Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/34352e3136362e3135372e302f32342d3234203d3e20323734343936.roa
File:                     34352e3136362e3135372e302f32342d3234203d3e20323734343936.roa (raw, json)
Hash identifier:          pXKz574UWq7nhw46zp06y5od/XcshkkA1WlbaxEnc8Y=
Subject key identifier:   43:B6:3A:91:F7:FC:83:FE:CF:CC:81:DF:22:9E:F3:DB:91:3C:31:5C
Certificate issuer:       /CN=30982A862F024C058A67B70496FF401E24897F47
Certificate serial:       5FE7363F15E5C57F6AD5EFDEA6C67E6B82D90FAA
Authority key identifier: 30:98:2A:86:2F:02:4C:05:8A:67:B7:04:96:FF:40:1E:24:89:7F:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30982A862F024C058A67B70496FF401E24897F47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/34352e3136362e3135372e302f32342d3234203d3e20323734343936.roa
Signing time:             Fri 31 Oct 2025 15:02:53 +0000
ROA not before:           Fri 31 Oct 2025 14:57:53 +0000
ROA not after:            Fri 30 Oct 2026 15:02:53 +0000
asID:                     274496
IP address blocks:        45.166.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/30982A862F024C058A67B70496FF401E24897F47.crl
                          rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/30982A862F024C058A67B70496FF401E24897F47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30982A862F024C058A67B70496FF401E24897F47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 04:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e7:36:3f:15:e5:c5:7f:6a:d5:ef:de:a6:c6:7e:6b:82:d9:0f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30982A862F024C058A67B70496FF401E24897F47
        Validity
            Not Before: Oct 31 14:57:53 2025 GMT
            Not After : Oct 30 15:02:53 2026 GMT
        Subject: CN=43B63A91F7FC83FECFCC81DF229EF3DB913C315C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:7b:2f:25:a8:b6:45:1e:ff:21:36:88:b8:
                    13:ee:28:b5:a3:3f:07:8c:f8:2c:fb:67:60:ff:b4:
                    38:8e:d8:49:f1:03:8b:49:39:3f:30:db:b1:92:38:
                    e9:87:45:6b:ac:e2:2a:12:27:80:73:46:1a:73:6a:
                    24:e7:35:d2:4b:0d:47:0c:f9:5a:05:a6:12:02:82:
                    ef:20:a4:72:5d:71:69:c6:a0:c9:ec:ec:8e:23:09:
                    e0:63:0f:f6:1e:e3:9b:e4:9e:f0:e3:66:88:59:15:
                    a6:1d:6d:67:1b:ae:70:3e:93:ea:ec:b5:ce:05:45:
                    30:42:dc:b0:1c:48:d4:26:0a:00:bd:78:3d:3b:80:
                    af:b7:c5:95:dd:c5:7a:57:83:0e:07:0a:ab:e5:3d:
                    e7:f3:05:74:cb:f0:a8:2d:f9:22:d9:57:09:d3:b5:
                    06:3d:01:61:70:37:35:c5:6a:2a:1f:dc:5e:f4:3b:
                    ed:09:c3:57:59:04:b4:0f:3f:9d:49:df:91:40:25:
                    ff:75:d9:6f:a2:a3:f0:83:bf:9e:94:7a:66:a2:04:
                    af:38:05:3d:09:63:69:19:e5:e6:c8:7f:65:d7:22:
                    07:1e:d4:1a:9b:fb:14:b7:16:74:53:26:16:be:5d:
                    ef:d4:7d:74:b2:cf:90:75:18:5e:b7:39:d9:76:8d:
                    a5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B6:3A:91:F7:FC:83:FE:CF:CC:81:DF:22:9E:F3:DB:91:3C:31:5C
            X509v3 Authority Key Identifier:
                keyid:30:98:2A:86:2F:02:4C:05:8A:67:B7:04:96:FF:40:1E:24:89:7F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/30982A862F024C058A67B70496FF401E24897F47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30982A862F024C058A67B70496FF401E24897F47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/34352e3136362e3135372e302f32342d3234203d3e20323734343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:11:47:b5:7b:32:89:e9:de:aa:e5:56:4a:46:64:ea:e3:12:
         98:87:9e:ba:00:45:70:2f:14:d1:e8:51:f0:56:dd:eb:6c:41:
         c4:bd:45:b7:24:a4:04:f0:bd:06:e6:2e:38:b5:09:31:56:5e:
         fb:77:5c:33:94:57:67:2f:ce:90:f2:9f:e0:c3:88:52:c6:02:
         62:91:56:cb:7f:e6:de:f9:1a:30:0d:98:c8:20:17:76:da:51:
         00:90:de:88:e4:bb:37:83:cc:f5:3a:61:0b:16:9f:2a:b7:21:
         84:b1:af:e1:21:16:7d:8a:ec:c8:66:25:72:47:03:03:e9:fc:
         54:72:5b:7a:6a:ce:c1:13:d8:fd:a5:bd:f0:8d:2b:fe:1c:18:
         45:55:2f:24:e7:58:24:d3:be:53:98:32:c7:f7:9b:55:38:e6:
         b1:5b:83:48:33:32:5a:cc:3f:db:52:a5:7e:0d:73:65:1e:bb:
         8c:e3:e6:89:e7:f7:55:7e:14:e5:72:48:c4:85:cf:28:51:f9:
         72:cb:21:c5:ec:ac:1e:be:8c:a2:58:bf:a4:2c:49:1f:59:40:
         fd:de:3a:9b:fb:5f:eb:b4:23:7d:0b:57:f7:b0:f5:85:b5:db:
         b9:42:c3:53:5b:cc:3b:bc:cc:01:b0:92:9e:ea:93:b2:fe:fa:
         63:e4:5f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:02:09 2025 by rpki-client