Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/34352e3138312e37362e302f32342d3332203d3e20323731343239.roa
File:                     34352e3138312e37362e302f32342d3332203d3e20323731343239.roa (raw, json)
Hash identifier:          9gOGlc2v7MXt89BtMzdiQ9x967WxixKRRuQBtTPvlwU=
Subject key identifier:   0E:62:CD:87:80:6C:28:A9:0F:7C:54:2E:D7:ED:A4:91:67:C7:E7:30
Certificate issuer:       /CN=1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7
Certificate serial:       047FCC9591300A5C4560D4E709DFD90B4C037F15
Authority key identifier: 1B:B5:40:69:7C:6A:86:FD:B0:EE:C3:1F:1C:4D:55:D4:99:F3:EC:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/34352e3138312e37362e302f32342d3332203d3e20323731343239.roa
Signing time:             Mon 13 Oct 2025 16:47:34 +0000
ROA not before:           Mon 13 Oct 2025 16:42:34 +0000
ROA not after:            Mon 12 Oct 2026 16:47:34 +0000
asID:                     271429
IP address blocks:        45.181.76.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.crl
                          rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7f:cc:95:91:30:0a:5c:45:60:d4:e7:09:df:d9:0b:4c:03:7f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7
        Validity
            Not Before: Oct 13 16:42:34 2025 GMT
            Not After : Oct 12 16:47:34 2026 GMT
        Subject: CN=0E62CD87806C28A90F7C542ED7EDA49167C7E730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:66:85:06:9c:2f:ff:b2:23:6f:80:7f:1b:
                    5f:8f:80:e2:bf:d2:11:f8:33:b6:26:18:e0:ca:30:
                    72:c4:73:9c:52:46:5c:91:09:83:b0:32:16:9d:aa:
                    c4:a2:bc:b7:4c:94:2b:c9:5d:cb:e1:74:a7:43:15:
                    2e:ea:63:09:b6:3a:01:da:56:34:2c:ed:6f:8c:a0:
                    e8:7f:43:eb:9f:a9:74:fb:4f:84:17:c4:51:65:44:
                    03:32:aa:9b:2a:25:7c:32:25:84:1f:53:65:52:7c:
                    4f:ca:05:03:db:05:97:79:78:e6:00:bc:bd:69:4e:
                    dc:00:a6:d8:f1:64:2b:0a:b6:de:04:a2:d7:9e:6e:
                    9b:f1:57:0c:e6:01:8c:a0:b5:89:06:0d:d1:b6:d6:
                    91:12:58:26:fc:3e:bd:0b:be:46:fb:38:9d:76:38:
                    21:c5:e4:79:f3:10:a3:a1:81:a9:eb:e1:3b:f6:69:
                    6b:66:62:aa:9b:8e:7e:54:5d:56:84:e7:dc:e3:ed:
                    0a:d0:9c:88:19:39:6b:47:85:61:13:8d:c7:85:26:
                    0e:3f:d5:be:2d:a7:d6:f0:d5:72:7f:a2:cc:16:16:
                    cd:18:de:24:28:b2:70:32:83:d7:61:71:9c:12:c4:
                    c3:85:27:1b:21:cb:3f:6c:c0:6a:05:2e:0a:9a:9e:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:62:CD:87:80:6C:28:A9:0F:7C:54:2E:D7:ED:A4:91:67:C7:E7:30
            X509v3 Authority Key Identifier:
                keyid:1B:B5:40:69:7C:6A:86:FD:B0:EE:C3:1F:1C:4D:55:D4:99:F3:EC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/34352e3138312e37362e302f32342d3332203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b0:ac:12:f8:e0:20:85:52:5f:bf:3d:96:66:e9:49:aa:9d:
         cd:28:10:86:d0:18:13:e7:8b:fc:70:57:1b:a8:8d:e4:f7:11:
         9c:59:63:79:fb:1b:ed:cf:a7:1b:e3:1c:e2:55:af:88:02:7b:
         72:85:a0:3e:8b:0a:38:bb:a8:55:b1:56:1b:56:95:62:62:54:
         f9:5b:9d:e0:0e:4c:e3:12:b8:71:a5:ff:d4:46:8c:8e:c1:ac:
         36:ac:59:39:d7:5e:8c:bf:9f:2c:24:2c:48:d6:5a:1e:aa:05:
         51:a0:7d:86:8c:b0:a3:7b:66:9c:cb:da:50:be:55:b5:5f:f1:
         98:34:72:01:00:e7:37:f1:df:88:fd:91:d8:b9:a2:73:18:75:
         f5:e7:40:03:75:06:62:ff:c1:55:55:d4:63:bd:97:16:fe:0a:
         22:d8:15:e8:e0:21:fd:42:a9:93:aa:56:db:14:17:2a:8a:d3:
         cd:11:11:bb:32:c2:0c:95:b2:4b:15:a9:c3:b4:b0:fc:6e:3d:
         44:34:7c:eb:99:78:74:4d:d2:0f:9d:6d:ed:46:f4:51:cd:6d:
         89:8f:3a:6d:b6:ef:1f:0f:52:61:3f:50:74:c0:89:67:ea:ac:
         e1:41:80:ea:da:6e:9f:02:74:2d:6c:b3:35:52:f8:7e:83:61:
         89:ad:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:19 2025 by rpki-client