Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa
File:                     34352e3136312e32302e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier:          QXOWosaoZUnOff/366m5+VXqxvO9oKo3qAcNaj++9vs=
Subject key identifier:   92:47:60:B2:38:31:C9:AB:68:14:47:D1:C5:66:A4:D7:F8:50:DB:36
Certificate issuer:       /CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Certificate serial:       19C276CE4FC45B93E426793E838609075F1EE8E9
Authority key identifier: 70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa
Signing time:             Wed 01 Oct 2025 18:01:37 +0000
ROA not before:           Wed 01 Oct 2025 17:56:37 +0000
ROA not after:            Wed 30 Sep 2026 18:01:37 +0000
asID:                     268440
IP address blocks:        45.161.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c2:76:ce:4f:c4:5b:93:e4:26:79:3e:83:86:09:07:5f:1e:e8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
        Validity
            Not Before: Oct  1 17:56:37 2025 GMT
            Not After : Sep 30 18:01:37 2026 GMT
        Subject: CN=924760B23831C9AB681447D1C566A4D7F850DB36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:a2:8a:fc:4f:3e:54:c9:8a:78:58:41:53:
                    62:ff:e1:f4:76:72:05:fa:6a:aa:64:0d:d0:0a:b0:
                    87:e7:53:fd:50:30:17:c0:00:e4:83:57:d8:da:3f:
                    e5:d3:f1:30:e3:09:d5:ab:cb:44:a5:a6:41:d9:51:
                    a4:5b:04:af:71:6d:3b:2c:a0:f7:a3:d8:cf:79:1b:
                    a4:1f:6b:22:de:17:bc:19:25:bb:99:32:89:8b:23:
                    f5:89:f2:f1:0d:41:6e:73:39:47:e5:85:3d:b9:fa:
                    67:75:1c:40:d5:b0:02:2c:16:5b:82:1c:44:69:4b:
                    f8:c3:4a:0c:3f:cf:a0:8d:2e:03:86:e8:eb:37:31:
                    13:a0:1e:6a:f0:f5:3c:7c:56:d8:36:6e:d9:53:30:
                    78:58:ab:db:ad:f5:53:e0:b2:ff:6e:d3:c0:e6:aa:
                    10:a5:02:4f:33:0a:3d:3c:51:e7:66:ec:71:42:2e:
                    e6:b8:46:fa:f1:f1:fa:21:c7:09:21:88:9f:72:45:
                    77:b5:56:84:a4:72:5f:3b:c3:56:05:33:84:52:ba:
                    fa:5a:6a:eb:9b:6b:9c:d9:1c:8c:4a:84:d9:9b:00:
                    2d:de:c5:86:f7:6a:d0:84:86:b8:04:fa:ee:8c:ea:
                    4c:82:6f:95:0b:49:74:f2:15:d8:12:ac:ef:5d:ca:
                    69:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:47:60:B2:38:31:C9:AB:68:14:47:D1:C5:66:A4:D7:F8:50:DB:36
            X509v3 Authority Key Identifier:
                keyid:70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:b3:91:69:94:ff:d9:89:c3:50:1e:09:5e:c7:f5:2a:b7:13:
         94:1a:4c:21:ef:52:4c:b8:4f:7f:a0:97:f3:a8:7b:bc:51:5c:
         9a:e2:65:4f:0c:45:c7:12:e0:d1:83:f8:98:c1:91:87:6c:74:
         a7:68:a6:2f:24:f1:45:db:f6:a8:2c:6d:2e:e1:b7:f1:56:72:
         65:e8:b0:11:25:e7:ab:65:3c:32:0e:2e:e6:3b:b5:1c:32:b5:
         40:52:af:b0:db:47:af:0d:34:62:13:c9:e8:d3:e2:a0:1c:bb:
         b7:38:42:91:64:42:b0:e1:7b:66:dd:13:1b:eb:a0:40:a3:ac:
         8f:da:49:2d:17:6b:56:18:31:61:d5:e7:46:54:50:65:63:f0:
         87:7b:16:23:ee:f5:50:4c:64:15:03:36:c0:05:f7:bb:27:18:
         cb:15:4d:7e:99:ae:d8:46:72:1e:e6:6b:e9:9f:b2:11:55:27:
         5e:2f:a8:91:dd:e9:d0:17:17:22:3e:8b:d2:00:4b:4c:58:fc:
         84:92:0b:15:29:f6:ee:a0:7d:9b:40:1f:9e:aa:e9:b1:49:86:
         0f:be:df:33:1f:b6:ba:e8:2a:39:98:a6:d3:20:79:38:7a:af:
         bc:cb:75:cc:6d:93:0e:28:4b:8d:15:bd:65:e0:84:71:62:b2:
         b0:d7:33:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:15:38 2025 by rpki-client