Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33332e302f32342d3234203d3e20323639323635.roa
File:                     34352e3138322e33332e302f32342d3234203d3e20323639323635.roa (raw, json)
Hash identifier:          mOXkqMNclDJ7PmlNw0yxQWbMww+lvOI6qELEBEEMLH0=
Subject key identifier:   02:94:18:36:DC:5F:E4:B4:84:A9:80:10:1A:CE:8C:3A:48:DE:C1:E7
Certificate issuer:       /CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
Certificate serial:       3ECED334D19FA5C42C09439C78BB2C98656AB656
Authority key identifier: D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33332e302f32342d3234203d3e20323639323635.roa
Signing time:             Tue 29 Jul 2025 21:56:43 +0000
ROA not before:           Tue 29 Jul 2025 21:51:43 +0000
ROA not after:            Tue 28 Jul 2026 21:56:43 +0000
asID:                     269265
IP address blocks:        45.182.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 14:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ce:d3:34:d1:9f:a5:c4:2c:09:43:9c:78:bb:2c:98:65:6a:b6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
        Validity
            Not Before: Jul 29 21:51:43 2025 GMT
            Not After : Jul 28 21:56:43 2026 GMT
        Subject: CN=02941836DC5FE4B484A980101ACE8C3A48DEC1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:74:5b:9d:10:34:8e:b1:a9:00:26:81:9d:
                    ca:92:66:d6:eb:3e:aa:16:86:d4:3b:71:09:07:c3:
                    f8:f9:5b:88:a9:d7:1e:ea:f5:43:8e:f0:74:b3:18:
                    a4:e4:92:43:7e:4a:e5:ff:78:a6:f1:26:3a:01:f2:
                    78:70:e3:23:c0:8a:19:6c:50:b6:0c:28:70:9c:3b:
                    6f:96:a9:8d:de:50:5c:3a:e5:b9:cf:ce:de:95:06:
                    79:ff:f3:6d:db:02:56:97:0c:cc:1d:c1:0c:28:b7:
                    c9:ff:b2:22:e3:ca:02:96:47:11:34:a4:6e:26:7f:
                    9e:9e:40:4d:a7:c9:5f:81:c5:0e:ef:06:fe:cc:80:
                    a1:96:46:16:cf:32:5b:a3:6b:d0:70:8a:3b:b5:6a:
                    30:24:67:c7:c9:37:46:0c:7c:0a:de:2d:bd:07:13:
                    1b:ba:f7:8b:f7:8c:68:d8:25:88:9b:cc:de:5e:86:
                    f5:d8:1b:84:c6:25:eb:ae:7f:5a:86:b7:87:f2:79:
                    e9:03:67:6e:7b:7e:8e:46:93:2a:3a:7d:f5:45:2a:
                    00:e1:c9:d5:12:86:87:f5:aa:fb:a5:a2:1e:9a:21:
                    86:93:2a:45:0a:b3:dd:b9:de:0e:9b:58:2f:58:55:
                    cd:89:80:da:6a:d2:92:74:7b:77:02:07:c2:a5:b6:
                    ee:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:94:18:36:DC:5F:E4:B4:84:A9:80:10:1A:CE:8C:3A:48:DE:C1:E7
            X509v3 Authority Key Identifier:
                keyid:D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33332e302f32342d3234203d3e20323639323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:9c:c8:b8:f1:6b:a1:b4:ae:69:c4:d5:6d:84:44:90:65:29:
         93:2e:c3:5d:df:0f:88:e0:45:76:bb:8c:98:2a:63:19:27:3f:
         49:06:89:85:60:1a:46:40:c9:f1:ee:65:81:08:9e:de:18:39:
         82:3b:20:42:87:1e:19:4d:e3:c2:f1:5f:6d:23:8b:16:ea:0e:
         3a:0b:52:31:8d:4d:13:d5:69:8a:f3:39:5e:62:4e:e9:9f:d3:
         e0:f3:9c:d4:d1:5b:c5:6e:75:a4:5a:2f:bc:96:df:ba:e2:7d:
         69:08:9b:dd:9d:d2:29:c9:09:d3:d5:12:f2:a6:48:44:32:92:
         c4:87:13:c2:09:31:b3:7c:05:f2:c5:aa:cf:76:2c:01:8c:7c:
         af:be:d8:8f:5a:14:a4:f0:5d:68:30:22:4d:b4:f0:8d:e2:e1:
         ac:52:6c:89:79:94:6b:0e:f2:7b:0e:f6:ab:6e:e8:f5:d5:fa:
         89:d8:b5:13:ba:fd:e6:d5:e5:85:6a:3b:b3:da:af:91:f0:38:
         84:2d:50:d5:23:86:90:a3:51:7b:9c:4c:41:b8:c8:dc:f2:3d:
         38:b5:99:48:d4:a9:4d:6a:e3:e3:81:3e:3b:00:ca:e3:09:a4:
         c3:bb:89:d2:61:b0:81:94:03:8b:c2:c0:71:7f:15:df:af:92:
         8c:76:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:27:16 2025 by rpki-client