Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e33312e302f32342d3234203d3e20323637393832.roa
File:                     34352e3136372e33312e302f32342d3234203d3e20323637393832.roa (raw, json)
Hash identifier:          +OID8zmPwy3mT3bvb0BNuZ4L5qjoc2Ytnj/J/WbPfUg=
Subject key identifier:   05:7E:83:14:61:9F:B9:3B:7A:FB:79:23:B5:ED:C1:1A:F5:A1:50:85
Certificate issuer:       /CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
Certificate serial:       5271559D06D368287B7FAC6947764A26B18816B5
Authority key identifier: 29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e33312e302f32342d3234203d3e20323637393832.roa
Signing time:             Tue 30 Sep 2025 19:05:39 +0000
ROA not before:           Tue 30 Sep 2025 19:00:39 +0000
ROA not after:            Tue 29 Sep 2026 19:05:39 +0000
asID:                     267982
IP address blocks:        45.167.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl
                          rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:71:55:9d:06:d3:68:28:7b:7f:ac:69:47:76:4a:26:b1:88:16:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
        Validity
            Not Before: Sep 30 19:00:39 2025 GMT
            Not After : Sep 29 19:05:39 2026 GMT
        Subject: CN=057E8314619FB93B7AFB7923B5EDC11AF5A15085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:cb:b0:1c:c0:e2:db:85:e7:3f:1e:b0:e8:
                    05:68:a1:20:c4:b4:9c:57:0a:37:6c:96:a9:f2:f1:
                    e4:97:62:92:9e:13:ce:1d:8d:5a:0c:2b:17:c5:41:
                    ac:db:72:71:e0:ac:de:bf:a6:8a:68:b9:b1:08:0b:
                    ac:25:19:a3:7a:19:c3:21:e8:5e:68:2a:15:1e:f5:
                    60:71:7d:27:5f:27:75:91:e6:de:d9:71:3c:d3:ba:
                    d6:27:7e:2d:a9:78:45:97:d8:31:c0:e3:18:4e:3d:
                    fb:94:4c:eb:d2:54:3d:28:33:20:32:7b:25:d4:63:
                    07:65:fc:a3:8a:12:0e:63:b0:5b:fb:7e:4e:10:65:
                    81:63:06:24:e3:f9:94:e1:0d:2f:c2:03:71:4b:93:
                    7b:42:48:63:c9:9c:97:ff:95:7f:49:b1:0d:1c:cb:
                    9f:af:81:6a:1c:5b:57:24:51:a8:08:9d:6f:fc:2d:
                    49:f7:7c:df:e4:13:18:6e:6e:dc:da:15:cd:9d:31:
                    b4:3e:60:5c:d6:68:f0:5e:2a:e6:4c:57:a8:ab:2e:
                    79:4c:f7:60:42:1f:7b:92:a4:14:6e:ef:d2:32:ed:
                    18:9f:59:81:9f:87:09:6a:0d:cc:f3:fa:f6:cc:94:
                    5c:5d:64:32:b7:22:61:d4:88:2e:d6:45:94:b8:bf:
                    54:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7E:83:14:61:9F:B9:3B:7A:FB:79:23:B5:ED:C1:1A:F5:A1:50:85
            X509v3 Authority Key Identifier:
                keyid:29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e33312e302f32342d3234203d3e20323637393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:5d:d2:8c:2c:bd:bd:c7:c7:4a:06:33:4c:e1:65:ae:0d:03:
         53:0b:f1:4c:91:bf:3a:ed:c9:fb:20:e8:78:0f:91:4d:7d:56:
         f9:b2:ec:a4:03:d8:72:d5:0a:de:97:78:fc:63:d9:0a:56:4a:
         f9:fc:9d:06:5a:59:3b:b5:46:68:75:6a:62:58:c4:06:f2:21:
         48:d8:f2:99:58:f0:c0:17:ad:81:77:08:cb:3f:bf:a5:8f:73:
         17:97:3f:3e:c5:fa:a9:ad:69:b3:0b:da:4b:3e:60:51:34:cb:
         2e:68:52:69:0f:04:f7:9a:f3:59:da:48:91:2f:71:8d:6d:f3:
         b8:5c:50:d3:71:73:9c:7b:c0:75:e8:c2:af:98:68:08:6b:ce:
         19:26:7c:36:23:ce:d2:ac:75:7e:72:ea:bf:18:fb:4f:d8:56:
         ec:aa:b9:ef:28:9a:2e:47:00:b2:8a:0a:39:fd:1b:de:4b:8f:
         47:74:59:bd:df:5f:57:6d:57:49:8f:ee:39:58:e1:34:51:27:
         3c:dc:aa:cf:3d:21:61:2e:6c:18:c2:77:43:a8:0c:0d:81:53:
         2b:0a:2f:d0:ca:5f:4c:d2:64:07:3d:0a:09:b6:c4:c8:5f:06:
         86:a0:37:e0:f7:6d:de:18:b6:05:88:df:e7:b2:43:83:d0:9a:
         92:c9:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:31:34 2025 by rpki-client