Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e352e3232302e302f32322d3234203d3e20323633353639.roa
File:                     34352e352e3232302e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          /clC99NgasK5BPxUiB/sJEnitdUUdGDHxsRxFL3RPa0=
Subject key identifier:   67:9E:18:50:F9:C7:8A:F3:59:94:B8:EE:09:74:BC:D2:25:F4:B3:BC
Certificate issuer:       /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial:       288B0118071AEE9680EE4B3D0E22D071BEF6D697
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e352e3232302e302f32322d3234203d3e20323633353639.roa
Signing time:             Mon 08 Sep 2025 14:16:01 +0000
ROA not before:           Mon 08 Sep 2025 14:11:01 +0000
ROA not after:            Mon 07 Sep 2026 14:16:01 +0000
asID:                     263569
IP address blocks:        45.5.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 22:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8b:01:18:07:1a:ee:96:80:ee:4b:3d:0e:22:d0:71:be:f6:d6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
        Validity
            Not Before: Sep  8 14:11:01 2025 GMT
            Not After : Sep  7 14:16:01 2026 GMT
        Subject: CN=679E1850F9C78AF35994B8EE0974BCD225F4B3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:45:53:88:a8:71:e2:c4:16:e3:b6:e3:15:
                    c4:22:d3:07:02:ab:c4:bc:a3:e7:a1:78:42:9c:9f:
                    63:40:8b:5b:ee:fd:88:20:04:95:39:59:c8:c7:d2:
                    46:d2:b0:7d:e7:40:80:d0:09:a8:79:c4:57:dc:09:
                    0b:d6:bc:4c:06:ab:1f:5f:c2:09:6f:fc:f9:65:84:
                    df:e6:d8:36:58:77:e0:cc:a6:e1:3b:17:77:ea:95:
                    0c:7a:ea:f1:4a:61:38:dc:97:9f:d8:42:a1:e7:cf:
                    9b:67:43:78:5c:d5:4f:a0:60:72:39:03:d2:f1:d9:
                    7a:bd:a6:d9:9e:51:d9:1a:83:28:fc:3d:84:c4:15:
                    e6:ac:a5:86:22:cf:a1:f3:f7:7b:0f:b4:32:a3:a2:
                    5a:50:2a:ef:f9:1b:69:f5:a7:28:1d:c8:ee:68:bc:
                    e7:0c:1a:3e:f6:c7:7a:61:42:25:63:93:34:39:c2:
                    6e:bb:80:98:df:a1:c4:1e:bf:33:23:ed:52:cc:db:
                    b8:ac:09:f4:da:30:65:a4:21:88:03:7e:b1:03:6e:
                    2c:fc:c1:8e:1f:c6:d9:e8:b3:8f:e8:68:12:7e:8d:
                    2e:84:0a:28:09:9f:12:72:f3:93:b4:2b:60:18:07:
                    7e:fe:b8:3c:28:81:c0:8b:ec:54:53:03:fd:19:10:
                    4b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9E:18:50:F9:C7:8A:F3:59:94:B8:EE:09:74:BC:D2:25:F4:B3:BC
            X509v3 Authority Key Identifier:
                keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e352e3232302e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:fc:ff:fc:07:df:6c:4b:7b:f9:26:cd:20:e7:73:bf:ac:b0:
         af:95:a4:d7:39:c0:8d:d5:aa:52:02:1a:7d:f9:54:9c:bf:48:
         90:b5:38:ea:94:9c:0b:11:6a:4b:7d:89:de:00:01:08:e1:bf:
         fc:50:84:a6:f8:31:0d:82:a8:62:96:a4:1c:41:fa:e2:25:37:
         11:fd:04:aa:41:9f:e0:fb:a0:27:61:44:58:f7:92:33:a0:cd:
         47:03:3d:81:1a:20:43:49:b1:ac:e7:9b:a1:da:eb:ca:5b:f8:
         01:46:b2:fe:19:1d:89:dc:3e:b3:72:fd:32:cb:64:98:af:d1:
         ad:fc:50:7d:19:a2:d0:f6:d6:cf:ad:c3:11:e7:8f:6c:5c:24:
         9f:f8:f7:56:21:4e:0b:4e:f0:15:5f:f3:53:29:f8:9c:64:24:
         54:d1:76:6c:a3:ba:30:64:85:55:34:60:4f:3e:e6:e9:ec:02:
         f0:ec:07:7e:a5:e2:b6:01:b7:11:aa:49:4d:b3:e2:e7:e3:73:
         c8:4f:0d:ad:80:60:9d:cf:1e:49:87:cb:72:24:4d:8e:cb:25:
         f6:47:10:c5:32:f2:e3:8d:7d:f7:8e:d9:1d:e3:60:7d:ef:5d:
         79:06:20:b6:d5:d8:fc:3b:34:76:14:b0:b7:2c:94:74:c2:00:
         42:f5:a1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:09:04 2025 by rpki-client