Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3230312e35342e3138342e302f32342d3234203d3e20323731303435.roa
File:                     3230312e35342e3138342e302f32342d3234203d3e20323731303435.roa (raw, json)
Hash identifier:          9mc1wg1bciZbEkIpDcZSb7KIIsvEv6O+jxaUPBP9yA0=
Subject key identifier:   E6:5F:03:41:A4:E4:60:99:51:CB:E8:7A:97:D7:9B:9B:1F:23:48:AA
Certificate issuer:       /CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
Certificate serial:       66BA4A27CD55016907F134E5FC05881473B945E5
Authority key identifier: 22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3230312e35342e3138342e302f32342d3234203d3e20323731303435.roa
Signing time:             Thu 05 Jun 2025 19:49:03 +0000
ROA not before:           Thu 05 Jun 2025 19:44:03 +0000
ROA not after:            Thu 04 Jun 2026 19:49:03 +0000
asID:                     271045
IP address blocks:        201.54.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.crl
                          rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 00:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ba:4a:27:cd:55:01:69:07:f1:34:e5:fc:05:88:14:73:b9:45:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
        Validity
            Not Before: Jun  5 19:44:03 2025 GMT
            Not After : Jun  4 19:49:03 2026 GMT
        Subject: CN=E65F0341A4E4609951CBE87A97D79B9B1F2348AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:d1:59:c4:a5:12:02:5f:bb:d3:fb:2b:06:
                    f2:7f:ae:8f:19:b4:47:f1:6e:e4:68:d3:3f:54:97:
                    17:ce:0d:ad:53:f9:30:95:8e:6e:06:39:9c:2c:96:
                    b0:8b:f1:a9:f3:07:bd:07:19:41:3a:c1:20:df:cc:
                    d0:4d:aa:e7:99:80:18:91:20:26:da:62:87:60:5c:
                    7c:1b:bf:41:53:52:75:43:c3:57:c3:10:21:d0:e8:
                    3d:a2:d9:c4:7f:67:2e:30:56:d4:ec:aa:bb:49:69:
                    1c:55:49:af:44:ea:9b:5f:1e:2c:b4:19:1b:46:30:
                    b1:3b:32:d2:ff:2b:fb:06:ac:46:c3:db:02:85:08:
                    bd:cc:f5:4f:d2:a2:8d:78:8d:8c:00:44:bb:46:84:
                    ca:35:df:c8:29:9a:6f:33:f2:91:20:09:8c:16:40:
                    4b:05:96:c0:09:07:bf:32:b5:e3:19:c7:45:b7:bd:
                    d1:85:80:28:c2:b3:11:19:53:cd:0a:ee:42:d0:9f:
                    3a:2a:1d:bb:0d:9a:da:68:1c:36:68:94:3d:ae:db:
                    52:6c:16:bd:98:a7:fb:1f:63:1e:0a:cc:2b:7a:8e:
                    99:78:ca:b9:73:1a:b8:cf:83:d2:a4:ce:e1:2b:29:
                    10:a4:ad:ef:ee:40:8f:e3:cd:a9:85:c5:d9:af:ef:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5F:03:41:A4:E4:60:99:51:CB:E8:7A:97:D7:9B:9B:1F:23:48:AA
            X509v3 Authority Key Identifier:
                keyid:22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3230312e35342e3138342e302f32342d3234203d3e20323731303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:10:54:6b:c4:d5:80:ee:37:1b:8b:9f:1c:40:53:43:76:30:
         9a:21:37:bd:0b:a9:1a:ce:60:d3:61:a3:d0:bb:f0:90:71:fe:
         f0:66:96:61:7d:b2:a6:e6:1f:37:b2:6b:93:65:e9:dc:db:5b:
         a5:ad:b0:04:11:ae:cc:66:de:89:8e:c9:a7:de:76:c4:5b:05:
         dd:0d:30:ed:b4:67:28:8d:30:bd:09:58:5e:51:7c:29:9d:54:
         df:98:52:56:e2:cc:5b:74:55:0b:ea:61:fa:5d:f2:db:84:5b:
         39:71:17:18:97:30:a6:22:f7:ae:79:54:7f:54:69:ca:1a:91:
         a2:ae:cd:58:31:76:fd:0c:85:25:17:fa:4c:d2:2a:45:75:97:
         70:ec:d4:58:a3:33:38:70:35:93:06:90:c7:b6:e1:9a:7b:7c:
         39:d7:34:91:29:71:3a:04:30:b5:31:06:93:3f:8c:d7:1b:e3:
         90:2a:3d:e6:0e:6d:c3:e4:0d:df:19:dd:40:07:53:04:b4:68:
         95:b4:27:ae:b9:38:d2:f0:46:14:9f:7c:40:19:d4:ef:6c:d3:
         85:fa:1a:ce:98:29:ba:3d:c3:27:ab:5e:de:20:2a:d4:08:e3:
         4e:c4:62:3e:f1:99:3d:42:3e:f1:44:56:d6:6b:9f:e9:b0:08:
         7f:db:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:40:05 2025 by rpki-client