Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa
File:                     34352e3136312e32332e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier:          L+Qb68oKLljVQz7SdZNTQj4XlE9OAhJMPy9WKcpvPm0=
Subject key identifier:   7F:79:1D:F9:68:43:6D:7D:FB:11:80:71:4E:8B:8A:37:EE:51:A5:31
Certificate issuer:       /CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Certificate serial:       2C1CC516F2FB21EE9DDB8F7B86F66B0E7F86F7BB
Authority key identifier: 70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa
Signing time:             Wed 01 Oct 2025 18:01:38 +0000
ROA not before:           Wed 01 Oct 2025 17:56:38 +0000
ROA not after:            Wed 30 Sep 2026 18:01:38 +0000
asID:                     268440
IP address blocks:        45.161.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1c:c5:16:f2:fb:21:ee:9d:db:8f:7b:86:f6:6b:0e:7f:86:f7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
        Validity
            Not Before: Oct  1 17:56:38 2025 GMT
            Not After : Sep 30 18:01:38 2026 GMT
        Subject: CN=7F791DF968436D7DFB1180714E8B8A37EE51A531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:86:52:1a:c8:ab:53:e7:6e:98:82:6f:4c:2f:
                    1b:4f:db:d3:26:13:4d:1b:f6:ca:f6:5d:b6:68:56:
                    68:61:1f:66:28:e1:0b:49:40:c9:84:0d:f0:57:a6:
                    57:a9:9b:eb:38:ab:8d:e6:2a:23:30:60:6e:bb:23:
                    e8:35:f5:3d:04:a0:03:91:d4:98:03:66:ac:b1:8e:
                    cf:44:db:32:fd:be:2a:4e:54:48:c2:a6:dc:b9:fb:
                    64:5d:7b:75:c5:64:45:1c:0d:ed:f2:22:49:df:69:
                    7c:71:f2:d3:0b:78:a0:96:56:69:a2:ee:ff:be:4f:
                    1c:9f:d4:58:a0:ed:46:0f:b6:46:a3:aa:86:bb:73:
                    ed:8e:64:e8:8e:26:a1:b7:4e:ca:ec:3e:00:f3:ac:
                    bc:c6:bd:08:33:5c:25:93:37:8d:61:55:dc:12:3c:
                    3f:23:ac:cd:ce:c9:51:54:7b:8a:6c:b6:81:56:d4:
                    3a:ff:12:97:4c:73:b2:ab:02:d3:18:5f:83:c2:32:
                    de:1f:f8:dd:09:eb:ed:77:c1:6b:91:0b:9e:ae:94:
                    5b:17:ab:07:f9:a8:d7:2a:d5:e6:d7:48:12:5e:8e:
                    66:b3:ba:fa:de:50:16:1d:fb:47:67:ed:d0:bd:fd:
                    24:fe:51:2e:be:7e:02:d5:a4:49:58:9a:34:68:3b:
                    fc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:79:1D:F9:68:43:6D:7D:FB:11:80:71:4E:8B:8A:37:EE:51:A5:31
            X509v3 Authority Key Identifier:
                keyid:70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:6a:c7:cf:3f:1f:74:98:ba:26:ec:7a:e7:ee:25:8d:dd:53:
         5a:00:91:1b:8f:26:f4:34:5b:50:54:ef:4a:da:83:3d:7c:31:
         db:82:e2:d1:fd:7d:5d:1c:77:78:c8:d1:fc:0b:92:57:dd:60:
         e4:51:18:1f:7e:bc:82:b8:7e:e2:4d:3e:55:ff:98:ce:2d:4e:
         7c:9d:12:b7:67:41:7f:13:af:63:e8:43:d2:41:93:db:14:83:
         1e:45:ba:5d:ad:a0:04:8e:49:6b:33:69:05:db:86:b2:7a:fd:
         1b:8f:b9:7a:bd:c7:86:4c:67:01:11:49:0d:49:a7:d8:a0:4d:
         02:b2:8d:fb:d1:19:cb:fc:57:28:68:87:ae:55:15:66:73:59:
         74:c9:f9:a9:0e:11:c2:97:28:d1:2f:5f:3f:8a:59:56:3f:6b:
         3f:e6:b0:3d:a5:c9:f3:ff:0d:7a:97:a3:5a:07:cc:a0:3b:2b:
         ad:2d:02:07:bf:72:3d:19:61:b1:c2:09:8a:5b:f3:ed:ed:ce:
         39:05:e0:a3:fd:cc:a4:21:7c:88:9a:e7:7d:00:42:0a:2d:ac:
         f7:ce:8f:9a:74:50:4d:f0:a6:7e:b3:00:aa:6e:83:ca:12:e4:
         4e:56:5e:d5:50:99:fd:8a:34:f0:8d:d8:dc:00:c0:e6:ba:15:
         80:d5:c0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:15:41 2025 by rpki-client