Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/34352e3136332e3234352e302f32342d3234203d3e20323638353838.roa
File:                     34352e3136332e3234352e302f32342d3234203d3e20323638353838.roa (raw, json)
Hash identifier:          SWojAlWPlrh2br1Os+rdbQtYeZ8ttN8wcykwiUroyZ4=
Subject key identifier:   C5:DE:F1:BA:DA:8E:15:2B:F3:F4:FE:6D:6E:E8:5A:C2:AA:6B:96:0B
Certificate issuer:       /CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
Certificate serial:       5E01BE8B2E391F0744CE58C43722BF8B01E648B7
Authority key identifier: BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/34352e3136332e3234352e302f32342d3234203d3e20323638353838.roa
Signing time:             Sun 27 Jul 2025 01:33:06 +0000
ROA not before:           Sun 27 Jul 2025 01:28:06 +0000
ROA not after:            Sun 26 Jul 2026 01:33:06 +0000
asID:                     268588
IP address blocks:        45.163.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl
                          rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 20:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:01:be:8b:2e:39:1f:07:44:ce:58:c4:37:22:bf:8b:01:e6:48:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
        Validity
            Not Before: Jul 27 01:28:06 2025 GMT
            Not After : Jul 26 01:33:06 2026 GMT
        Subject: CN=C5DEF1BADA8E152BF3F4FE6D6EE85AC2AA6B960B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:18:80:a5:91:d2:22:e8:74:c5:f2:34:6b:
                    f1:50:8b:5b:13:44:34:ed:bf:8d:bb:2f:da:68:66:
                    e3:e8:ac:81:dc:45:c1:21:13:f4:39:11:d2:b8:25:
                    56:ef:70:89:c4:bf:06:89:07:0d:f1:ca:38:b2:c9:
                    f7:f7:6f:10:7f:96:f2:1d:e7:c4:12:09:20:e3:a2:
                    02:06:18:4b:98:e2:b6:61:7e:2b:60:f1:4c:24:9f:
                    36:89:2d:3a:83:4c:1a:2e:f4:62:fa:af:d5:8d:87:
                    9e:a8:6e:2d:cf:d2:5f:16:d2:dc:cf:c5:ae:5c:6c:
                    85:6e:89:92:da:61:b9:d7:88:85:fe:86:7c:aa:5d:
                    30:6b:5a:2b:17:e8:30:51:37:87:d2:5e:f9:b9:dc:
                    42:09:c3:28:e4:fd:7c:5b:16:da:89:34:04:1d:4a:
                    01:c6:4c:c6:7d:bf:30:03:9e:a8:61:02:b1:0b:7b:
                    3a:8c:be:d5:84:b5:0e:8b:43:7e:ff:00:22:e0:9b:
                    dc:63:d9:7d:3b:2f:7b:8b:5e:85:4e:cc:73:4d:13:
                    c2:1f:0d:56:fb:65:ec:c3:44:0b:3a:b1:fb:07:28:
                    30:5c:5d:fb:1f:c2:50:59:c1:1d:ad:b4:7b:d6:23:
                    b6:2b:f9:93:8c:71:bc:6e:7b:80:d7:f2:1e:0b:8b:
                    4f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DE:F1:BA:DA:8E:15:2B:F3:F4:FE:6D:6E:E8:5A:C2:AA:6B:96:0B
            X509v3 Authority Key Identifier:
                keyid:BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/34352e3136332e3234352e302f32342d3234203d3e20323638353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:b2:13:35:04:79:8f:35:2c:70:4a:5e:37:53:05:b8:6b:
         89:bf:0c:36:27:c0:a6:d1:df:ea:1e:bb:a0:9d:54:fb:6b:5c:
         38:4d:83:c6:12:33:59:ab:34:4a:39:4a:52:5b:c8:62:6f:b2:
         bd:58:d2:0b:c8:3b:1d:c4:7f:68:ef:8e:74:2b:bd:81:6a:8b:
         31:f8:d1:a1:87:70:db:ad:54:1b:24:cd:a8:06:33:85:4d:04:
         ef:df:12:2b:79:45:e6:ad:e6:24:6e:17:40:2a:36:e8:9f:54:
         b6:50:5e:38:96:86:69:e5:77:b8:32:05:2a:94:11:c6:b1:df:
         79:9e:03:ab:32:78:0a:43:f9:42:0c:86:a7:f6:ef:21:89:5a:
         01:a8:1d:74:e0:04:07:c6:4b:c7:ee:4d:f4:53:90:e7:0a:af:
         2e:ea:0e:09:a9:f7:c9:36:c3:aa:9d:c2:ad:86:c7:90:55:22:
         8a:3e:bd:03:29:24:4d:2a:ea:c4:07:12:ec:b6:f9:77:ac:d3:
         1b:d4:a1:f7:e2:7e:29:11:20:17:66:f0:cc:32:cf:1d:d5:80:
         21:87:9c:bd:55:3b:e9:f4:ce:ef:fb:6e:ac:d5:16:89:52:b1:
         74:d4:31:34:24:49:cf:9b:4b:df:d9:10:e7:0e:e6:36:67:5a:
         84:e2:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:44:18 2025 by rpki-client