Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/34352e3136362e3135382e302f32342d3234203d3e20323637393738.roa
File:                     34352e3136362e3135382e302f32342d3234203d3e20323637393738.roa (raw, json)
Hash identifier:          I30Fix4duBd85l7IdMPk5W/kgNbr7CRCIBu+lAx74ng=
Subject key identifier:   8C:CF:03:D0:A4:F0:A4:FA:E2:D1:D0:26:55:BF:A7:0E:84:1F:7D:56
Certificate issuer:       /CN=30982A862F024C058A67B70496FF401E24897F47
Certificate serial:       5281215B6EF6242D64EA961AB7C16E1E81E2A443
Authority key identifier: 30:98:2A:86:2F:02:4C:05:8A:67:B7:04:96:FF:40:1E:24:89:7F:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30982A862F024C058A67B70496FF401E24897F47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/34352e3136362e3135382e302f32342d3234203d3e20323637393738.roa
Signing time:             Thu 30 Oct 2025 20:16:11 +0000
ROA not before:           Thu 30 Oct 2025 20:11:11 +0000
ROA not after:            Thu 29 Oct 2026 20:16:11 +0000
asID:                     267978
IP address blocks:        45.166.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/30982A862F024C058A67B70496FF401E24897F47.crl
                          rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/30982A862F024C058A67B70496FF401E24897F47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30982A862F024C058A67B70496FF401E24897F47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 04:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:81:21:5b:6e:f6:24:2d:64:ea:96:1a:b7:c1:6e:1e:81:e2:a4:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30982A862F024C058A67B70496FF401E24897F47
        Validity
            Not Before: Oct 30 20:11:11 2025 GMT
            Not After : Oct 29 20:16:11 2026 GMT
        Subject: CN=8CCF03D0A4F0A4FAE2D1D02655BFA70E841F7D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:67:a7:0c:b2:01:8d:d2:d8:e7:db:35:86:
                    df:a6:54:e6:f1:97:d1:c0:eb:d0:e5:ef:dc:f0:93:
                    56:be:8c:b4:3c:20:34:b4:0e:da:42:75:99:65:e3:
                    9e:a8:20:da:fb:92:25:c1:07:4a:12:3b:98:94:0f:
                    85:3f:5b:93:82:3d:9c:2d:b1:58:ab:6e:7e:eb:68:
                    da:50:fc:f2:42:5a:93:00:f0:95:e6:ca:80:4a:52:
                    06:67:bc:24:61:a4:95:77:7c:2c:8b:0c:42:76:96:
                    c0:e5:f2:0b:e3:94:17:9e:d0:94:2c:ba:33:94:29:
                    50:3a:96:1f:98:a7:72:9e:bf:a6:c3:90:cb:5a:52:
                    e6:3e:dc:a4:78:f6:eb:4c:b3:98:08:f1:86:6a:70:
                    00:a6:5b:d9:db:f3:af:de:70:75:7f:b0:ab:e4:9c:
                    10:7b:f1:1b:7f:d1:a1:f2:f8:bd:38:b9:59:e2:b2:
                    8b:6d:f4:08:e8:8c:80:8f:0a:f7:67:3a:31:c3:14:
                    54:28:ce:0b:49:f1:c3:06:6a:7e:6c:65:4f:cb:ca:
                    fd:6f:32:77:00:58:fd:22:90:b5:04:47:e3:fa:f6:
                    83:00:6f:a4:29:ac:62:fe:7d:5b:a2:39:16:ff:3e:
                    d6:7a:d8:5f:65:38:e3:73:5d:82:8f:43:81:81:d6:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CF:03:D0:A4:F0:A4:FA:E2:D1:D0:26:55:BF:A7:0E:84:1F:7D:56
            X509v3 Authority Key Identifier:
                keyid:30:98:2A:86:2F:02:4C:05:8A:67:B7:04:96:FF:40:1E:24:89:7F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/30982A862F024C058A67B70496FF401E24897F47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30982A862F024C058A67B70496FF401E24897F47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZY1eHtmhvRVb5j1U1e5aZcZygxmmM2BRxQKFUV6tHdV/0/34352e3136362e3135382e302f32342d3234203d3e20323637393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:95:0a:4c:40:f1:94:12:56:bc:9c:73:fe:d9:9f:40:1d:0b:
         7f:06:7c:1b:f4:c9:83:b5:ed:7f:10:99:0f:88:af:f9:b8:bb:
         cf:cb:18:fe:a9:66:f2:d9:e3:13:d6:53:72:ab:72:2e:73:b4:
         3b:ec:61:f1:c4:3b:c0:f5:2f:04:0f:0c:e4:c9:1b:95:41:90:
         c7:fc:1f:2e:61:97:f1:28:18:2a:db:72:ac:e7:7f:63:fc:16:
         95:6e:12:5b:64:d2:2c:1f:a2:b7:50:08:86:a3:9a:be:17:43:
         6f:be:46:ab:1a:25:36:1b:ed:34:8f:4a:bd:cd:8e:3b:f3:f1:
         34:99:cc:c4:03:dd:11:e1:3f:17:c1:a5:1b:13:ae:cf:eb:7d:
         f1:88:73:70:3c:dd:2c:3e:a3:82:0b:96:8a:5a:12:7a:ed:91:
         e1:b9:59:df:ba:fd:5d:7f:5f:30:25:fd:c1:be:15:75:25:a1:
         ef:b1:74:2d:f4:e7:37:ec:c0:25:6d:e7:a3:8a:ea:01:36:2f:
         84:b9:3b:3e:0b:a2:12:98:9d:f4:76:4d:38:5b:cd:5b:eb:e4:
         ea:1d:ad:36:b0:c7:32:00:3f:de:23:ba:39:62:00:c4:df:0e:
         75:bd:0c:dd:f3:c3:79:dd:80:c5:a4:46:6f:92:32:6a:04:d5:
         ae:31:46:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:02:05 2025 by rpki-client