Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/1/34352e3233342e382e302f32342d3234203d3e20323637343038.roa
File:                     34352e3233342e382e302f32342d3234203d3e20323637343038.roa (raw, json)
Hash identifier:          Y0oEc2QTf0Yum+Svy+M97WjdLQt8uV/1qx+ppAa8Tu0=
Subject key identifier:   B7:F4:65:16:63:5C:29:78:25:27:15:2A:81:F7:F5:F0:B6:91:D1:80
Certificate issuer:       /CN=9C816C4BD312E30C0D30D5E132C5FA3701CAD30A
Certificate serial:       75CDBA410A34B4E71C21A50C49F6FA3CDAFDDD3F
Authority key identifier: 9C:81:6C:4B:D3:12:E3:0C:0D:30:D5:E1:32:C5:FA:37:01:CA:D3:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C816C4BD312E30C0D30D5E132C5FA3701CAD30A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/1/34352e3233342e382e302f32342d3234203d3e20323637343038.roa
Signing time:             Fri 26 Sep 2025 19:10:09 +0000
ROA not before:           Fri 26 Sep 2025 19:05:09 +0000
ROA not after:            Fri 25 Sep 2026 19:10:09 +0000
asID:                     267408
IP address blocks:        45.234.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/1/9C816C4BD312E30C0D30D5E132C5FA3701CAD30A.crl
                          rsync://rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/1/9C816C4BD312E30C0D30D5E132C5FA3701CAD30A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C816C4BD312E30C0D30D5E132C5FA3701CAD30A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cd:ba:41:0a:34:b4:e7:1c:21:a5:0c:49:f6:fa:3c:da:fd:dd:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C816C4BD312E30C0D30D5E132C5FA3701CAD30A
        Validity
            Not Before: Sep 26 19:05:09 2025 GMT
            Not After : Sep 25 19:10:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:69:f8:ae:b4:80:d5:b3:99:aa:cd:1c:d1:
                    53:7a:65:d9:6c:58:16:70:72:ee:82:67:6c:8e:5f:
                    81:df:d9:4a:97:59:45:b2:52:41:bc:f8:1f:97:e1:
                    02:95:08:fb:0c:2e:1c:ef:21:5a:d0:f0:72:b7:a7:
                    1e:bd:1c:e2:5f:1e:fd:d5:d6:d0:5a:ae:ff:91:54:
                    ea:15:69:14:a2:65:54:04:e8:8f:ab:2b:92:ab:09:
                    44:36:de:3d:a3:b6:67:7e:65:92:5a:53:4f:bd:8c:
                    a1:d1:0e:6b:3d:d3:b1:fc:9b:82:89:a9:6a:6c:90:
                    b8:ee:d1:55:05:58:f3:04:3b:03:16:17:f6:b3:ab:
                    b8:3d:08:61:68:8b:91:ad:c8:e9:21:83:b8:b9:d8:
                    c8:b7:91:d4:1f:be:0d:d4:bc:bd:b8:af:8b:3c:d6:
                    04:5a:8d:63:94:55:cb:85:f7:47:dc:5d:60:62:a4:
                    70:8a:8f:4f:79:25:7a:15:95:21:07:e0:ca:a2:07:
                    33:a8:89:53:02:58:fa:2f:b7:40:a4:5b:58:60:25:
                    86:dc:ba:48:b8:ea:b5:9a:f9:6c:8f:45:1f:8a:34:
                    82:d6:a4:ee:fc:84:f4:6c:ac:9d:bc:b5:e2:c7:a1:
                    8d:55:4d:92:d4:32:c3:64:ae:d9:75:16:b6:6d:b7:
                    98:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F4:65:16:63:5C:29:78:25:27:15:2A:81:F7:F5:F0:B6:91:D1:80
            X509v3 Authority Key Identifier:
                keyid:9C:81:6C:4B:D3:12:E3:0C:0D:30:D5:E1:32:C5:FA:37:01:CA:D3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/1/9C816C4BD312E30C0D30D5E132C5FA3701CAD30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C816C4BD312E30C0D30D5E132C5FA3701CAD30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/1/34352e3233342e382e302f32342d3234203d3e20323637343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:33:94:b7:fe:53:03:db:2a:37:97:74:4d:e8:89:d1:d8:94:
         a5:8f:99:5c:67:6f:24:df:09:c8:c9:a4:92:b9:67:ab:d3:1a:
         f3:01:ec:11:22:12:88:f4:bf:eb:2a:68:bd:8a:ba:e1:a8:34:
         90:c1:d4:2b:54:6f:5a:f9:20:f1:68:cb:6b:50:98:37:2a:5c:
         f1:95:59:ef:47:d2:f0:5c:97:cd:0b:e9:4c:1f:83:1e:a6:25:
         2a:f5:e8:17:5d:39:c3:c9:97:40:d2:fe:1e:b4:c6:a2:ec:e8:
         0e:b6:89:e4:61:d8:03:9d:4d:bb:36:af:68:fe:c9:c2:04:1c:
         00:b8:14:1b:1e:0f:f9:7f:7a:75:3b:ef:76:0a:ea:87:57:79:
         54:95:0c:76:91:84:c5:c2:18:ef:57:f8:c5:ca:e2:70:e2:5a:
         60:93:58:e4:ba:75:06:de:ee:cc:17:63:db:e3:3c:4f:a2:bf:
         af:08:cf:67:0d:f4:6c:5e:e8:c7:ed:c5:c3:f8:de:f9:60:f1:
         36:10:32:31:39:fa:de:bd:59:7f:60:15:e0:59:39:2b:41:bd:
         ff:3d:24:1c:f2:b4:52:bf:1e:4a:46:19:dd:7d:8b:fb:9a:52:
         e9:9a:73:b8:b7:dd:73:d5:ad:62:e1:59:33:b2:27:d8:0d:32:
         46:50:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:09 2025 by rpki-client