Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa
File:                     34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa (raw, json)
Hash identifier:          RNMWPhF+l/S4zrDhp3QyziGVgYPFcrGRs3Yi4peOo0I=
Subject key identifier:   28:40:91:38:F2:73:40:44:FD:53:57:86:22:2D:BF:11:23:FB:05:EB
Certificate issuer:       /CN=C2679BF4898CEE060A6F05855290ED209F305E3E
Certificate serial:       657B1C796C6E4EC47200BB21F3FFA26440A01B08
Authority key identifier: C2:67:9B:F4:89:8C:EE:06:0A:6F:05:85:52:90:ED:20:9F:30:5E:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2679BF4898CEE060A6F05855290ED209F305E3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa
Signing time:             Tue 28 Oct 2025 12:57:03 +0000
ROA not before:           Tue 28 Oct 2025 12:52:03 +0000
ROA not after:            Tue 27 Oct 2026 12:57:03 +0000
asID:                     267332
IP address blocks:        45.233.244.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/C2679BF4898CEE060A6F05855290ED209F305E3E.crl
                          rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/C2679BF4898CEE060A6F05855290ED209F305E3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2679BF4898CEE060A6F05855290ED209F305E3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 03:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7b:1c:79:6c:6e:4e:c4:72:00:bb:21:f3:ff:a2:64:40:a0:1b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2679BF4898CEE060A6F05855290ED209F305E3E
        Validity
            Not Before: Oct 28 12:52:03 2025 GMT
            Not After : Oct 27 12:57:03 2026 GMT
        Subject: CN=28409138F2734044FD535786222DBF1123FB05EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:af:7b:22:4a:ea:a8:a0:cd:19:d8:3d:0c:
                    4b:4b:9f:e5:47:d2:af:86:05:11:63:77:89:b3:9d:
                    a4:a2:47:7f:21:de:05:2e:00:24:4c:90:46:9c:50:
                    82:46:5d:05:3a:9d:a3:75:e9:38:22:34:06:59:d0:
                    50:81:f6:38:2e:d8:14:52:9e:f7:52:ed:d7:fc:76:
                    cb:fd:f4:9d:06:7a:d7:01:c7:ba:39:d6:68:c1:2e:
                    a3:d4:67:57:8c:93:0a:34:f3:de:51:96:3e:3a:a5:
                    a7:59:d3:2c:8c:98:ba:b7:31:d4:60:56:c9:4e:75:
                    0a:2a:53:98:34:72:98:28:9e:31:ed:fe:d1:35:95:
                    97:6e:64:69:1d:f8:dd:ec:0f:15:03:b0:a9:42:e7:
                    a6:87:b6:8a:0b:dd:88:5c:99:89:07:19:3a:77:11:
                    df:83:3e:07:00:6f:f4:59:27:19:f6:87:8e:e5:a6:
                    41:e4:54:14:49:b4:b0:be:2a:58:53:bc:44:f4:6e:
                    e7:21:9b:be:63:a5:24:93:4b:25:2b:5a:2f:f5:fc:
                    e6:83:8f:a4:39:19:5a:6a:1a:7a:13:14:7c:8a:da:
                    c0:1b:1c:2a:99:7f:bd:bf:d8:93:7d:46:f0:2f:19:
                    7c:98:18:6f:a9:a3:5c:9f:9d:fb:c5:b7:1c:78:8c:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:40:91:38:F2:73:40:44:FD:53:57:86:22:2D:BF:11:23:FB:05:EB
            X509v3 Authority Key Identifier:
                keyid:C2:67:9B:F4:89:8C:EE:06:0A:6F:05:85:52:90:ED:20:9F:30:5E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/C2679BF4898CEE060A6F05855290ED209F305E3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2679BF4898CEE060A6F05855290ED209F305E3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:fc:e2:09:44:a0:72:8f:9b:21:33:e8:bd:03:6d:58:7b:de:
         42:52:24:e0:82:10:06:aa:59:12:25:52:ee:fb:02:ed:b0:c0:
         50:96:eb:95:1e:bc:e6:48:e4:c8:85:d7:69:3c:45:c4:09:9a:
         07:49:a7:b8:c7:71:8e:0a:c2:0f:d8:58:ed:85:b4:11:fd:b3:
         e6:bf:ca:68:92:f7:71:b6:72:ca:fc:ed:48:66:c4:23:d7:a3:
         1a:14:88:38:8c:69:d2:f9:e0:91:62:15:af:2a:83:b3:df:ca:
         80:0c:b3:82:dc:f0:93:41:62:c2:80:8b:83:15:79:2a:64:e4:
         e8:61:d7:ee:7a:64:3c:dd:54:45:d9:9c:9f:dc:a3:03:cb:b2:
         e2:1b:01:9c:db:e5:a8:4f:ef:9e:52:5b:3d:41:0b:d7:d4:70:
         f3:14:7a:a1:99:c7:46:64:f8:6a:91:3a:3b:d7:37:5f:65:c7:
         a0:15:f7:2c:dc:43:53:f0:44:bc:84:c3:21:d9:69:2e:cb:b2:
         12:a8:c6:60:d2:95:c7:de:b5:78:4d:e5:dc:6b:15:56:16:51:
         e8:d9:3c:33:7b:20:b1:d3:22:08:47:72:f6:2d:8d:59:af:49:
         e7:2a:af:85:3a:fc:3c:00:cb:88:1a:a9:c2:41:08:b3:a3:57:
         af:2a:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:38:18 2025 by rpki-client