Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32322d3232203d3e20323637323134.roa
File:                     34352e3233302e3136302e302f32322d3232203d3e20323637323134.roa (raw, json)
Hash identifier:          cOMmhjaJrODtLkeJId6BjJsQu4/DXIMuzARq5CWsBFo=
Subject key identifier:   96:27:55:1E:33:F4:7F:77:6C:1D:9B:39:E1:5B:84:5D:83:2D:08:B9
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       07FFF0CAD6E57A0FDFAADBB2177BB82E7DA1E585
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32322d3232203d3e20323637323134.roa
Signing time:             Wed 01 Oct 2025 15:01:40 +0000
ROA not before:           Wed 01 Oct 2025 14:56:40 +0000
ROA not after:            Wed 30 Sep 2026 15:01:40 +0000
asID:                     267214
IP address blocks:        45.230.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ff:f0:ca:d6:e5:7a:0f:df:aa:db:b2:17:7b:b8:2e:7d:a1:e5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Oct  1 14:56:40 2025 GMT
            Not After : Sep 30 15:01:40 2026 GMT
        Subject: CN=9627551E33F47F776C1D9B39E15B845D832D08B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:6b:b5:4a:0f:7b:4e:67:99:29:24:32:9c:
                    9a:14:04:45:b1:dd:14:84:7b:e7:dc:3b:61:dc:55:
                    56:d7:66:91:dc:3a:0b:87:42:93:0d:ef:11:03:4f:
                    98:81:89:11:62:c8:56:1a:41:4a:9a:f4:b5:a7:fe:
                    19:29:0d:61:8f:2d:35:67:3a:ce:92:d9:37:87:2b:
                    d9:d6:fe:1c:3a:11:e9:0f:fc:a6:65:4e:6d:e3:4b:
                    b5:32:14:dd:b1:ae:c9:f0:b4:e9:c2:b8:e7:5e:f8:
                    75:db:e5:89:78:36:15:19:d7:5a:6d:0b:db:fd:57:
                    12:d8:6d:b2:2a:6e:21:4e:91:c6:79:9c:8a:3f:1d:
                    da:9e:3d:e2:b4:a5:dd:09:00:ca:6d:11:05:15:5b:
                    ee:8f:88:67:61:a5:e0:24:71:ae:48:a9:4a:a9:fd:
                    e1:7b:b0:23:89:db:4c:9d:89:2a:88:0a:9d:c0:29:
                    42:52:04:7f:39:0f:96:95:bf:35:61:51:d6:83:41:
                    26:28:f7:52:f5:ad:5a:f4:e2:3e:a8:d8:6e:a0:76:
                    2c:32:0a:28:31:21:12:9c:a3:6a:7d:df:ba:73:53:
                    b1:d5:00:c1:97:50:8f:be:50:82:63:40:cc:7a:64:
                    b7:cf:9f:cf:e2:79:31:9a:55:f6:82:1e:84:be:7d:
                    a7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:55:1E:33:F4:7F:77:6C:1D:9B:39:E1:5B:84:5D:83:2D:08:B9
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/34352e3233302e3136302e302f32322d3232203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:cd:a5:e9:50:15:97:e5:e7:bf:9e:cf:87:77:5c:d5:00:07:
         0f:5c:6c:2c:82:29:23:b9:0b:4a:d7:6b:df:a2:aa:cd:4f:ad:
         02:6d:41:24:ae:8f:9d:d6:b0:25:07:75:60:02:78:d6:05:14:
         5a:38:7d:48:75:14:78:5e:10:38:e9:ec:03:c6:34:1e:a0:fc:
         12:ce:36:25:9c:27:eb:e6:d2:13:97:be:99:63:5d:75:2e:f5:
         fa:27:e7:70:61:6b:40:b6:2f:3e:e8:2d:99:ef:4b:ce:44:37:
         f6:a3:b4:49:c0:51:9f:dc:65:d3:2d:07:9c:34:5e:e8:60:49:
         fe:cf:b3:d3:de:1a:c4:2c:a8:ea:73:a9:50:21:50:f4:4a:67:
         48:be:bc:2c:af:66:3d:a1:41:a1:24:a2:13:35:2a:c9:7c:9b:
         dc:e9:10:20:0b:93:9e:6f:62:54:c1:71:9d:85:d3:d4:86:31:
         eb:8c:3d:aa:51:4d:a8:36:5f:6d:6e:cd:00:1e:6e:79:4d:6f:
         d1:4a:d7:e4:29:89:48:40:89:3b:e0:c7:80:b0:34:6d:c5:0c:
         a1:f1:ea:c7:56:59:57:14:6e:bf:f1:d3:32:8c:a5:01:68:69:
         bf:6f:b1:44:c6:64:2e:d9:57:da:80:eb:33:a8:e5:9f:3c:b5:
         a6:5b:ee:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:05:13 2025 by rpki-client