Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135352e302f32342d3234203d3e20323633333437.roa
File:                     34352e3136322e3135352e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          xfnga9YJBMsB80WIFJlo/Tjy3lGulAYWla1ErYP5ouA=
Subject key identifier:   86:8A:8C:B2:C6:84:73:33:34:E4:18:45:55:7E:5C:58:DC:B3:13:79
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       79FFA9A4AAD7AC2BE60F21E97E70456552B71137
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135352e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 11 Oct 2025 14:03:03 +0000
ROA not before:           Sat 11 Oct 2025 13:58:03 +0000
ROA not after:            Sat 10 Oct 2026 14:03:03 +0000
asID:                     263347
IP address blocks:        45.162.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ff:a9:a4:aa:d7:ac:2b:e6:0f:21:e9:7e:70:45:65:52:b7:11:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 11 13:58:03 2025 GMT
            Not After : Oct 10 14:03:03 2026 GMT
        Subject: CN=868A8CB2C684733334E41845557E5C58DCB31379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:f0:4c:90:fc:b9:5c:16:52:92:97:62:95:
                    64:54:e6:b8:b1:65:83:b0:a7:08:69:b3:74:2e:be:
                    c2:84:7d:28:f8:2f:df:ca:3f:0a:7b:bf:51:b6:ed:
                    fe:24:bf:1f:f2:1d:03:68:22:6d:37:69:2d:20:74:
                    ad:f4:4b:ae:f9:b9:ec:2d:b9:82:9f:a3:93:b9:ed:
                    28:10:9a:14:03:ed:53:97:17:b7:af:3a:0b:6f:6b:
                    3a:4a:92:f5:5a:2a:7d:9a:0a:dc:78:89:fb:00:c6:
                    f3:ff:03:6e:e5:28:56:02:13:bb:fc:f0:ac:03:0c:
                    74:5f:a6:ad:00:a1:b6:74:5b:af:1b:83:53:86:0b:
                    b3:a8:80:1c:c0:6a:f3:59:be:34:98:7c:23:78:37:
                    1e:4c:58:d7:59:f3:20:b1:7b:79:ac:a9:f3:04:09:
                    26:fa:27:47:92:23:59:9b:d8:46:9c:0b:f5:77:94:
                    3c:19:46:20:ff:1f:8b:ec:b5:68:07:cb:f7:2a:05:
                    bc:e1:ad:a4:ec:6f:28:1f:8c:36:d5:d8:58:42:6a:
                    56:a1:97:8b:fd:5c:73:b9:ee:e7:9f:81:aa:bf:bb:
                    18:3b:29:98:94:e9:f7:43:f7:19:01:e4:08:2f:ce:
                    d7:f1:82:cf:40:4d:60:86:4c:3a:39:67:0d:a8:41:
                    f4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8A:8C:B2:C6:84:73:33:34:E4:18:45:55:7E:5C:58:DC:B3:13:79
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135352e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:3d:39:98:aa:4e:14:6a:f3:0a:1e:4f:4a:00:e7:a0:6b:2f:
         1e:c6:c6:c2:08:23:ba:f7:99:bc:42:37:c0:cd:5e:e0:c8:8e:
         30:d5:eb:2e:d4:ae:bf:9a:f1:94:1b:8d:dc:b0:8f:0c:6b:99:
         25:d5:23:bc:36:5b:8e:b7:61:3a:eb:29:f0:30:0a:85:ac:6b:
         92:f4:55:c4:eb:4a:7c:29:65:3c:24:3b:c1:79:a2:9c:9e:af:
         42:b8:f4:73:a4:6c:69:11:9c:61:3b:bf:f1:dd:97:e7:cd:a8:
         c8:19:d1:f0:d3:34:af:15:81:da:75:00:32:e0:3a:41:01:71:
         36:11:51:58:9b:0d:3b:f1:f4:b5:2b:76:6c:b9:bb:47:d5:f4:
         2c:0d:49:81:7a:32:ca:87:d1:a0:b1:7b:59:53:0c:1a:f8:26:
         15:cd:fd:14:bc:01:7d:8a:3b:20:b1:b3:1d:51:14:6f:5f:09:
         85:a3:1b:2a:40:86:31:4d:aa:bc:ca:59:6f:c8:20:e3:36:92:
         3f:48:ef:7c:63:1a:0e:f9:7c:73:bd:67:94:2c:79:f7:39:c4:
         fb:69:21:3b:56:5c:9d:37:d1:78:89:77:13:20:46:bd:50:d2:
         f3:5f:e1:24:a3:16:08:83:13:9f:9a:56:59:c5:aa:75:51:c6:
         24:5c:ac:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:47:09 2025 by rpki-client