Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230372e302f32342d3234203d3e20323636353434.roa
File:                     34352e36352e3230372e302f32342d3234203d3e20323636353434.roa (raw, json)
Hash identifier:          HN+ibNQPnjQKEy+6daDYwjC3EGgE2MpL0tKnPJaG6Q4=
Subject key identifier:   69:9D:B2:94:F1:6C:95:7C:C3:4E:32:DD:CD:16:B2:00:1E:A0:E2:89
Certificate issuer:       /CN=3806DB121C9269AE400CDA71100F88AF76F0469C
Certificate serial:       468C672590AECEDB0891D6A9B592BC410DC6D901
Authority key identifier: 38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230372e302f32342d3234203d3e20323636353434.roa
Signing time:             Thu 03 Jul 2025 04:07:24 +0000
ROA not before:           Thu 03 Jul 2025 04:02:24 +0000
ROA not after:            Thu 02 Jul 2026 04:07:24 +0000
asID:                     266544
IP address blocks:        45.65.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8c:67:25:90:ae:ce:db:08:91:d6:a9:b5:92:bc:41:0d:c6:d9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3806DB121C9269AE400CDA71100F88AF76F0469C
        Validity
            Not Before: Jul  3 04:02:24 2025 GMT
            Not After : Jul  2 04:07:24 2026 GMT
        Subject: CN=699DB294F16C957CC34E32DDCD16B2001EA0E289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:91:75:d7:99:08:0e:21:a2:6d:5e:de:35:
                    d9:80:f3:ab:ab:a9:22:cf:30:6c:1b:63:27:14:eb:
                    a0:30:21:2f:e8:d4:65:c5:53:9e:de:9f:e7:8e:c1:
                    c1:e5:2d:f9:da:67:d9:7f:c3:69:c3:6f:0e:34:b8:
                    70:33:aa:bb:e5:1c:f8:d7:78:ff:5f:97:e9:b1:6f:
                    09:9a:35:ab:f5:3c:a2:6e:89:a0:46:71:0e:2f:31:
                    1f:fb:3a:0d:1f:77:3e:7c:cd:9e:0b:18:66:7e:3c:
                    b0:db:eb:51:30:d5:57:62:f6:3f:0f:4b:d0:7b:2d:
                    7b:d4:4a:95:5d:61:d2:40:7c:d1:6c:9e:62:a9:b4:
                    41:76:5b:56:30:95:27:ad:4d:e6:ef:8e:d5:c5:5a:
                    3d:d7:39:96:ea:82:21:a1:1c:ad:6c:2a:c6:a7:c0:
                    a5:5b:d8:a9:f7:18:86:40:fa:bd:d1:7b:e1:d3:13:
                    45:3a:53:92:b3:9c:cc:bb:b8:77:f2:7e:ba:e4:b2:
                    38:43:fa:5a:af:49:11:63:08:7c:8d:75:9a:c0:f3:
                    0a:e7:42:7b:42:37:c1:ef:30:e1:77:a5:0f:37:72:
                    77:8a:de:55:ba:3a:d9:c0:23:76:e1:52:14:ac:19:
                    78:91:ca:fe:9d:b8:28:ae:2f:46:b9:57:7d:52:dd:
                    82:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9D:B2:94:F1:6C:95:7C:C3:4E:32:DD:CD:16:B2:00:1E:A0:E2:89
            X509v3 Authority Key Identifier:
                keyid:38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230372e302f32342d3234203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:00:1c:62:13:25:ab:36:17:dd:57:b4:75:ad:39:e9:2a:b0:
         7c:e6:d5:26:c2:52:de:67:84:d6:84:34:9b:31:9d:5b:2d:4e:
         0a:b6:08:2d:01:ae:63:f6:0b:8f:6d:62:10:c5:ea:74:16:76:
         34:fc:d8:48:55:c5:fe:a5:ff:1f:c9:91:14:1e:af:a2:9d:6f:
         82:84:08:04:97:c2:35:dd:73:eb:6a:c3:63:9a:43:d8:7b:df:
         56:14:96:e8:c6:85:23:27:2f:9c:1f:44:1e:33:3d:45:b3:b7:
         e0:83:f7:56:60:f6:75:a7:27:1e:e0:65:83:0f:4d:3c:9d:47:
         b6:88:d2:eb:8a:3a:6f:39:1c:d2:3c:d4:62:c1:5a:ca:1b:2c:
         1a:36:c2:0e:da:fc:33:c6:7b:f5:f3:f8:e1:d5:42:37:55:bb:
         c9:32:01:7c:15:a8:b9:dc:f8:b0:c2:1b:b5:df:e4:af:61:ac:
         4a:69:18:11:a4:9e:ca:10:4b:fe:15:79:09:55:89:e2:ce:6b:
         6c:f0:f7:54:d9:33:73:82:8e:39:91:12:7e:d9:13:a2:6b:0a:
         fb:54:a6:e5:13:fb:83:3e:ab:e6:25:ce:37:b5:f2:b9:7f:51:
         6d:18:2e:b8:af:8f:51:dd:02:89:fc:4e:e0:e3:11:fe:ee:4e:
         57:4b:6d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:50:01 2025 by rpki-client