26:63:ca:61:
         1e:07:44:95:4b:15:5c:02:02:46:b4:25:50:67:bd:de:9f:92:
         6c:4c:32:66:8d:9f:1c:25:61:f2:e9:7e:4e:58:a8:ee:5c:9d:
         09:6f:c8:d3:5c:8f:74:71:0d:a8:4e:9b:80:61:47:0d:20:50:
         a7:02:4d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:34:41 2025 by rpki-client