Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3136332e3135322e302f32322d3234203d3e20323633353639.roa
File:                     34352e3136332e3135322e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          mHsOx0fovXKw5ZgRJ4aGrFp3PLFtG2aBht+82hQTDHQ=
Subject key identifier:   2A:18:2F:BB:25:AE:58:B3:7C:37:49:E1:3E:6D:40:6E:B5:9E:CC:D5
Certificate issuer:       /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial:       0890A8FE529AE4E286F86F5299183C43A2EC695C
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3136332e3135322e302f32322d3234203d3e20323633353639.roa
Signing time:             Mon 08 Sep 2025 14:16:05 +0000
ROA not before:           Mon 08 Sep 2025 14:11:05 +0000
ROA not after:            Mon 07 Sep 2026 14:16:05 +0000
asID:                     263569
IP address blocks:        45.163.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 22:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:90:a8:fe:52:9a:e4:e2:86:f8:6f:52:99:18:3c:43:a2:ec:69:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
        Validity
            Not Before: Sep  8 14:11:05 2025 GMT
            Not After : Sep  7 14:16:05 2026 GMT
        Subject: CN=2A182FBB25AE58B37C3749E13E6D406EB59ECCD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:38:25:83:1c:c5:43:4f:60:89:d8:3c:e8:
                    9f:24:32:ff:42:f7:d0:51:2b:1f:ac:1b:93:7a:0d:
                    fc:7c:62:e1:dd:f1:80:e4:04:61:e4:48:0a:25:c1:
                    21:1d:8d:5b:cf:06:8c:d1:74:5b:a9:db:ba:51:3d:
                    dd:b3:c1:e9:77:de:4a:cf:23:71:2f:29:b9:98:68:
                    06:5e:7b:af:30:ef:a1:62:65:49:73:9d:2a:2d:c3:
                    fd:f4:86:17:84:f2:7b:6e:5f:0f:62:81:56:27:8c:
                    04:1f:b8:34:e5:6d:c7:61:1c:2d:98:2d:0f:ee:f7:
                    3a:cc:6e:54:34:98:40:98:f2:07:8b:8d:78:a6:05:
                    0a:34:8b:c6:5b:fe:66:a2:44:ca:08:85:48:be:f4:
                    a3:b2:6d:58:75:64:c9:65:c6:f7:e2:2a:5f:41:d6:
                    ad:9d:6d:06:70:c0:2a:a9:5b:78:14:90:1f:7a:6e:
                    0b:32:e9:be:41:5b:e1:e4:64:68:16:ba:63:1e:dc:
                    4d:bc:1e:c5:2b:5f:cc:96:bc:51:fe:c2:bd:dd:98:
                    50:8b:88:03:eb:aa:2c:a3:22:38:82:d7:ec:bf:4d:
                    8e:82:60:db:e8:6e:04:99:ef:81:62:59:5c:09:7e:
                    fe:29:22:22:7b:a2:4d:8e:87:b1:e5:8b:60:4c:80:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:18:2F:BB:25:AE:58:B3:7C:37:49:E1:3E:6D:40:6E:B5:9E:CC:D5
            X509v3 Authority Key Identifier:
                keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3136332e3135322e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:db:52:af:1a:34:a6:d5:b3:f9:6e:00:ac:22:f9:f5:33:2f:
         c4:54:a9:d4:51:91:15:4e:9b:94:b5:66:bf:fa:ee:c3:40:77:
         2c:40:27:7b:a5:38:d1:10:2c:71:a7:37:61:89:b1:af:45:35:
         4e:a9:60:e2:42:5b:a3:19:36:a4:e5:96:c2:ea:e4:ce:89:7e:
         2d:fb:ee:2f:71:1c:51:87:b7:35:9b:e0:d5:44:ed:82:ed:06:
         c6:c5:ab:46:a2:a7:ff:4e:3e:dd:34:7e:fd:8e:56:88:11:ba:
         29:b1:a5:4b:53:40:1c:23:c9:d2:42:f0:e7:89:2c:b4:74:7c:
         5e:46:b0:3f:7a:b6:66:f3:a0:67:dc:1a:49:ef:3b:cf:53:cf:
         07:a8:1a:76:93:d7:74:fa:17:be:d1:3a:6d:63:ce:33:d1:b4:
         74:a1:ff:f0:54:12:87:eb:61:e9:7c:13:bb:a0:82:71:f2:d5:
         10:ba:28:d5:71:0c:7b:a1:db:c6:25:10:2a:dd:6a:03:a7:f8:
         d5:27:d3:05:37:78:87:e7:dc:be:62:4d:33:b0:bd:7d:d9:2c:
         14:c1:21:93:15:c4:15:ea:8a:1b:16:b2:31:cc:81:87:85:c7:
         91:07:22:fd:ff:87:eb:ce:1a:0c:50:8c:f6:31:8a:42:bb:23:
         6f:e1:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:57:48 2025 by rpki-client