Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36362e302f32342d3234203d3e20323639313731.roa
File:                     34352e3138312e36362e302f32342d3234203d3e20323639313731.roa (raw, json)
Hash identifier:          W542m5GQoXmQIZplSLrF+CDrCcT94b07lmVdItmp8Yg=
Subject key identifier:   EE:5B:29:EB:14:0A:9F:DB:EA:7B:ED:94:C0:51:7D:21:9D:48:97:0B
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       3FF2A858C9649B2176873CDA2CFAF59218A15EE6
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36362e302f32342d3234203d3e20323639313731.roa
Signing time:             Mon 25 Aug 2025 18:37:54 +0000
ROA not before:           Mon 25 Aug 2025 18:32:54 +0000
ROA not after:            Mon 24 Aug 2026 18:37:54 +0000
asID:                     269171
IP address blocks:        45.181.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f2:a8:58:c9:64:9b:21:76:87:3c:da:2c:fa:f5:92:18:a1:5e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Aug 25 18:32:54 2025 GMT
            Not After : Aug 24 18:37:54 2026 GMT
        Subject: CN=EE5B29EB140A9FDBEA7BED94C0517D219D48970B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:e0:05:08:42:2f:49:7f:0f:2a:6c:a2:aa:
                    93:14:64:21:d3:04:43:85:6c:04:8e:cd:bc:82:a8:
                    f9:8f:9c:44:5e:9d:f4:9f:1a:07:b8:08:d7:e8:e9:
                    97:6d:fe:e3:57:dc:19:93:80:2a:52:88:ab:f5:58:
                    7e:67:2d:75:ab:25:ba:94:ef:cb:4d:c3:42:d6:1b:
                    48:44:72:32:70:01:3a:4e:57:31:fb:9c:c4:70:65:
                    f7:0d:85:9b:22:52:17:34:37:38:f5:c4:8c:7b:6c:
                    51:3e:f5:8b:2a:e8:08:5d:30:2c:9c:0a:59:29:f5:
                    c3:23:b5:6e:f9:e7:ff:ba:69:1a:c8:d3:23:92:cf:
                    7a:35:3f:df:34:c2:90:1d:9b:34:8e:18:2d:97:58:
                    3b:99:be:c7:ae:1e:e2:41:18:7e:be:50:bf:cf:0e:
                    c9:08:28:a6:30:7f:ed:9c:19:c5:55:73:4e:a9:0c:
                    cd:af:6c:7f:b9:10:b7:3a:f4:2b:2d:1a:f0:80:9b:
                    e6:f0:84:ca:0f:78:c0:eb:65:7c:3b:81:75:a3:4b:
                    ac:bf:0d:c4:11:65:93:1f:bf:2e:e4:49:f7:ce:d7:
                    34:a3:f8:f0:90:02:14:09:35:06:9a:d8:3b:dd:31:
                    e4:a7:5c:f6:2c:03:3b:49:fd:b8:a1:23:7c:48:07:
                    7f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5B:29:EB:14:0A:9F:DB:EA:7B:ED:94:C0:51:7D:21:9D:48:97:0B
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36362e302f32342d3234203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:68:8f:0e:32:45:93:53:f8:fe:c6:26:14:50:fa:04:70:f7:
         1a:ef:61:49:4f:ae:d9:53:de:9c:ed:15:05:20:0a:0a:99:83:
         ec:c4:09:22:3b:a6:ee:91:12:f7:78:93:a1:8c:29:22:98:ef:
         ad:84:b5:b7:5e:c8:b8:b4:01:e6:0d:83:db:6f:9b:df:27:5a:
         03:73:79:78:f7:58:8e:63:9f:11:24:2d:36:4a:6f:ad:6d:43:
         3d:c9:16:af:fd:9f:28:15:b7:59:77:8d:e1:af:e4:e2:1a:53:
         37:a8:cf:4a:22:96:98:d9:8d:e2:42:9b:3f:2a:d4:98:9a:43:
         fd:02:98:35:f3:fd:9c:77:76:39:78:c4:9f:61:2b:b6:25:46:
         d6:9b:0a:bd:ec:e2:cd:43:0f:72:83:f7:3d:f1:da:ff:04:b9:
         50:19:02:80:b9:04:3b:5e:29:13:9b:eb:25:9a:e6:4f:d7:77:
         d0:f6:59:61:5a:84:19:43:c7:22:56:2f:b3:75:4b:43:9e:a2:
         87:8e:66:4c:49:e3:a9:06:b4:f7:0c:a6:a4:db:50:17:cd:8a:
         9c:6a:e9:db:b8:5f:0e:1d:e1:cb:97:26:8c:76:28:f5:fb:af:
         ef:21:38:fc:41:da:11:9a:fc:86:1f:cb:21:db:8a:b4:24:83:
         b1:7d:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:07:48 2025 by rpki-client