Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/34352e3137302e3138302e302f32332d3233203d3e20323638313636.roa
File:                     34352e3137302e3138302e302f32332d3233203d3e20323638313636.roa (raw, json)
Hash identifier:          MF3Qj80a+xTjvx8ptSdYmDxKHNZDVJMPZC0wbVsAWng=
Subject key identifier:   6E:AB:9B:E5:86:AA:CF:DA:E2:D4:94:00:96:11:9F:40:0F:14:7A:AF
Certificate issuer:       /CN=944D7F16EF33CF24B63038B95B06199620AA80DB
Certificate serial:       49B5FA250535865DE3E924E198C3699C56B082B8
Authority key identifier: 94:4D:7F:16:EF:33:CF:24:B6:30:38:B9:5B:06:19:96:20:AA:80:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D7F16EF33CF24B63038B95B06199620AA80DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/34352e3137302e3138302e302f32332d3233203d3e20323638313636.roa
Signing time:             Sat 25 Oct 2025 01:39:13 +0000
ROA not before:           Sat 25 Oct 2025 01:34:13 +0000
ROA not after:            Sat 24 Oct 2026 01:39:13 +0000
asID:                     268166
IP address blocks:        45.170.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/944D7F16EF33CF24B63038B95B06199620AA80DB.crl
                          rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/944D7F16EF33CF24B63038B95B06199620AA80DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D7F16EF33CF24B63038B95B06199620AA80DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 10:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b5:fa:25:05:35:86:5d:e3:e9:24:e1:98:c3:69:9c:56:b0:82:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=944D7F16EF33CF24B63038B95B06199620AA80DB
        Validity
            Not Before: Oct 25 01:34:13 2025 GMT
            Not After : Oct 24 01:39:13 2026 GMT
        Subject: CN=6EAB9BE586AACFDAE2D4940096119F400F147AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a2:22:32:1a:a4:94:a6:ad:23:9e:1b:b3:ab:
                    13:d5:51:81:bf:dc:9b:e1:ac:5e:22:22:37:bd:88:
                    a6:c6:06:68:04:a5:84:29:ca:bc:35:d4:bd:4b:e4:
                    9e:9e:97:ac:b8:bd:81:ab:cf:ce:ae:c1:b1:2e:b5:
                    8c:59:1b:fc:ee:c8:41:a9:12:c1:61:5d:e0:19:d1:
                    dc:72:fe:f2:8b:cb:34:3a:26:06:19:28:29:43:4e:
                    1f:14:92:1b:17:1f:95:d4:22:6c:55:dd:ef:37:70:
                    e3:3e:6d:03:9a:92:f1:0e:53:b5:eb:ec:4e:6c:cf:
                    0d:6f:25:94:03:6f:08:43:45:dd:56:a1:85:6d:76:
                    9b:aa:c3:c6:b7:64:41:37:1a:6c:c5:79:20:b8:f3:
                    09:d1:aa:5f:45:d5:14:5a:17:b9:95:c9:b7:c2:56:
                    43:8e:79:b4:b8:8b:b3:e7:9c:28:06:da:d3:e5:7d:
                    dd:56:90:77:8c:7f:96:0b:cd:25:c9:8d:cd:30:8a:
                    33:4c:c2:d4:cd:aa:8a:bb:bf:47:c0:3f:02:f6:18:
                    f8:76:82:3d:02:b5:45:37:f0:3f:e7:0c:e4:62:ad:
                    b3:9f:97:a0:d4:f5:9b:b3:14:3e:64:7f:b6:5f:95:
                    4a:2c:3c:cc:1c:5c:d1:0b:32:86:4d:09:18:32:fe:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AB:9B:E5:86:AA:CF:DA:E2:D4:94:00:96:11:9F:40:0F:14:7A:AF
            X509v3 Authority Key Identifier:
                keyid:94:4D:7F:16:EF:33:CF:24:B6:30:38:B9:5B:06:19:96:20:AA:80:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/944D7F16EF33CF24B63038B95B06199620AA80DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D7F16EF33CF24B63038B95B06199620AA80DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/34352e3137302e3138302e302f32332d3233203d3e20323638313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:fa:d0:bb:88:0f:27:b3:45:de:f3:df:0d:99:39:0a:61:8f:
         57:4f:15:a2:64:c2:4f:39:3b:4b:eb:03:5f:a1:42:b0:53:ee:
         fc:00:48:08:6b:ab:f4:d4:67:5f:43:e7:f3:7e:7e:02:4c:88:
         13:9b:16:59:46:24:17:12:72:24:a0:13:29:b8:28:e9:85:a5:
         02:b9:92:c6:03:53:94:89:28:fd:bb:bd:52:65:d1:0a:8f:8a:
         2d:e1:57:35:0b:ce:70:c2:0c:42:02:5f:c1:01:66:0c:4a:09:
         8e:85:81:d8:72:e5:2a:3c:fa:99:10:4f:62:2b:77:94:f4:20:
         e0:49:c6:3b:c9:dd:2d:98:f4:a1:7c:49:dc:77:8c:8a:f5:09:
         6d:fe:e5:88:bf:f1:de:3b:aa:44:46:3e:50:b4:a2:de:d8:29:
         3d:6c:9c:10:bc:b6:77:a8:29:91:06:3a:2c:84:7b:db:30:f7:
         8e:2d:93:a4:98:8a:5e:a5:da:70:62:bf:82:4b:2a:93:d8:59:
         a6:69:40:19:31:c2:36:8c:79:d3:0a:3a:40:3e:c7:7c:58:b2:
         29:b1:94:a4:8d:2b:e0:77:fc:53:d0:c0:5a:3f:52:73:63:ab:
         b6:bb:c9:7f:5b:53:3c:a2:17:c0:fa:2d:e8:3e:e6:e8:40:e0:
         a7:38:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:46 2025 by rpki-client