Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          SA9XkBbXl0QpEJTwNStnB1QgrfzkzxBvQuIjlwgyYys=
Subject key identifier:   08:CF:29:B9:5E:CA:6C:B4:66:FD:32:6C:D4:AB:96:65:C2:A1:1E:2D
Certificate issuer:       /CN=B80B3D409568864C2E08D130EA89092DD8E7CEC7
Certificate serial:       23F7AA36DBEE9552CE4B47664CC47AEADC57C973
Authority key identifier: B8:0B:3D:40:95:68:86:4C:2E:08:D1:30:EA:89:09:2D:D8:E7:CE:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80B3D409568864C2E08D130EA89092DD8E7CEC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa
Signing time:             Wed 08 Oct 2025 19:29:26 +0000
ROA not before:           Wed 08 Oct 2025 19:24:26 +0000
ROA not after:            Wed 07 Oct 2026 19:29:26 +0000
asID:                     267035
IP address blocks:        45.227.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/B80B3D409568864C2E08D130EA89092DD8E7CEC7.crl
                          rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/B80B3D409568864C2E08D130EA89092DD8E7CEC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80B3D409568864C2E08D130EA89092DD8E7CEC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f7:aa:36:db:ee:95:52:ce:4b:47:66:4c:c4:7a:ea:dc:57:c9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80B3D409568864C2E08D130EA89092DD8E7CEC7
        Validity
            Not Before: Oct  8 19:24:26 2025 GMT
            Not After : Oct  7 19:29:26 2026 GMT
        Subject: CN=08CF29B95ECA6CB466FD326CD4AB9665C2A11E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:42:bc:de:08:0c:60:86:7a:86:a6:e2:2d:
                    72:37:47:0e:2d:2d:ac:ff:09:7a:20:30:dd:06:69:
                    ae:a4:23:e8:10:79:14:14:22:ab:af:fb:8f:c8:0a:
                    74:e0:37:cb:41:67:33:29:92:e0:eb:6e:d8:72:92:
                    e6:22:22:f4:c5:b6:b5:c3:d5:80:3e:8a:d3:05:9b:
                    b9:6c:2a:8e:c7:a0:53:75:bf:74:e8:c5:26:2b:f1:
                    7e:ee:a5:38:94:5f:ab:46:e2:ca:c9:06:25:5c:36:
                    31:ef:df:12:5f:82:d1:5a:94:e9:c1:75:3e:cf:7d:
                    76:13:a1:ce:16:15:07:5c:36:5f:4c:ac:c9:41:c9:
                    4d:a0:78:dc:10:97:b2:51:db:c1:43:4c:11:66:36:
                    b8:51:23:cf:43:7c:f3:ca:3c:eb:4a:e3:00:9b:38:
                    3e:49:6c:25:61:de:cc:7d:c1:ee:12:fc:c2:f1:f0:
                    30:b5:b0:d8:ea:4e:52:cc:12:a1:c5:39:53:ce:f9:
                    e8:6d:3c:19:53:27:b1:70:90:87:15:b8:0d:29:10:
                    6f:20:1b:0d:6e:dc:28:23:6f:8b:8a:7e:e0:d2:78:
                    cb:5e:e6:38:89:96:0c:05:a3:a8:76:c3:c1:be:9e:
                    7c:ce:08:48:9c:84:46:ee:c5:99:76:cf:bc:13:be:
                    34:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CF:29:B9:5E:CA:6C:B4:66:FD:32:6C:D4:AB:96:65:C2:A1:1E:2D
            X509v3 Authority Key Identifier:
                keyid:B8:0B:3D:40:95:68:86:4C:2E:08:D1:30:EA:89:09:2D:D8:E7:CE:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/B80B3D409568864C2E08D130EA89092DD8E7CEC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80B3D409568864C2E08D130EA89092DD8E7CEC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:74:11:21:1b:9f:9c:ec:ce:26:c6:aa:d4:b0:28:86:fd:db:
         0d:f4:9d:80:c8:ca:4e:23:fd:38:aa:a7:d6:22:8e:c8:bf:7e:
         cf:d8:96:09:e7:50:56:44:83:89:28:9e:43:24:b3:86:d9:08:
         aa:2a:0d:2b:95:00:13:53:55:fd:c0:69:9e:7c:ee:9b:59:54:
         7a:72:44:c8:81:c6:26:df:2a:cb:70:e8:79:b0:97:72:eb:66:
         1f:f9:e1:6d:8b:49:34:b9:4f:78:e2:08:50:11:32:e6:9e:ae:
         8c:4b:fb:d2:92:76:a9:b9:0b:c4:78:6f:e2:99:92:7f:bc:e0:
         47:06:d9:5f:cb:5b:84:57:f8:13:b3:e0:c5:ef:8c:63:93:43:
         54:a2:c2:3f:f5:f6:1b:76:d3:dc:d3:8f:68:0a:11:61:5e:39:
         0a:41:48:86:39:2b:67:d3:13:89:fa:de:6a:9f:91:94:e4:c0:
         54:8e:e9:66:ae:91:78:e7:b5:32:ec:cf:f8:54:1c:42:d1:bc:
         7c:e8:ab:f3:b9:76:b6:ec:fa:2e:5b:f1:81:2f:d9:01:c9:77:
         a4:c5:d1:7e:e6:8c:05:df:97:38:4e:68:ba:e4:de:bb:2b:64:
         fd:4a:fc:8a:44:e2:16:5a:d3:60:ba:3c:b7:ed:bf:82:1d:f7:
         0d:a0:a4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:37:22 2025 by rpki-client