Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa
File:                     34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa (raw, json)
Hash identifier:          lQE0H5i+BmmRfKCVNDuwT4u8OEjW/9FHvTmmfwT2Nnk=
Subject key identifier:   21:41:71:69:FE:AC:B2:80:5E:60:AA:E2:61:6D:EC:1C:15:D6:6E:7F
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       53FE7141B9B617D703E0FFD499215DE29491D232
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa
Signing time:             Tue 03 Jun 2025 16:36:27 +0000
ROA not before:           Tue 03 Jun 2025 16:31:27 +0000
ROA not after:            Tue 02 Jun 2026 16:36:27 +0000
asID:                     268131
IP address blocks:        45.169.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 11:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fe:71:41:b9:b6:17:d7:03:e0:ff:d4:99:21:5d:e2:94:91:d2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: Jun  3 16:31:27 2025 GMT
            Not After : Jun  2 16:36:27 2026 GMT
        Subject: CN=21417169FEACB2805E60AAE2616DEC1C15D66E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:5c:e9:3a:69:87:1a:01:bf:aa:29:8d:71:
                    00:82:e5:ed:77:95:14:c9:f6:39:b2:5e:28:c6:93:
                    60:26:2c:6a:02:7a:c2:94:c1:1f:c8:26:e0:48:39:
                    38:9d:04:8d:47:a9:31:82:8f:c5:0f:ff:08:e0:0d:
                    0b:63:69:f6:37:c0:94:61:f8:38:dd:62:af:e6:fd:
                    66:79:a8:34:d4:f8:93:21:10:7e:2b:20:ee:47:56:
                    03:0b:89:ee:0d:01:28:dc:0f:ca:d5:3d:41:6b:f0:
                    a0:cb:8d:34:52:95:33:58:78:4f:92:c6:ca:78:a2:
                    be:46:bb:26:0c:7a:f9:92:f5:cf:b7:16:f4:55:95:
                    c6:51:8b:f7:f5:16:dd:b2:5a:b3:fc:17:05:0b:94:
                    79:10:03:bc:38:b2:d3:ff:f8:12:ee:82:57:ab:99:
                    de:de:49:79:ad:2f:8f:5e:98:7b:ed:9b:46:ba:47:
                    e5:9c:3d:8d:ff:53:3a:88:00:f4:e5:8a:1e:6f:2d:
                    36:3c:8e:c2:01:d9:ae:df:0a:71:51:20:23:28:a8:
                    14:81:70:4c:6c:39:43:2e:ea:63:45:d1:46:66:9d:
                    43:ef:73:15:8e:4a:d8:2f:3d:a2:d6:9a:a9:0c:e7:
                    ac:a5:88:63:75:4f:97:e8:1d:96:24:64:7d:fa:dd:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:41:71:69:FE:AC:B2:80:5E:60:AA:E2:61:6D:EC:1C:15:D6:6E:7F
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:ac:3e:3c:25:39:4e:d9:dd:fc:f5:99:7e:b2:7b:db:01:57:
         2c:53:dc:91:4d:72:ec:36:0a:92:a4:50:66:c2:9f:44:c0:67:
         70:58:09:8f:f3:01:be:c2:bb:04:ae:57:70:a0:bd:99:1c:b6:
         15:89:de:8a:36:22:59:3e:06:a0:ce:33:5e:61:20:dd:fe:73:
         ed:c2:3b:76:99:cc:b9:f9:7f:b6:28:c8:7a:2d:ca:6c:3e:d6:
         b5:73:c1:5d:53:8f:21:ad:e9:ed:22:ec:85:e8:89:2f:39:c6:
         47:01:a0:ff:09:83:4e:2f:3e:b6:ac:0d:7c:20:b1:06:a9:0c:
         3b:be:79:f8:17:17:ec:64:09:b5:dd:bc:f3:8c:a8:be:0c:0f:
         0d:54:a9:cc:82:15:20:09:79:95:8a:bf:4e:bc:87:52:59:fc:
         4a:98:27:d2:c7:b3:6f:4c:51:96:49:07:b6:85:56:f8:7b:da:
         b2:09:a2:3b:50:e1:24:46:e8:d6:77:15:df:b4:4f:4d:de:17:
         ba:3e:ab:e7:fd:83:a7:9c:eb:92:b8:d5:a4:ec:ac:91:6e:df:
         23:1d:d6:cf:5a:01:c4:34:69:cf:07:62:db:3b:ca:66:55:f7:
         0a:ca:10:6f:8d:4b:bb:70:c2:e0:62:d2:d0:a0:44:c0:9f:2e:
         c2:5a:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 04:34:44 2025 by rpki-client