Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35352e302f32342d3234203d3e20323637333630.roa
File:                     34352e3233342e35352e302f32342d3234203d3e20323637333630.roa (raw, json)
Hash identifier:          VYcyk8N9kBs9oj2H1brliUrALhn8hDxTcIS107klMO4=
Subject key identifier:   CE:01:1F:BA:B2:07:2E:FF:1D:12:2F:37:0B:FD:3B:98:2B:C4:97:F7
Certificate issuer:       /CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
Certificate serial:       0CEC2D5FF61915CA72EFAA822517AFF63D2D0BA6
Authority key identifier: 29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35352e302f32342d3234203d3e20323637333630.roa
Signing time:             Tue 07 Oct 2025 19:35:09 +0000
ROA not before:           Tue 07 Oct 2025 19:30:09 +0000
ROA not after:            Tue 06 Oct 2026 19:35:09 +0000
asID:                     267360
IP address blocks:        45.234.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl
                          rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ec:2d:5f:f6:19:15:ca:72:ef:aa:82:25:17:af:f6:3d:2d:0b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
        Validity
            Not Before: Oct  7 19:30:09 2025 GMT
            Not After : Oct  6 19:35:09 2026 GMT
        Subject: CN=CE011FBAB2072EFF1D122F370BFD3B982BC497F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:2b:fe:ec:6d:38:10:09:af:ed:a4:6e:11:
                    71:2b:b0:4b:5d:6a:d5:f6:7a:8d:fa:60:77:eb:1d:
                    12:1b:54:bd:be:9c:16:a5:fe:11:a7:b6:ae:b7:d9:
                    e2:14:3e:0e:74:e9:c9:ec:90:86:25:3e:65:10:37:
                    31:8a:03:74:5b:8c:33:21:66:ba:17:bd:fc:02:37:
                    13:3c:9f:d0:9f:b3:ff:36:31:68:ca:eb:73:69:7f:
                    66:d0:86:be:60:ab:95:39:c7:72:06:92:bc:85:d5:
                    b0:fe:50:ff:59:b3:02:36:ef:0f:91:f2:11:e0:6b:
                    ff:cb:05:1b:48:7c:5b:dd:81:4d:3b:6e:2b:e0:58:
                    4d:95:de:af:c5:dd:d3:21:57:39:d5:13:fa:26:90:
                    89:c0:9b:09:be:65:a4:a2:29:d3:79:11:5c:aa:21:
                    e5:43:17:dd:dc:5a:3d:72:b3:4d:45:c2:18:19:e6:
                    9e:35:f8:2d:59:e8:cb:94:d1:dd:26:02:80:61:e1:
                    30:ec:39:79:a4:29:94:ba:1f:22:bc:2e:c4:d6:f9:
                    c2:2b:2f:c2:e1:9d:46:b9:9d:ca:de:00:b1:5f:fe:
                    fa:a9:c3:02:35:61:81:66:57:c1:8e:b0:c8:80:b0:
                    88:10:c7:84:4d:a9:f3:0d:e0:f2:f9:24:eb:a9:37:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:01:1F:BA:B2:07:2E:FF:1D:12:2F:37:0B:FD:3B:98:2B:C4:97:F7
            X509v3 Authority Key Identifier:
                keyid:29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/34352e3233342e35352e302f32342d3234203d3e20323637333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:03:fa:ca:75:a4:6a:fb:34:3c:a4:e9:08:2e:9f:b2:02:df:
         f3:a6:dd:c0:b4:05:e3:4e:f6:33:44:29:5e:2a:0f:5d:0d:d8:
         cb:df:d3:de:64:ec:a4:9b:3d:cb:af:84:4b:a8:53:24:9b:40:
         60:46:be:fc:f3:5b:46:bf:f4:5d:c7:af:6f:e5:1b:d2:db:47:
         da:65:a7:84:4c:da:7a:a0:50:55:ce:2d:ca:0b:49:45:7a:32:
         e1:c3:cf:b8:90:09:34:3e:4e:9e:85:9e:49:af:ad:a4:32:98:
         2b:bc:5d:fe:53:42:db:9c:c8:84:7d:b5:46:f2:c9:88:fc:9f:
         55:55:0b:d1:ef:1a:a1:4f:4f:7f:9e:d2:05:bc:07:6c:bd:92:
         b7:ba:f6:91:7b:a2:68:57:b2:a7:4f:17:f7:bb:bc:b9:4d:1a:
         a2:8b:79:24:ee:79:86:ca:0b:39:60:0c:20:63:ab:04:ba:dd:
         41:60:cb:77:39:af:25:67:e2:7d:f4:16:2b:a9:69:1c:fc:ec:
         fb:89:b2:3a:92:df:73:dc:0f:25:b1:f7:09:ae:78:05:a1:a3:
         4a:72:1b:99:42:8e:32:99:5e:dc:3b:f1:09:e7:a3:1f:40:d5:
         b1:a6:bc:6d:e1:99:fe:80:3d:15:83:80:57:12:65:5b:63:0e:
         33:98:ab:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:23 2025 by rpki-client