Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e3137372e3131322e302f32322d3234203d3e20323730383134.roa
File:                     34352e3137372e3131322e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          2hE2ekUpp1nMyMoISst5WdlDPWX9MEqIJotTjBgdJvQ=
Subject key identifier:   0F:CA:C1:52:BF:92:E3:0E:4E:E1:6D:06:1A:37:9E:FF:9D:C6:38:FC
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       78CC9B4B15453769407C5258221E6E8EC62A7A4B
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e3137372e3131322e302f32322d3234203d3e20323730383134.roa
Signing time:             Mon 27 Oct 2025 17:06:42 +0000
ROA not before:           Mon 27 Oct 2025 17:01:42 +0000
ROA not after:            Mon 26 Oct 2026 17:06:42 +0000
asID:                     270814
IP address blocks:        45.177.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cc:9b:4b:15:45:37:69:40:7c:52:58:22:1e:6e:8e:c6:2a:7a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Oct 27 17:01:42 2025 GMT
            Not After : Oct 26 17:06:42 2026 GMT
        Subject: CN=0FCAC152BF92E30E4EE16D061A379EFF9DC638FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:50:ad:5e:e3:4b:5e:59:c0:24:c7:22:d3:
                    33:1c:d3:e6:14:97:d6:d2:bc:b9:f8:5a:c6:ca:f5:
                    b1:ec:5f:f7:d5:1c:9c:56:9c:85:4d:12:7a:4f:90:
                    58:ec:fa:c1:f4:95:e5:c8:33:3a:9f:29:01:eb:a9:
                    10:09:24:9a:e3:ca:7a:d1:a0:c3:7a:19:ca:ea:1a:
                    65:d4:d8:4c:dc:77:50:0f:c4:cf:5f:5d:03:d4:51:
                    53:db:ac:ff:67:86:1f:3c:cd:13:80:43:1e:55:88:
                    8f:c0:c1:9d:cb:08:ed:7b:f2:ca:92:3f:05:a3:59:
                    cb:e0:ea:d6:7d:8d:28:bc:91:41:1a:ec:2f:de:0a:
                    6b:62:2c:33:c0:c5:e1:97:4e:dc:bc:4e:3f:15:ec:
                    5e:af:b3:40:4d:67:3a:0b:4e:ae:07:2c:2f:e5:9f:
                    b0:21:f0:03:97:8b:11:f1:24:a9:f9:61:0f:b3:87:
                    95:aa:29:5a:d7:5d:ba:43:90:a6:b0:a8:46:ab:f5:
                    1e:2a:5f:72:a5:c2:b6:14:fb:8d:7f:13:5f:68:cf:
                    d3:5d:66:30:4e:2e:4b:3a:35:7b:36:8a:50:de:91:
                    d0:bf:68:0c:c7:bb:97:1a:14:ee:fa:b4:b4:26:aa:
                    10:c6:d8:96:8e:00:46:ff:6d:9e:5f:73:1b:11:77:
                    c3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CA:C1:52:BF:92:E3:0E:4E:E1:6D:06:1A:37:9E:FF:9D:C6:38:FC
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e3137372e3131322e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:f8:4f:b6:69:6d:d2:0d:c3:f2:27:be:aa:ba:81:cb:8e:1d:
         37:69:e6:09:6f:b3:6e:b2:b7:20:f3:2c:8d:d9:a9:1c:db:6f:
         36:0f:56:67:f3:e6:37:d6:b1:16:af:77:25:4f:8c:d4:8d:e6:
         8f:c9:00:f0:73:75:c0:6e:90:cd:7f:62:cd:71:91:ce:11:f4:
         9a:8b:d9:54:4d:09:12:5f:05:13:bb:45:62:19:48:9b:34:eb:
         01:d1:78:b0:20:5e:99:7f:d5:57:c8:73:42:07:5a:08:ea:21:
         e6:2d:f3:c6:fa:2e:55:0b:3b:75:69:fb:52:fd:6b:9c:48:33:
         39:ad:2f:f9:20:e9:2b:8b:49:f7:bb:bd:f4:9a:a9:75:e7:e0:
         70:49:42:a9:e0:a1:3c:ba:7b:be:f3:02:56:33:02:33:2b:90:
         3e:8b:8d:ee:d8:14:61:92:6e:80:45:00:67:cf:4a:9a:b8:fc:
         51:bb:bd:bb:8f:2e:c7:d9:90:56:e7:d5:da:60:0c:13:18:c8:
         21:2b:d4:6c:7e:48:3b:09:e1:99:d9:ef:1a:34:a8:93:ef:b9:
         d8:e5:9f:17:03:b8:d5:71:15:d6:ba:6d:0c:05:ec:bf:28:5c:
         ce:54:3f:76:ed:f7:90:22:7d:ce:c5:96:9e:9a:71:ae:d6:d7:
         cb:31:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:07:31 2025 by rpki-client