Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e32392e302f32342d3234203d3e20323637393832.roa
File:                     34352e3136372e32392e302f32342d3234203d3e20323637393832.roa (raw, json)
Hash identifier:          SIbrx2B5742GrdoaylzjlpV8dfnFISkAsYh8SJnHtrY=
Subject key identifier:   0C:DF:6E:9D:AD:96:86:ED:17:67:B6:E5:8B:4F:88:31:74:9A:F7:53
Certificate issuer:       /CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
Certificate serial:       73BE452A6CD71632AFED6571BA279D41ADC1C3E6
Authority key identifier: 29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e32392e302f32342d3234203d3e20323637393832.roa
Signing time:             Tue 30 Sep 2025 19:05:39 +0000
ROA not before:           Tue 30 Sep 2025 19:00:39 +0000
ROA not after:            Tue 29 Sep 2026 19:05:39 +0000
asID:                     267982
IP address blocks:        45.167.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl
                          rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:be:45:2a:6c:d7:16:32:af:ed:65:71:ba:27:9d:41:ad:c1:c3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
        Validity
            Not Before: Sep 30 19:00:39 2025 GMT
            Not After : Sep 29 19:05:39 2026 GMT
        Subject: CN=0CDF6E9DAD9686ED1767B6E58B4F8831749AF753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:e5:76:ec:f0:7f:4c:3e:10:47:3a:82:f2:
                    e4:63:77:6b:98:5b:28:fe:10:42:92:de:d4:da:89:
                    36:04:e7:66:4e:2c:2a:bd:68:6e:75:81:98:35:06:
                    c8:26:9e:91:0a:21:dc:d5:48:40:d7:e6:23:20:ce:
                    ad:29:af:7a:d4:0b:15:9e:0b:12:e1:d0:61:0a:16:
                    4a:2a:d9:28:a8:e0:df:22:72:12:8b:a5:ba:0e:d7:
                    e9:41:5c:7b:32:a4:15:d5:4c:95:d7:90:e4:66:38:
                    04:3a:72:e6:ab:ef:14:ed:6d:a5:3c:f2:fa:e0:9f:
                    8b:72:3c:d4:26:b7:f5:39:5f:83:b7:00:15:ff:3a:
                    37:0f:a4:9a:68:f0:ca:6d:a0:84:96:8b:9d:97:ed:
                    42:17:25:f0:66:76:27:1b:9a:17:6c:88:68:3c:5b:
                    c2:aa:59:f0:1a:b4:bf:7c:ad:2f:94:91:d6:a3:5a:
                    f1:ec:75:6f:97:95:25:eb:2b:0d:60:ec:d1:07:3b:
                    41:cc:96:06:f0:a3:9b:45:2b:33:ff:8a:0d:8b:1c:
                    b3:0c:3e:81:9c:f5:7f:f9:73:f4:83:89:47:7b:c1:
                    6c:3c:18:ec:99:04:0d:57:30:4c:f5:4f:ef:0b:73:
                    dc:37:34:a8:fb:ae:d3:13:d7:66:8f:7b:e8:26:08:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DF:6E:9D:AD:96:86:ED:17:67:B6:E5:8B:4F:88:31:74:9A:F7:53
            X509v3 Authority Key Identifier:
                keyid:29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e32392e302f32342d3234203d3e20323637393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:86:bd:af:04:33:54:1c:34:3d:5c:47:a1:26:f1:b4:3d:58:
         38:09:44:6a:d1:63:24:2b:0e:b9:34:cb:a4:91:79:03:5d:a6:
         7c:98:eb:b4:3d:53:bc:0c:db:09:2b:65:91:5b:e0:a0:5f:f9:
         37:4d:41:17:ec:20:67:6c:07:9d:82:e4:04:f7:e6:1f:29:11:
         57:e7:98:4b:db:1d:ce:4a:c8:47:9c:7b:35:dd:5d:80:6f:33:
         04:1c:5e:14:d0:99:66:c2:c0:49:8f:44:0a:06:d1:68:a4:34:
         15:32:f4:e0:f9:6e:26:42:1e:54:61:fb:33:e1:c4:66:b1:2a:
         0a:0d:7b:08:99:ad:a1:48:ac:9e:54:dc:6d:70:da:84:84:c3:
         12:e5:d1:2c:b3:98:8a:00:e4:31:0c:b1:e5:da:32:02:98:18:
         03:e8:36:38:f2:50:b5:fc:3d:39:66:43:24:fb:03:b3:5a:1f:
         5e:be:40:04:1d:4b:03:9f:98:3c:98:70:3f:7a:7d:55:80:89:
         22:f9:ce:7e:b6:fa:7b:de:52:73:f2:18:a4:83:55:94:cd:2f:
         6c:67:69:1d:56:12:36:fd:5b:67:47:42:b1:28:bd:44:c1:3e:
         e7:f5:8a:ac:67:ed:11:04:78:00:52:15:2f:2d:8e:04:0d:5f:
         7c:09:05:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:14:08 2025 by rpki-client