Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139352e302f32342d3234203d3e20323636393438.roa
File:                     34352e3232352e3139352e302f32342d3234203d3e20323636393438.roa (raw, json)
Hash identifier:          SBvrBtAQfqe32trpo9ZU7WzxmNZqg4/1W7MNHABkyZw=
Subject key identifier:   45:B1:EC:8A:42:48:D4:E2:E7:E9:85:1D:E8:7A:EF:2C:F8:1B:CF:B7
Certificate issuer:       /CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
Certificate serial:       6730DC4D6FC3866CA421E2E460F0C6BD99396259
Authority key identifier: C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139352e302f32342d3234203d3e20323636393438.roa
Signing time:             Mon 08 Sep 2025 19:01:55 +0000
ROA not before:           Mon 08 Sep 2025 18:56:55 +0000
ROA not after:            Mon 07 Sep 2026 19:01:55 +0000
asID:                     266948
IP address blocks:        45.225.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl
                          rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 09:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:30:dc:4d:6f:c3:86:6c:a4:21:e2:e4:60:f0:c6:bd:99:39:62:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
        Validity
            Not Before: Sep  8 18:56:55 2025 GMT
            Not After : Sep  7 19:01:55 2026 GMT
        Subject: CN=45B1EC8A4248D4E2E7E9851DE87AEF2CF81BCFB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:c1:d8:12:ca:62:a6:ba:2f:b9:f9:1d:29:
                    e2:d1:fb:00:b7:bc:ee:4c:8e:9a:e1:5e:e7:a9:ec:
                    20:0e:f9:4a:d2:a8:45:03:52:82:52:44:15:04:1f:
                    0c:ad:f4:3c:93:c9:8f:67:d8:99:94:66:5f:1e:3b:
                    7d:46:5b:d8:75:bd:c9:18:ab:f2:e5:ba:fd:85:d4:
                    a8:82:0f:35:bf:9e:20:08:5b:63:f8:94:02:5a:4e:
                    e5:1b:8d:f9:78:ea:c2:d7:09:02:37:a9:e2:2d:5b:
                    db:08:57:85:63:e5:22:99:d7:11:d2:de:57:9b:2f:
                    46:4f:80:81:65:ab:8e:11:62:92:81:8e:1f:69:57:
                    9d:b9:3f:8d:ae:75:a8:5e:8f:01:91:69:4c:be:18:
                    62:cb:8f:6c:76:1f:e0:a4:e0:ab:cf:92:88:1d:4a:
                    65:d2:91:3d:cd:2b:06:64:bd:14:89:d5:e9:18:55:
                    eb:1d:38:1e:15:da:44:1b:32:70:7e:5d:db:0a:07:
                    ea:1f:83:23:49:d0:46:3d:5b:2b:66:c3:2f:a1:4b:
                    f7:d4:2f:98:d9:bb:da:4f:0b:ea:b6:5f:d3:15:f1:
                    f6:ab:56:6c:10:ac:bd:9c:ac:53:d0:3a:29:05:52:
                    f9:7c:2c:65:98:b3:72:c9:ee:be:d4:d0:8a:95:1c:
                    52:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B1:EC:8A:42:48:D4:E2:E7:E9:85:1D:E8:7A:EF:2C:F8:1B:CF:B7
            X509v3 Authority Key Identifier:
                keyid:C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139352e302f32342d3234203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:06:b5:09:c5:cc:5e:76:f4:18:b8:15:b8:58:a3:c8:24:ed:
         60:f0:d8:29:c1:16:09:aa:3c:67:c4:bd:c2:fa:f3:06:6f:51:
         21:96:af:11:04:cc:89:27:af:39:91:58:85:d2:f7:53:0a:a5:
         aa:f7:ec:72:be:c7:cb:d2:da:ba:6d:1f:41:20:76:f4:23:c5:
         ac:46:29:9d:73:78:a1:b5:6a:3e:7f:60:52:7d:e7:eb:7b:5d:
         aa:5b:eb:14:ef:a5:1e:21:a4:ff:f7:3a:86:a7:e3:bd:8f:f1:
         5b:1a:a9:e4:19:0b:80:3f:c0:ba:d7:1e:33:1d:76:19:e8:b8:
         b3:8f:26:35:a3:38:e0:53:65:c0:f8:04:69:3f:26:3d:7f:dc:
         07:29:a3:4b:b9:21:0a:a7:6e:5b:fb:b0:43:20:0b:31:93:23:
         9c:72:30:73:99:9a:e1:d3:3b:cb:24:90:91:22:9c:7f:14:98:
         3e:ba:59:0a:bb:4f:e9:4e:fa:94:a1:5b:c2:70:bf:26:1c:c0:
         ac:44:71:19:55:42:5c:5c:c4:62:f4:19:f5:7f:9b:42:46:a2:
         bb:6c:3e:60:92:1e:31:8c:57:e2:d0:63:e0:34:df:ae:fb:91:
         1f:7f:92:55:ec:05:7a:cf:63:10:bc:9c:15:1f:bf:00:f6:16:
         f7:11:e0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:10:00 2025 by rpki-client