Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35342e302f32342d3234203d3e20323639323835.roa
File:                     34352e3138322e35342e302f32342d3234203d3e20323639323835.roa (raw, json)
Hash identifier:          gSG2IH0mhehp6KRqkDAwBhoDX02TBWqyKucR8jhGqhM=
Subject key identifier:   C4:A7:B3:03:E1:85:38:5B:2A:F3:A0:95:06:B3:0D:3F:10:3F:59:33
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       0208A144880B11773564C3F31E11420A282FF4
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35342e302f32342d3234203d3e20323639323835.roa
Signing time:             Wed 30 Jul 2025 17:02:29 +0000
ROA not before:           Wed 30 Jul 2025 16:57:29 +0000
ROA not after:            Wed 29 Jul 2026 17:02:29 +0000
asID:                     269285
IP address blocks:        45.182.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 17:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:08:a1:44:88:0b:11:77:35:64:c3:f3:1e:11:42:0a:28:2f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Jul 30 16:57:29 2025 GMT
            Not After : Jul 29 17:02:29 2026 GMT
        Subject: CN=C4A7B303E185385B2AF3A09506B30D3F103F5933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9f:67:13:36:d1:2d:27:8c:f6:9e:b1:6a:fa:
                    a6:62:d9:bc:f1:dc:42:20:7b:95:1c:5e:7d:84:98:
                    2b:f2:62:69:03:91:ba:70:01:26:86:ed:b9:55:3a:
                    ff:f4:65:46:b7:02:4f:af:f8:ff:0a:ce:2b:1a:28:
                    1f:fa:9f:36:cc:1b:7e:a0:2d:1e:3f:de:64:ea:3b:
                    98:9d:18:bf:36:e3:a1:72:03:ea:1c:cd:1d:8b:ec:
                    1b:db:cd:ee:93:4a:6d:cd:40:22:01:c8:c7:8b:93:
                    8e:e3:e4:d6:da:cb:86:3d:4b:f8:a5:e0:4b:41:75:
                    68:d6:11:75:25:44:46:f0:f5:75:0a:f1:64:45:42:
                    a6:c7:1b:70:8f:2f:45:3f:cf:56:b0:5a:c6:f9:f5:
                    8a:98:25:a0:50:3c:ea:dd:f2:5f:40:f3:93:0c:c0:
                    83:43:c6:f3:5c:e4:c9:c2:95:32:0e:e2:2c:6a:9f:
                    fc:a7:5b:16:2b:9d:e7:e4:09:74:e0:1d:e6:55:3b:
                    39:5b:b6:42:22:38:9c:e6:2e:9e:a7:82:83:3b:fa:
                    77:08:9f:00:a6:8b:98:e2:bd:d8:02:14:fc:7d:98:
                    7e:6b:ce:c0:02:0a:bb:7f:9c:3e:bb:4d:f7:0a:ca:
                    0a:1a:6a:a6:10:d5:d6:b5:f0:e0:93:e3:c5:39:88:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A7:B3:03:E1:85:38:5B:2A:F3:A0:95:06:B3:0D:3F:10:3F:59:33
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35342e302f32342d3234203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:4e:d1:1c:b5:c4:79:fc:52:34:2f:db:31:d0:49:f5:84:1b:
         93:ea:33:82:7a:dc:d6:c1:09:89:69:73:c7:26:ef:80:a4:d1:
         bd:33:63:14:d9:1e:aa:8b:8b:b9:c4:2c:e6:c3:98:51:35:0d:
         c8:c1:9a:8f:3a:7b:66:7f:c2:67:6b:c3:2b:9d:65:b5:c3:74:
         72:ee:bb:15:d7:f6:c4:ae:25:d3:e8:0c:16:5c:ae:61:69:17:
         81:85:bb:71:f1:d7:d8:84:a6:80:36:04:f0:35:45:b7:30:5f:
         1d:7a:37:06:0b:27:fb:1d:e9:33:a0:87:e1:37:58:46:6f:f9:
         4f:f5:e8:cd:bf:d5:f5:08:f8:40:8e:64:b9:30:04:16:38:b7:
         08:68:29:86:25:52:d1:25:be:8f:fb:f3:11:53:7b:55:a6:92:
         eb:55:b9:85:28:5b:8b:5a:61:d7:64:ee:93:65:68:d9:1f:d7:
         ac:2d:29:d6:8d:7b:00:8d:19:dc:38:53:8e:04:69:a8:60:21:
         ea:12:51:73:e0:a7:7b:72:25:e1:20:83:25:0f:06:d9:42:1e:
         45:e7:ec:43:27:61:e1:fb:33:a4:24:c7:3b:f4:27:dd:98:1c:
         2c:92:d1:a4:1a:ae:54:2b:7a:00:21:ca:ba:7f:dd:74:cc:87:
         1a:c3:1c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:29 2025 by rpki-client