Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32342d3234203d3e20323638303530.roa
File:                     34352e3136372e34342e302f32342d3234203d3e20323638303530.roa (raw, json)
Hash identifier:          bMR89hrvvP8DXXQQoXsS2lNkIaUeLBjSaEJGV1P0brY=
Subject key identifier:   73:8D:27:EE:58:28:4E:E8:8B:96:8D:E8:5C:4B:60:FD:34:1F:2D:A0
Certificate issuer:       /CN=9E4879406B65EF8221038D32E538827A3EECF4BA
Certificate serial:       6812C6DC21AD7AF8A2D88BDB3148949167436C89
Authority key identifier: 9E:48:79:40:6B:65:EF:82:21:03:8D:32:E5:38:82:7A:3E:EC:F4:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4879406B65EF8221038D32E538827A3EECF4BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32342d3234203d3e20323638303530.roa
Signing time:             Mon 29 Sep 2025 17:29:02 +0000
ROA not before:           Mon 29 Sep 2025 17:24:02 +0000
ROA not after:            Mon 28 Sep 2026 17:29:02 +0000
asID:                     268050
IP address blocks:        45.167.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.crl
                          rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4879406B65EF8221038D32E538827A3EECF4BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:12:c6:dc:21:ad:7a:f8:a2:d8:8b:db:31:48:94:91:67:43:6c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E4879406B65EF8221038D32E538827A3EECF4BA
        Validity
            Not Before: Sep 29 17:24:02 2025 GMT
            Not After : Sep 28 17:29:02 2026 GMT
        Subject: CN=738D27EE58284EE88B968DE85C4B60FD341F2DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:6a:3b:08:b4:84:e0:ed:07:e0:65:e1:05:
                    63:20:13:51:34:55:ab:fe:e6:45:6a:8b:c2:07:2f:
                    c0:bb:ab:60:44:37:17:ec:98:a0:24:80:60:29:86:
                    7a:49:15:d4:91:16:21:de:29:c7:c5:86:be:67:2a:
                    4d:9c:8d:15:40:a0:fb:43:88:4e:46:aa:d9:13:3c:
                    47:cb:11:f1:6f:83:74:58:0b:02:ec:6e:8c:37:b4:
                    02:64:b0:85:34:b4:ab:fc:83:74:2f:39:c1:35:c3:
                    af:24:3a:84:50:7c:61:1c:c3:3e:45:07:fd:51:1a:
                    d4:62:63:76:14:7d:d3:8a:d1:ce:dd:c1:e8:5e:66:
                    5a:19:b1:d8:88:64:25:2a:dc:e3:22:79:48:7e:53:
                    79:ec:86:5f:3c:e9:8e:6c:2b:0b:66:62:49:d7:92:
                    ce:1b:1e:b5:74:83:d4:8a:81:00:9b:00:22:c3:1a:
                    c3:34:57:66:29:f1:b7:ce:db:99:40:b1:93:1f:c4:
                    1e:2b:9b:01:69:70:6a:60:7d:11:dc:39:10:1f:ca:
                    64:cb:4e:18:d8:f6:45:66:d1:b7:a6:ac:af:0a:b8:
                    92:b6:30:dd:5d:3c:41:70:67:0a:11:02:23:84:26:
                    23:cb:b9:15:cf:18:18:8c:e0:b7:e5:42:52:1e:cd:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8D:27:EE:58:28:4E:E8:8B:96:8D:E8:5C:4B:60:FD:34:1F:2D:A0
            X509v3 Authority Key Identifier:
                keyid:9E:48:79:40:6B:65:EF:82:21:03:8D:32:E5:38:82:7A:3E:EC:F4:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4879406B65EF8221038D32E538827A3EECF4BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/34352e3136372e34342e302f32342d3234203d3e20323638303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:7e:15:ed:25:45:5f:9c:40:3a:c8:c3:4e:f1:eb:47:a9:a0:
         cd:1e:fb:ba:60:7e:53:58:f8:83:75:c1:a6:66:df:9b:a0:65:
         e8:dc:41:46:c4:bb:69:77:17:04:44:98:82:e4:f3:f0:68:e5:
         49:8d:93:92:a0:1d:19:00:8b:06:ad:46:e6:36:24:0d:23:5e:
         8c:34:3c:9d:91:fa:6f:24:65:40:46:c5:c8:c8:37:34:db:ce:
         81:09:07:8e:97:15:01:ba:ec:ee:d2:89:35:b4:18:0c:1f:12:
         7f:40:08:79:4e:8a:4d:03:e1:ea:4b:21:07:1f:63:f5:8f:98:
         45:89:28:4e:59:82:b6:a8:15:f4:83:df:aa:6d:69:2f:55:93:
         46:3c:97:47:64:c1:45:fa:ec:f8:14:2b:5d:94:0e:68:ea:2d:
         58:b7:55:00:56:91:dc:35:ef:a0:32:be:45:36:76:df:c0:f2:
         b9:fb:72:5b:94:2e:33:20:37:af:59:57:2f:cd:90:96:d6:ef:
         a6:c8:f9:fb:a5:35:27:f2:1d:5e:4f:ee:33:18:06:14:2a:d2:
         db:2e:1e:d6:97:70:ae:fc:06:bd:f3:ae:d8:ea:7d:05:69:5c:
         5b:e9:ba:19:93:d3:a8:fc:e7:6a:e0:09:54:d0:13:24:6a:28:
         45:1b:52:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:14:11 2025 by rpki-client