Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130332e302f32342d3234203d3e20323639303234.roa
File:                     34352e3137382e3130332e302f32342d3234203d3e20323639303234.roa (raw, json)
Hash identifier:          fp5kCOoLMtoqwUPFHNCF3L1k+pOC1WFqV1+mx0nldAQ=
Subject key identifier:   38:EF:AE:4C:4B:40:3D:0D:BB:B3:6F:23:26:F6:6D:EA:F2:87:8B:D1
Certificate issuer:       /CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
Certificate serial:       159B2923656973D8510B73BCC3C4DFFD3309A981
Authority key identifier: FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130332e302f32342d3234203d3e20323639303234.roa
Signing time:             Thu 25 Sep 2025 12:48:30 +0000
ROA not before:           Thu 25 Sep 2025 12:43:30 +0000
ROA not after:            Thu 24 Sep 2026 12:48:30 +0000
asID:                     269024
IP address blocks:        45.178.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9b:29:23:65:69:73:d8:51:0b:73:bc:c3:c4:df:fd:33:09:a9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
        Validity
            Not Before: Sep 25 12:43:30 2025 GMT
            Not After : Sep 24 12:48:30 2026 GMT
        Subject: CN=38EFAE4C4B403D0DBBB36F2326F66DEAF2878BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7c:1e:b1:ff:99:bf:9b:9d:d3:be:63:2c:f5:
                    13:d8:cd:1f:2e:c9:63:91:60:8d:58:c5:66:4a:97:
                    96:3a:19:37:b8:2f:fe:f9:45:5e:0a:aa:5f:d1:11:
                    7c:44:8d:fd:4c:7f:6e:9e:8d:a4:cb:28:7e:5c:b8:
                    9f:87:52:dc:97:e9:58:57:11:fd:5b:e6:09:b0:c1:
                    8c:6a:80:e9:59:16:64:a4:07:7f:44:d5:02:71:17:
                    41:fb:6e:3b:6d:74:c3:4f:d4:7e:a0:40:a0:01:45:
                    4a:73:59:d7:50:27:a1:1d:11:b4:8e:97:85:e3:2d:
                    c3:3b:16:b1:75:d6:65:f7:9f:5a:b5:64:0c:7e:06:
                    ef:f2:a3:b7:7a:98:ce:1a:ad:bc:66:21:91:86:23:
                    b4:04:8c:77:b3:a6:0a:0f:e6:fd:63:dd:c0:87:c1:
                    59:7d:ee:6c:8b:23:27:62:6c:5c:3e:6a:aa:2e:b1:
                    24:1a:a3:90:01:6e:cd:ed:16:68:ed:03:0b:91:32:
                    d7:f3:8b:6e:bb:11:b3:5b:d3:9d:f1:0f:14:a0:4d:
                    22:ef:3f:76:28:df:ab:b2:29:25:dc:f1:e5:04:28:
                    8e:fc:28:00:9d:c8:01:85:ff:51:f6:34:27:f5:0d:
                    60:af:3d:a5:f8:18:42:5f:53:e4:07:86:ce:c2:20:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EF:AE:4C:4B:40:3D:0D:BB:B3:6F:23:26:F6:6D:EA:F2:87:8B:D1
            X509v3 Authority Key Identifier:
                keyid:FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130332e302f32342d3234203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:e5:58:e3:a6:e2:cf:8a:3a:94:9a:97:f6:97:66:97:e7:a2:
         ce:39:ac:7b:70:af:a9:75:8e:6f:47:f6:04:e1:a6:eb:ba:37:
         4e:7d:88:08:71:cf:1c:47:8e:05:12:83:8a:31:3a:e2:1e:11:
         43:48:a5:5f:27:9a:95:e6:e3:90:75:c8:ed:b7:bc:09:e1:42:
         7e:da:9d:8e:45:f2:8f:4c:ac:18:f8:ef:d7:43:79:8a:70:83:
         2e:d7:40:4a:e2:16:96:3e:da:f6:87:fe:91:5c:43:c4:3a:8b:
         3c:f3:be:11:96:e2:50:ed:5c:b3:43:81:d0:52:26:a8:d6:9f:
         15:4c:78:70:63:bc:b7:57:18:08:b9:e8:a0:d1:9e:92:86:16:
         74:8c:11:ad:67:13:10:29:63:52:af:58:ac:8f:a9:e5:2d:47:
         91:9b:90:19:c6:6d:6c:7c:fa:cb:16:8e:1d:3a:e8:85:e0:eb:
         4a:b9:ab:d3:9b:29:68:e1:45:e4:9e:7c:00:13:80:ba:a1:43:
         6e:15:ce:31:12:28:34:2d:e1:65:c0:89:dd:d0:59:11:bc:8f:
         31:47:46:5b:35:dd:cf:fc:57:f3:ec:52:dc:79:30:b2:c9:d3:
         68:17:5f:a2:7b:46:d2:76:ff:c6:a5:b8:66:e1:8f:06:9f:06:
         73:ea:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:56:50 2025 by rpki-client