Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/34352e3232342e3136342e302f32322d3332203d3e20323637363632.roa
File:                     34352e3232342e3136342e302f32322d3332203d3e20323637363632.roa (raw, json)
Hash identifier:          1+NjNQ7Y5KQiw6MN0LZND9pjzh+vVZRY0JEyGjZhMJE=
Subject key identifier:   AE:BA:C8:00:AD:79:69:84:F7:58:85:3B:33:85:5D:35:67:39:1C:F3
Certificate issuer:       /CN=D05CE4E09A56473D03EDB36445192000C8B77A5D
Certificate serial:       6B30C35BF71F3E7F0D36FD6F8530394BBEBE16C1
Authority key identifier: D0:5C:E4:E0:9A:56:47:3D:03:ED:B3:64:45:19:20:00:C8:B7:7A:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05CE4E09A56473D03EDB36445192000C8B77A5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/34352e3232342e3136342e302f32322d3332203d3e20323637363632.roa
Signing time:             Mon 14 Jul 2025 18:18:23 +0000
ROA not before:           Mon 14 Jul 2025 18:13:23 +0000
ROA not after:            Mon 13 Jul 2026 18:18:23 +0000
asID:                     267662
IP address blocks:        45.224.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/D05CE4E09A56473D03EDB36445192000C8B77A5D.crl
                          rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/D05CE4E09A56473D03EDB36445192000C8B77A5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05CE4E09A56473D03EDB36445192000C8B77A5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 19:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:30:c3:5b:f7:1f:3e:7f:0d:36:fd:6f:85:30:39:4b:be:be:16:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05CE4E09A56473D03EDB36445192000C8B77A5D
        Validity
            Not Before: Jul 14 18:13:23 2025 GMT
            Not After : Jul 13 18:18:23 2026 GMT
        Subject: CN=AEBAC800AD796984F758853B33855D3567391CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:de:39:34:06:d0:e7:f1:80:8b:0c:ec:a3:
                    2f:ee:bc:b1:7a:32:bc:7f:7b:50:5c:8b:42:e6:9c:
                    54:87:f6:1c:da:2d:af:93:ae:d4:3e:0f:49:c4:11:
                    e2:dc:9c:a3:06:22:ba:65:d9:82:9f:75:be:13:2f:
                    c0:56:ed:fc:8e:1b:65:f4:b0:ca:7a:95:02:43:65:
                    a5:f4:b4:ee:78:40:d1:57:89:6a:60:ce:98:ee:dd:
                    f2:49:3d:e3:3f:44:5b:5b:28:18:6c:db:dd:48:77:
                    db:89:5e:ee:0e:7a:45:15:f4:4f:c5:04:de:75:00:
                    eb:da:b3:58:c9:5b:24:9f:7b:b6:97:5d:70:fd:41:
                    a2:cf:46:c1:90:af:1d:43:5b:0d:ff:dc:27:24:a9:
                    28:87:43:9e:5a:4a:37:19:69:ef:6c:c8:df:63:4a:
                    1a:06:b6:19:d0:26:ff:5b:d9:2e:66:c7:ac:cb:45:
                    f1:5d:2d:3e:65:be:e2:ae:10:2e:da:6c:b3:e3:8c:
                    fd:03:25:26:eb:49:60:65:31:aa:fd:e6:f4:7d:77:
                    2a:6d:34:d4:6d:e7:67:2e:31:c2:81:62:dd:a3:30:
                    ca:c8:25:ec:3b:86:3c:b6:62:1e:23:24:80:e9:0a:
                    80:c3:e1:9e:e2:81:3a:5f:e1:3d:8b:e0:25:93:ba:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BA:C8:00:AD:79:69:84:F7:58:85:3B:33:85:5D:35:67:39:1C:F3
            X509v3 Authority Key Identifier:
                keyid:D0:5C:E4:E0:9A:56:47:3D:03:ED:B3:64:45:19:20:00:C8:B7:7A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/D05CE4E09A56473D03EDB36445192000C8B77A5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05CE4E09A56473D03EDB36445192000C8B77A5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/34352e3232342e3136342e302f32322d3332203d3e20323637363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:4d:d5:34:2e:79:b2:0f:c9:56:c1:7a:85:97:a0:dd:c3:b7:
         ec:81:e9:f6:7f:2d:0b:12:09:08:d6:39:e6:2b:5b:39:d3:5c:
         47:c5:e8:61:c7:0c:a9:78:52:36:0f:a3:f8:c6:67:da:cc:42:
         b5:94:59:02:39:98:6d:3e:97:39:2a:13:97:da:3d:d0:97:67:
         02:bd:17:09:ed:dd:66:8b:7a:26:bd:63:78:a7:04:a5:14:e9:
         d8:fc:98:e4:8b:2a:65:3f:d4:09:e6:86:6c:6a:67:96:64:94:
         3c:35:26:20:f3:a7:4b:b8:5c:17:c5:13:c0:25:1b:ee:59:c9:
         d7:bc:45:07:4d:61:00:49:26:44:90:f0:15:2c:8f:a5:2e:d9:
         e0:a4:86:50:4f:f9:5c:a6:db:a9:ae:d6:9e:5a:ba:03:19:af:
         aa:6e:97:d6:39:2a:55:01:2b:ea:6c:1b:9b:b8:d6:3e:c9:d2:
         f2:99:6d:48:b7:4a:4e:f5:af:72:2b:0e:51:00:5e:83:8d:7b:
         de:4a:80:10:d9:05:94:57:76:6e:60:a4:7a:d2:a9:17:4b:46:
         c0:22:13:ce:eb:a8:19:d7:5e:b1:9b:23:3f:8d:c8:e5:2a:b4:
         34:69:1f:15:8c:7c:85:63:98:04:66:24:1c:1f:6f:bd:c8:05:
         e6:2c:50:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:39:51 2025 by rpki-client