Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35332e302f32342d3234203d3e20323637333630.roa
File:                     34352e3233342e35332e302f32342d3234203d3e20323637333630.roa (raw, json)
Hash identifier:          LVmgQqqbS2elkZ2mqZGLVE/tgV89bc5fmf/LkO5Mkv8=
Subject key identifier:   F4:46:0A:46:B8:6A:CD:E8:E3:D4:63:8F:2B:5A:0A:78:44:AD:FE:8B
Certificate issuer:       /CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
Certificate serial:       70016FE5C0753A7CF49EDF9DA0EC4A6A688BF2F5
Authority key identifier: 29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35332e302f32342d3234203d3e20323637333630.roa
Signing time:             Tue 07 Oct 2025 19:35:10 +0000
ROA not before:           Tue 07 Oct 2025 19:30:10 +0000
ROA not after:            Tue 06 Oct 2026 19:35:10 +0000
asID:                     267360
IP address blocks:        45.234.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl
                          rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:01:6f:e5:c0:75:3a:7c:f4:9e:df:9d:a0:ec:4a:6a:68:8b:f2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
        Validity
            Not Before: Oct  7 19:30:10 2025 GMT
            Not After : Oct  6 19:35:10 2026 GMT
        Subject: CN=F4460A46B86ACDE8E3D4638F2B5A0A7844ADFE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:13:33:6b:24:82:ef:14:ed:bf:78:bf:32:
                    d9:bc:2c:bb:b8:70:0f:cb:54:9c:78:dc:56:3d:df:
                    28:a9:8a:d4:af:34:c5:29:1c:12:da:ca:96:75:44:
                    10:98:5e:f8:86:51:f5:38:1d:56:02:fd:2f:b4:7a:
                    d8:1f:4c:cc:8f:3a:60:ad:44:eb:ec:85:40:7d:0f:
                    32:bc:65:4f:ff:c4:38:ad:68:db:ca:41:04:14:d1:
                    83:b6:cb:50:a0:0b:d8:32:5a:65:01:fd:d1:6c:96:
                    35:b2:3e:ea:10:5c:8c:4f:5c:20:c3:8b:63:fe:02:
                    c6:8e:52:70:2a:61:b8:44:92:b0:f3:27:ab:e3:cb:
                    f8:e9:46:ae:e3:cd:37:64:4b:b6:77:d1:68:16:90:
                    a9:5a:0f:10:a9:40:05:83:0d:37:69:04:3a:95:e1:
                    f4:84:74:48:a8:e1:8a:06:cd:fb:d0:8d:74:d3:f3:
                    45:14:e2:42:8e:84:90:88:ab:7d:98:d6:be:80:3e:
                    9c:aa:12:5c:82:97:d8:76:34:3a:b9:59:91:b8:ff:
                    be:fe:5f:85:73:e5:62:97:b0:51:54:00:45:5e:2b:
                    da:e7:f4:14:2b:d2:14:38:0a:73:ba:4e:80:47:ed:
                    b4:90:e2:f3:d1:fa:15:6a:8e:d9:7e:c2:50:c6:e6:
                    7a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:46:0A:46:B8:6A:CD:E8:E3:D4:63:8F:2B:5A:0A:78:44:AD:FE:8B
            X509v3 Authority Key Identifier:
                keyid:29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35332e302f32342d3234203d3e20323637333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:cc:28:a8:e6:3b:a7:80:16:f8:91:4b:5c:70:ce:f2:11:f2:
         1b:26:b1:17:d5:ce:a7:08:16:3d:20:02:40:70:75:60:47:9b:
         61:cf:a5:5a:c4:24:18:3e:02:41:0d:a8:77:a5:5f:0e:9d:f6:
         16:94:3a:fe:bf:50:ae:df:c9:23:8c:47:f5:8b:f1:35:ee:bf:
         2f:9d:c1:6e:3c:82:10:a6:fa:3f:f2:65:10:7d:7d:e2:78:0c:
         61:29:e1:93:60:95:ef:5c:be:b8:5e:76:53:5a:f5:a4:40:ec:
         71:19:13:1f:6a:32:c6:6a:4a:5a:3e:48:16:43:71:15:1b:45:
         fe:1c:f5:aa:6d:c0:ee:17:ae:d1:87:9b:4d:db:1b:13:00:0d:
         52:5a:39:40:8e:5b:40:3e:55:14:62:1c:0e:43:aa:49:b8:b4:
         a3:5b:c1:50:cd:b1:bc:dd:fa:96:44:cd:aa:8d:77:2d:cf:d8:
         f1:86:eb:20:6f:d3:57:78:63:00:2c:5d:ab:08:af:6a:56:6b:
         ac:7b:23:1a:ea:da:61:50:d0:14:d1:bd:58:9e:24:6a:d3:73:
         48:6c:70:58:e4:4e:8b:eb:51:b3:26:48:98:fb:ce:56:44:18:
         24:05:43:27:58:77:3b:14:3e:7f:1d:aa:cc:8a:c7:54:8a:3c:
         a5:75:7f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:23 2025 by rpki-client