Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa
File:                     34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa (raw, json)
Hash identifier:          q+amAFUq2HfVeUWY3RZweFqm/cWdBkXM57dueCGAPio=
Subject key identifier:   95:CC:0B:CE:94:E3:E7:E9:AF:0C:BA:47:A7:C0:42:45:F7:55:29:26
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       64B62C7AD9542048513BABDA1AA6CB5C3747CF1B
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa
Signing time:             Sat 05 Jul 2025 01:32:48 +0000
ROA not before:           Sat 05 Jul 2025 01:27:48 +0000
ROA not after:            Sat 04 Jul 2026 01:32:48 +0000
asID:                     269182
IP address blocks:        45.181.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 04:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b6:2c:7a:d9:54:20:48:51:3b:ab:da:1a:a6:cb:5c:37:47:cf:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Jul  5 01:27:48 2025 GMT
            Not After : Jul  4 01:32:48 2026 GMT
        Subject: CN=95CC0BCE94E3E7E9AF0CBA47A7C04245F7552926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:52:86:c4:7f:ef:08:a2:93:b2:17:bd:71:
                    f7:ce:fa:bc:a3:c9:d8:a1:f1:25:2d:d7:41:53:7e:
                    51:4a:60:4b:38:4a:a3:fd:58:e8:96:96:96:6d:2e:
                    16:9d:da:e0:08:fb:aa:cc:50:9c:45:06:a7:b4:c7:
                    da:94:56:d2:5b:d8:a7:cf:4b:df:a2:53:ba:7a:f5:
                    44:1e:68:4a:ca:f7:7a:b6:80:02:eb:7f:a7:bc:83:
                    57:1e:ea:b6:ce:92:67:4c:55:00:1b:03:fd:1b:e4:
                    9e:e5:3f:e6:7e:2d:6f:93:75:3a:6d:5b:f5:d7:7a:
                    53:44:ec:a2:78:48:3d:2c:b0:20:86:19:9a:5d:52:
                    43:4b:5e:ce:c6:43:a6:af:ca:12:a7:55:bf:32:09:
                    50:7e:13:d9:5d:46:ab:6a:3c:1f:95:b6:98:4a:c7:
                    f8:fd:c5:65:00:51:2b:9c:d6:86:2f:b7:05:2e:5a:
                    3f:63:a7:4a:fe:22:cd:ca:35:6f:6d:a2:3f:1e:f5:
                    ce:e0:63:6f:7d:79:9e:d8:db:58:e2:26:74:00:d9:
                    28:b5:ec:52:93:bb:f0:8e:36:a4:2b:91:43:87:cb:
                    92:7a:34:f7:cf:f4:61:65:8a:b6:05:db:ea:f5:32:
                    d7:f5:5e:6a:6d:37:84:07:f1:d8:0f:17:e2:8c:ee:
                    5f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CC:0B:CE:94:E3:E7:E9:AF:0C:BA:47:A7:C0:42:45:F7:55:29:26
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:47:95:74:23:96:70:59:d1:1d:9b:57:d3:b0:c4:5a:93:b2:
         bd:aa:b8:b3:62:82:03:33:b4:6e:c1:3f:d1:7d:7b:89:45:20:
         c8:1d:34:20:79:46:31:c1:4d:90:2e:82:67:79:98:ce:09:f0:
         a6:2e:39:c1:e0:ed:87:df:d6:db:fe:75:33:b8:c3:3b:61:e9:
         93:8f:77:a6:e3:e7:68:0a:18:ad:84:12:6e:64:73:58:a1:a9:
         8a:fc:a4:bf:ea:10:ee:e5:fd:95:2f:50:25:54:70:b7:f1:38:
         0d:43:e2:14:10:bd:26:02:55:16:90:75:2c:ec:b0:5a:a1:ca:
         89:8a:c4:e5:08:39:fe:d8:30:a7:21:28:a8:04:0d:cb:72:34:
         bc:6b:a3:79:15:fc:d4:c0:db:9a:cd:cf:cd:d2:a3:5d:a4:64:
         85:8d:84:e4:da:55:3d:37:a7:da:de:a4:6a:05:3f:33:ff:03:
         e6:85:7f:d2:a0:40:0d:e7:e8:b8:9f:b5:56:0c:72:79:bb:94:
         fe:b0:38:78:de:97:40:2f:f4:9d:81:fa:a4:27:1c:f0:ef:dc:
         dc:22:e3:f0:66:e8:30:cd:7d:6c:5c:37:3c:90:48:26:ff:74:
         15:be:bf:2d:7b:f4:30:36:14:24:c7:75:51:d6:7b:9c:3e:bc:
         1e:56:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:15:03 2025 by rpki-client