Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e34382e302f32322d3332203d3e20323733363531.roa
File:                     34352e3138362e34382e302f32322d3332203d3e20323733363531.roa (raw, json)
Hash identifier:          5EnjsnBJFC9vy419I945o6YtyRDlG3CjspAK7QAMX7g=
Subject key identifier:   64:0F:F4:5E:A6:4E:63:15:12:25:3D:25:F8:C9:E2:A1:EF:3E:AB:44
Certificate issuer:       /CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
Certificate serial:       013E18792D66264C42B5D0EBB17DBEF3A520A624
Authority key identifier: FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e34382e302f32322d3332203d3e20323733363531.roa
Signing time:             Tue 07 Oct 2025 18:50:27 +0000
ROA not before:           Tue 07 Oct 2025 18:45:27 +0000
ROA not after:            Tue 06 Oct 2026 18:50:27 +0000
asID:                     273651
IP address blocks:        45.186.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl
                          rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3e:18:79:2d:66:26:4c:42:b5:d0:eb:b1:7d:be:f3:a5:20:a6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
        Validity
            Not Before: Oct  7 18:45:27 2025 GMT
            Not After : Oct  6 18:50:27 2026 GMT
        Subject: CN=640FF45EA64E631512253D25F8C9E2A1EF3EAB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:81:76:d7:cb:f7:4f:a2:c4:a9:6b:ce:17:
                    ce:13:7a:c6:c9:b9:43:74:fe:b2:2f:89:3f:8f:ac:
                    1e:74:c4:ae:93:cf:2a:4a:3e:41:15:5d:19:e6:b0:
                    f0:29:5e:ce:6c:da:2e:16:1f:85:61:7c:79:6f:ac:
                    da:19:fc:86:4a:47:28:c9:06:09:20:24:83:de:6d:
                    eb:27:e4:ea:30:74:2a:82:88:86:18:25:ad:db:24:
                    13:cd:74:3c:4f:48:c6:7a:0b:54:e7:9c:d1:f0:5a:
                    2a:64:28:f7:a4:7c:8a:97:08:c8:b3:6a:6a:95:ee:
                    aa:24:eb:cd:17:0a:27:12:03:cb:51:e0:93:e6:0d:
                    85:5f:1d:e5:e2:d8:91:74:5f:34:31:0a:a8:17:91:
                    17:52:25:0e:5c:38:70:bd:a9:61:5f:1b:2d:ea:05:
                    c1:09:d0:28:06:ee:0d:24:35:b1:a1:1c:44:4b:9d:
                    fa:9c:91:36:78:04:0e:54:ce:3a:28:70:68:8a:2d:
                    e9:8e:a8:e8:73:10:45:a7:57:29:96:ea:72:2d:40:
                    89:9c:61:29:cb:b6:87:44:8b:75:17:08:c9:b8:15:
                    aa:65:c2:05:ed:f7:71:bd:e6:b1:61:33:90:0b:ae:
                    e7:f6:a9:4e:06:07:60:a0:22:6d:03:d1:5d:2c:89:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0F:F4:5E:A6:4E:63:15:12:25:3D:25:F8:C9:E2:A1:EF:3E:AB:44
            X509v3 Authority Key Identifier:
                keyid:FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e34382e302f32322d3332203d3e20323733363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:33:85:0e:2b:8f:b2:3a:08:ef:be:12:ca:9d:21:a9:52:4a:
         da:37:bb:12:b5:e7:1a:c1:12:ea:89:46:a7:98:80:75:3e:9c:
         f1:b3:e3:d9:33:4f:c4:ac:87:58:74:99:8b:d6:63:67:10:a6:
         50:79:ff:9f:31:bf:be:ad:56:f0:4f:57:14:07:aa:f5:83:2b:
         f1:da:01:95:e0:4b:d6:4f:ed:7b:07:15:ad:b1:9b:44:8b:cb:
         26:b8:2c:5c:ab:0f:a6:7f:23:55:c7:7f:28:28:5f:ce:c1:f9:
         28:ca:3a:47:09:9d:d0:66:68:7d:cc:f4:01:d7:71:70:a9:73:
         71:68:d3:f7:8a:fe:9a:1d:39:91:21:0b:d5:7e:d9:eb:c0:ee:
         bb:e4:0f:b4:83:a3:33:59:ef:6a:46:de:f6:77:4c:5d:61:41:
         0c:f1:27:63:b8:ef:d4:bb:ba:a9:76:6d:3c:d7:8a:d9:93:f8:
         89:7b:ee:82:53:03:85:65:e3:73:00:f5:bf:e2:89:de:d4:f2:
         c1:4c:a9:88:38:d5:c7:56:5f:d1:69:53:46:6d:4d:a3:34:28:
         bf:e6:c8:3c:de:ff:3e:e5:10:ec:31:87:6a:be:b8:32:51:1d:
         33:ec:d8:b0:f4:56:01:ab:ba:83:ef:4a:a0:f7:27:a4:60:e2:
         2b:76:26:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:57:09 2025 by rpki-client