Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/34352e3136322e3130362e302f32342d3234203d3e20323638353136.roa
File:                     34352e3136322e3130362e302f32342d3234203d3e20323638353136.roa (raw, json)
Hash identifier:          yH5SMQEeMeEE5yDbyD9gQo2BcS5qOykEEfGnWYBaq3g=
Subject key identifier:   FE:40:3D:42:8B:E1:56:67:66:65:39:1E:75:59:9B:37:AF:9F:4E:EE
Certificate issuer:       /CN=BC779DF721B6D7336A615134C72893A4896EDE08
Certificate serial:       5FA6ED3A702F281DC63D434669B38F986E736EB5
Authority key identifier: BC:77:9D:F7:21:B6:D7:33:6A:61:51:34:C7:28:93:A4:89:6E:DE:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/34352e3136322e3130362e302f32342d3234203d3e20323638353136.roa
Signing time:             Fri 06 Jun 2025 16:59:36 +0000
ROA not before:           Fri 06 Jun 2025 16:54:36 +0000
ROA not after:            Fri 05 Jun 2026 16:59:36 +0000
asID:                     268516
IP address blocks:        45.162.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.crl
                          rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 12:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a6:ed:3a:70:2f:28:1d:c6:3d:43:46:69:b3:8f:98:6e:73:6e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC779DF721B6D7336A615134C72893A4896EDE08
        Validity
            Not Before: Jun  6 16:54:36 2025 GMT
            Not After : Jun  5 16:59:36 2026 GMT
        Subject: CN=FE403D428BE156676665391E75599B37AF9F4EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:68:cd:80:76:ee:f6:a4:d1:47:6a:d6:14:87:
                    88:fb:91:75:37:dc:16:f9:d6:a0:ff:be:0f:51:e2:
                    36:c1:49:c4:35:08:ef:22:db:6b:e2:b2:92:13:15:
                    de:8f:5b:11:86:8d:48:d2:a0:d4:71:98:5c:4f:89:
                    ea:80:6b:8c:92:f8:75:fc:be:4a:a7:9d:1f:e8:fe:
                    a8:c7:15:34:77:e4:60:5b:d8:66:d6:38:d8:a6:86:
                    32:8f:c8:65:e4:6a:0d:1a:2c:9e:fc:87:a0:2f:89:
                    a5:d9:38:3b:74:cb:91:31:59:9c:42:4a:74:be:1d:
                    7a:64:09:bb:33:77:0b:e5:81:d3:20:c3:0f:06:66:
                    71:67:2b:90:ea:ae:fb:ea:e1:97:d0:d8:6a:d1:d8:
                    1c:47:ae:fe:d2:bd:ab:41:d6:f0:b3:ed:02:70:5e:
                    5d:17:68:7d:4a:2c:ba:4e:4e:8e:6c:e3:71:c2:65:
                    6f:73:8a:93:ef:5c:34:17:81:5b:69:cd:9c:d5:d2:
                    72:23:83:b9:44:51:1f:77:d9:23:fa:20:18:2f:b6:
                    02:b0:db:33:4e:d0:e2:e9:87:06:c1:47:fe:49:8e:
                    68:fb:f3:08:f9:5b:8b:40:3e:60:5a:8b:46:d0:7b:
                    88:59:67:32:f0:c0:d4:28:7b:cd:5f:6a:11:f4:d3:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:40:3D:42:8B:E1:56:67:66:65:39:1E:75:59:9B:37:AF:9F:4E:EE
            X509v3 Authority Key Identifier:
                keyid:BC:77:9D:F7:21:B6:D7:33:6A:61:51:34:C7:28:93:A4:89:6E:DE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/34352e3136322e3130362e302f32342d3234203d3e20323638353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:8b:ba:fb:ac:35:3b:98:11:88:4f:d6:a3:f8:fc:7d:2b:1d:
         c5:38:3c:82:e2:5c:b7:99:1e:3e:d8:90:c7:6d:0c:87:fb:1a:
         2a:47:27:b4:0b:3c:2b:73:94:71:f2:c3:07:bb:de:1e:f6:42:
         21:ef:be:92:b2:2a:a7:2c:58:3f:e0:78:e1:e6:8c:b2:26:24:
         38:fa:ba:1b:33:0d:c0:51:88:19:42:ba:84:aa:d5:91:e2:49:
         d9:7b:c9:e9:b2:0b:d2:01:2a:0c:27:0e:c7:e8:67:c1:d9:9e:
         47:58:61:ca:61:c8:b2:8e:e6:c0:b3:58:e4:9a:9e:bb:ef:15:
         6a:d3:7a:4b:d9:65:c2:47:64:a8:3c:3f:21:20:5c:fe:41:c6:
         95:bd:4b:2f:c6:4d:5a:bc:05:28:e7:c5:a9:d3:04:f0:78:27:
         4d:72:44:51:f3:69:c5:5b:ff:d3:ba:46:85:8b:24:cc:b3:72:
         b0:42:07:4a:13:6a:11:22:51:c4:61:e2:d2:ce:6d:da:d7:5f:
         0a:61:b4:eb:94:99:90:a7:d7:43:78:80:6f:8f:48:66:9d:ae:
         f0:7b:d6:54:36:c0:2d:96:96:e0:2c:f4:6c:cd:c6:9a:8d:31:
         0e:7c:5e:fe:8e:9c:33:2d:20:92:5b:95:4b:30:f3:4f:15:8a:
         29:64:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:12 2025 by rpki-client