Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa
File:                     34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa (raw, json)
Hash identifier:          h5lDrTzXASaiidfepKWG0rcMpwFzPz3KoI1cy3hoLmE=
Subject key identifier:   49:2C:34:28:11:7C:99:DF:CF:3A:CC:B6:07:8F:72:78:32:4A:36:B4
Certificate issuer:       /CN=28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7
Certificate serial:       2DAE4C321B73155832A161DD52A48F912C44F595
Authority key identifier: 28:A1:4F:B4:8D:8F:61:99:B0:F3:C2:B5:E7:98:05:C2:8F:7C:FB:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa
Signing time:             Thu 07 Aug 2025 15:16:49 +0000
ROA not before:           Thu 07 Aug 2025 15:11:49 +0000
ROA not after:            Thu 06 Aug 2026 15:16:49 +0000
asID:                     262278
IP address blocks:        45.190.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.crl
                          rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 14:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ae:4c:32:1b:73:15:58:32:a1:61:dd:52:a4:8f:91:2c:44:f5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7
        Validity
            Not Before: Aug  7 15:11:49 2025 GMT
            Not After : Aug  6 15:16:49 2026 GMT
        Subject: CN=492C3428117C99DFCF3ACCB6078F7278324A36B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c6:1d:e0:0d:43:b0:b8:43:32:ef:9e:52:cd:
                    d4:5b:93:61:3e:1b:1d:cb:3e:ec:55:d4:68:1d:cc:
                    02:a6:f5:57:c2:9e:9e:69:28:a7:86:02:42:c3:42:
                    05:7c:1f:87:51:66:60:4b:86:78:9e:18:27:a3:15:
                    e5:f4:87:17:ad:a8:3b:c6:01:52:a5:14:6c:c5:b4:
                    aa:9f:25:3b:27:f4:9b:51:5d:cf:11:53:e0:60:b7:
                    3a:d8:f9:00:7b:b9:5d:cb:42:58:60:81:c6:63:8d:
                    a7:5f:47:98:3f:fc:98:fa:5e:5e:eb:2b:51:73:8b:
                    ff:7d:71:fc:b0:90:0c:81:06:f5:2d:12:fb:af:c5:
                    0c:fd:0b:12:d1:c3:de:d9:44:c9:2c:ef:07:86:83:
                    3d:6a:46:69:14:67:b3:0e:94:81:d0:7a:85:b2:52:
                    1f:b0:13:7f:4e:f5:ba:fd:70:79:28:0f:73:dd:fb:
                    06:fa:56:c3:11:26:77:a3:df:87:b7:c1:40:73:39:
                    19:ed:97:6a:f6:db:ca:48:31:d9:b2:3f:3c:b2:95:
                    e6:14:e8:f4:49:fd:74:0c:90:2c:08:bf:f8:57:c5:
                    63:34:7d:a6:4e:00:de:1e:31:9a:50:72:75:5a:86:
                    df:1b:58:b0:e5:59:b6:25:b6:7e:5a:72:78:45:fe:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2C:34:28:11:7C:99:DF:CF:3A:CC:B6:07:8F:72:78:32:4A:36:B4
            X509v3 Authority Key Identifier:
                keyid:28:A1:4F:B4:8D:8F:61:99:B0:F3:C2:B5:E7:98:05:C2:8F:7C:FB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:0e:2f:fc:f3:ca:6b:bd:81:2c:55:7b:58:09:5f:2d:a5:14:
         77:06:e5:2f:a0:69:89:38:95:60:7d:d7:10:40:9c:f9:8b:84:
         03:62:75:78:25:39:81:c5:92:54:98:46:10:c2:a7:9c:51:52:
         bd:d0:1f:2b:29:18:b0:26:78:d7:74:d2:a5:a4:5b:b3:c4:75:
         4a:18:d8:a5:d6:7c:38:7e:05:bc:eb:dd:88:55:90:e9:a3:0d:
         cc:ae:c4:d5:50:da:2e:e4:36:d2:6a:11:08:a2:97:ac:9c:72:
         5c:9f:07:36:ef:18:3d:ee:4e:31:f8:e8:f8:99:0b:c9:2e:84:
         c6:b7:ee:cb:59:ae:1c:19:c2:ee:84:5b:fd:23:39:6a:73:d9:
         29:d5:1b:d8:56:e6:9b:d6:57:18:74:4b:19:93:57:dc:ed:18:
         a4:34:14:da:ec:cc:48:e5:45:a5:21:23:8c:48:d9:84:88:c4:
         02:14:0b:96:11:05:e2:09:73:e8:ca:2b:50:1d:6c:a7:0c:a7:
         3f:1f:c2:63:22:4d:76:0c:47:02:9a:26:8b:02:87:8b:17:b5:
         68:f6:b8:0f:da:8f:48:8c:08:01:f2:1d:43:bb:ca:ed:65:44:
         68:7a:de:fb:76:b1:89:86:3d:2b:5f:57:35:13:d9:2f:53:5e:
         62:46:b1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:20:32 2025 by rpki-client