Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35322e302f32342d3234203d3e20323637333630.roa
File:                     34352e3233342e35322e302f32342d3234203d3e20323637333630.roa (raw, json)
Hash identifier:          JtM1U2RJ5LKQmmHfCEhbcOTZcB1t+ZFZbkF5tvO/TSg=
Subject key identifier:   0C:70:D9:14:23:66:08:1D:71:84:63:6D:EB:24:F7:86:6E:4E:C9:F3
Certificate issuer:       /CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
Certificate serial:       5B14741A7A190008C0A9EF9D5457F073E5C95E3C
Authority key identifier: 29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35322e302f32342d3234203d3e20323637333630.roa
Signing time:             Tue 07 Oct 2025 19:35:10 +0000
ROA not before:           Tue 07 Oct 2025 19:30:10 +0000
ROA not after:            Tue 06 Oct 2026 19:35:10 +0000
asID:                     267360
IP address blocks:        45.234.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl
                          rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:14:74:1a:7a:19:00:08:c0:a9:ef:9d:54:57:f0:73:e5:c9:5e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
        Validity
            Not Before: Oct  7 19:30:10 2025 GMT
            Not After : Oct  6 19:35:10 2026 GMT
        Subject: CN=0C70D9142366081D7184636DEB24F7866E4EC9F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:c0:c9:be:37:3e:03:8d:08:80:ab:df:8d:
                    9d:80:9e:30:c1:f7:69:64:f7:76:ae:3a:28:c1:ed:
                    fe:fc:e3:1a:52:bf:83:c6:31:62:6e:da:e5:ad:94:
                    b5:88:0d:6c:1b:a6:e9:18:40:4d:8f:08:e2:e1:b7:
                    9f:c7:ef:82:ef:5a:d0:81:e9:dc:63:8e:25:f4:aa:
                    4c:b6:9c:49:71:b0:9f:5f:41:42:6e:d4:30:27:c7:
                    11:ff:7c:60:82:a9:47:48:01:14:ee:15:6b:83:67:
                    2b:1f:b3:f8:c6:93:34:fb:8a:31:58:31:97:7e:64:
                    7d:80:18:27:81:b8:d2:7f:19:0f:da:e4:79:1e:7e:
                    d0:08:84:90:bc:d8:9d:c0:fd:af:3f:54:da:bd:3c:
                    7c:10:54:2d:10:d9:29:55:2a:e1:5b:c3:c2:e8:e2:
                    5a:67:9f:06:d5:fc:7d:5f:b4:5a:15:3d:3b:67:8a:
                    c5:35:60:79:11:b4:e0:71:c9:67:68:81:65:da:05:
                    bc:5f:aa:ff:ae:31:95:66:62:a4:31:0d:7f:9d:a6:
                    eb:af:de:da:48:2d:26:78:08:87:ef:cc:ac:4b:53:
                    2b:5b:e1:ca:c6:cd:fa:00:a4:2d:21:af:c3:a6:3d:
                    2f:a6:4e:48:c7:a8:71:ef:79:e0:cb:2f:ea:73:9e:
                    95:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:70:D9:14:23:66:08:1D:71:84:63:6D:EB:24:F7:86:6E:4E:C9:F3
            X509v3 Authority Key Identifier:
                keyid:29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35322e302f32342d3234203d3e20323637333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b5:d9:89:63:31:3e:80:90:1c:e5:6d:27:05:78:1b:66:f6:
         17:43:d1:86:bb:2d:75:71:0f:53:dd:a6:40:51:67:cc:21:d3:
         67:55:d5:35:45:9e:48:ef:58:26:ce:8c:3c:ed:3b:0b:9a:37:
         3e:05:c6:d8:c1:fe:e5:b9:ae:86:2c:d7:29:9b:fd:a6:27:27:
         08:f1:7c:19:5e:1d:03:c5:c4:82:25:4f:0a:ee:82:23:99:86:
         8d:21:90:6d:31:b4:83:6b:61:31:57:47:02:fb:b6:09:8e:a1:
         87:b7:d2:62:26:74:d5:d6:bb:df:7e:62:54:a2:48:64:f2:3e:
         1a:8c:8e:1d:4d:ed:31:9c:ed:c4:7d:22:1e:07:13:11:f6:69:
         12:df:11:cc:fa:44:08:06:df:7e:df:72:68:0d:c0:5c:53:d7:
         c2:03:c5:ee:11:f6:ff:e2:5c:e3:df:93:d9:7c:f8:c0:bd:83:
         88:19:0a:6d:27:62:52:66:bc:ed:ad:34:ad:2b:8c:f5:75:e5:
         17:05:07:1a:e3:00:17:3a:84:5c:4a:83:27:a0:5b:6d:24:99:
         97:53:a4:f0:d2:41:89:65:4c:9a:d8:63:13:82:86:5a:a8:d6:
         9d:dc:e1:f9:6b:95:a5:12:58:e9:b4:f1:7e:fa:c7:a8:26:b0:
         2f:04:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:24 2025 by rpki-client