Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/34352e3232392e3130382e302f32322d3234203d3e20323637313038.roa
File:                     34352e3232392e3130382e302f32322d3234203d3e20323637313038.roa (raw, json)
Hash identifier:          /77+7w+B5LqF39qhKnp+UtittSMOIKzMs46PExIGMd4=
Subject key identifier:   31:42:02:F2:A0:C8:46:A9:93:CD:F4:B9:53:AD:CD:C0:9A:14:A0:6B
Certificate issuer:       /CN=8876247D2D990189840942D09185142302C1F51E
Certificate serial:       06C9FB5BE17BD6BD90D7AADF8CE8E29BDFE1F252
Authority key identifier: 88:76:24:7D:2D:99:01:89:84:09:42:D0:91:85:14:23:02:C1:F5:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8876247D2D990189840942D09185142302C1F51E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/34352e3232392e3130382e302f32322d3234203d3e20323637313038.roa
Signing time:             Fri 08 Aug 2025 18:54:08 +0000
ROA not before:           Fri 08 Aug 2025 18:49:08 +0000
ROA not after:            Fri 07 Aug 2026 18:54:08 +0000
asID:                     267108
IP address blocks:        45.229.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/8876247D2D990189840942D09185142302C1F51E.crl
                          rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/8876247D2D990189840942D09185142302C1F51E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8876247D2D990189840942D09185142302C1F51E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 02:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c9:fb:5b:e1:7b:d6:bd:90:d7:aa:df:8c:e8:e2:9b:df:e1:f2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8876247D2D990189840942D09185142302C1F51E
        Validity
            Not Before: Aug  8 18:49:08 2025 GMT
            Not After : Aug  7 18:54:08 2026 GMT
        Subject: CN=314202F2A0C846A993CDF4B953ADCDC09A14A06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d0:56:74:b4:0b:1d:46:29:d1:09:96:d9:34:
                    a8:73:8a:2c:f2:1d:4a:f9:cd:3c:3a:58:8a:6e:ec:
                    d5:c5:c1:20:a0:66:1b:c6:be:a4:4d:b1:2c:4b:b6:
                    cc:7b:ae:f4:b9:48:f9:d6:3c:9a:ae:f1:8c:bf:3c:
                    ef:13:76:ed:90:3e:a3:10:22:cf:0d:9b:d4:0f:d6:
                    3e:a2:95:5a:46:d0:6e:ce:45:13:a0:07:38:3e:b4:
                    d9:2b:c8:62:08:57:08:6e:33:f8:de:86:da:85:45:
                    24:a9:7a:c2:ce:bd:3c:6f:86:f2:26:90:65:6e:4f:
                    37:ad:9d:e8:62:f8:45:8b:24:fb:16:e1:a5:f8:3d:
                    c2:c3:52:b5:1c:16:48:3a:dd:58:c4:11:d8:2e:c7:
                    e8:0f:ac:e6:32:ef:9d:95:9a:94:64:50:36:11:cc:
                    3f:89:45:7e:ef:d0:50:36:4e:28:1f:de:48:4d:42:
                    08:a1:dc:38:88:7e:ab:7a:48:78:d1:09:b4:8e:86:
                    29:54:9d:dd:6a:04:57:1e:e6:d3:2f:cf:6b:19:b1:
                    43:c4:28:e4:8c:3c:9a:0c:1b:eb:d1:c3:dc:4d:f5:
                    ba:cb:a8:19:0c:c0:4d:b2:ed:1d:42:d6:69:35:58:
                    56:8f:51:b3:7e:cb:1d:57:c8:41:a4:12:53:a3:f6:
                    9d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:42:02:F2:A0:C8:46:A9:93:CD:F4:B9:53:AD:CD:C0:9A:14:A0:6B
            X509v3 Authority Key Identifier:
                keyid:88:76:24:7D:2D:99:01:89:84:09:42:D0:91:85:14:23:02:C1:F5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/8876247D2D990189840942D09185142302C1F51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8876247D2D990189840942D09185142302C1F51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/34352e3232392e3130382e302f32322d3234203d3e20323637313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:86:f3:8e:ed:49:b6:80:eb:54:a5:13:09:b1:20:b1:63:29:
         60:c8:d6:e0:96:39:67:8a:c8:42:03:37:4e:25:13:9a:d1:1e:
         59:e2:83:43:81:19:13:3b:ce:61:b1:3c:b4:f2:a7:aa:65:e0:
         90:ee:11:5a:8a:cb:6c:52:07:77:07:da:a5:79:64:fa:28:61:
         a7:79:1f:4b:69:b5:86:8a:ee:62:87:dd:3a:85:39:e1:15:1e:
         37:29:0e:45:4e:d7:96:5f:84:8e:0e:d7:2b:3d:dd:8c:6f:ec:
         b7:71:52:d7:8e:05:36:da:dd:fc:2d:25:b9:f2:45:5d:3b:26:
         98:73:a7:e4:76:ec:80:86:70:b8:d1:79:71:22:aa:f2:b9:76:
         e7:19:7f:03:6b:73:9c:fa:64:55:51:86:1e:d9:af:31:9a:40:
         ce:50:82:c7:8d:1d:98:35:26:40:06:36:22:9d:df:8c:c9:f7:
         2d:74:7e:46:2b:87:2d:21:75:ea:d8:06:ae:32:d3:60:7e:ca:
         4a:04:b6:c8:27:03:09:48:76:17:c6:94:ca:4f:48:da:f8:fd:
         f9:d4:19:20:9d:5b:e6:e2:62:5c:2e:fc:88:f0:f8:75:f3:91:
         4f:83:60:b4:52:b8:11:b4:5d:77:67:1b:a4:55:1f:02:1e:af:
         70:16:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:25:51 2025 by rpki-client