Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37322e302f32322d3232203d3e20323637363638.roa
File:                     34352e3232342e37322e302f32322d3232203d3e20323637363638.roa (raw, json)
Hash identifier:          XmOAbYwnngzlW16vK48KOnwwdjhg62kJY4yompHRFzM=
Subject key identifier:   0C:5D:4C:AA:DB:63:BE:EC:93:DA:E7:42:BD:57:4B:BA:58:EB:90:A8
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       6059ED31F53E500B64A619DD70D6ECC6CDC22862
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37322e302f32322d3232203d3e20323637363638.roa
Signing time:             Thu 17 Jul 2025 20:23:58 +0000
ROA not before:           Thu 17 Jul 2025 20:18:58 +0000
ROA not after:            Thu 16 Jul 2026 20:23:58 +0000
asID:                     267668
IP address blocks:        45.224.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 00:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:59:ed:31:f5:3e:50:0b:64:a6:19:dd:70:d6:ec:c6:cd:c2:28:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Jul 17 20:18:58 2025 GMT
            Not After : Jul 16 20:23:58 2026 GMT
        Subject: CN=0C5D4CAADB63BEEC93DAE742BD574BBA58EB90A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:cf:1b:7d:a7:ec:83:3b:0d:c3:46:9f:17:
                    3f:ed:64:e8:44:3c:13:3c:b1:bb:9d:82:ff:d0:59:
                    24:bf:d2:b5:21:8d:f7:57:51:f7:27:62:76:66:dc:
                    ba:7e:5e:44:60:48:aa:39:31:fe:d3:15:fa:dc:41:
                    68:7a:95:31:c1:2a:77:71:3b:2f:5e:29:27:1f:e3:
                    94:4f:55:66:df:13:95:e9:64:d0:46:e7:f0:ac:22:
                    11:79:08:9f:0b:fa:63:c9:1b:23:e3:09:ee:77:17:
                    93:94:d2:00:58:db:57:15:d4:28:00:fd:fd:90:61:
                    38:97:e6:04:6c:54:a3:00:df:f2:90:42:83:d0:b1:
                    d9:2d:f0:b3:bd:70:c1:25:24:82:97:0a:77:9a:d7:
                    92:1e:5e:32:69:e3:19:ef:3e:65:97:d1:b4:f7:88:
                    9a:4d:20:cb:96:24:dc:b2:d7:44:82:2c:b2:e8:29:
                    5b:4a:92:6b:96:4d:64:3f:1f:41:d6:cb:04:be:1e:
                    b4:47:24:a1:aa:0e:e5:ad:0d:48:75:88:2c:e0:57:
                    2f:97:a0:5b:41:d2:6d:2a:38:39:2b:e2:0c:8a:2f:
                    a5:39:0d:69:54:41:8f:54:38:68:42:ff:ab:ed:02:
                    1d:18:e7:bc:7c:38:73:f9:ca:6a:53:c2:93:9b:46:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5D:4C:AA:DB:63:BE:EC:93:DA:E7:42:BD:57:4B:BA:58:EB:90:A8
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37322e302f32322d3232203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:c8:ce:38:8f:65:c0:23:ee:78:d3:28:a8:d0:37:65:ec:32:
         1a:09:8e:04:c3:62:30:c0:99:45:db:ea:8a:d9:55:db:63:11:
         82:21:1a:69:d7:83:6f:ef:b4:31:87:ad:af:47:3c:88:2c:e5:
         40:81:10:31:65:db:b2:41:aa:13:2b:29:3f:61:ca:a7:e6:8e:
         c2:2b:37:83:26:e5:b0:96:a0:da:6e:10:ec:40:b7:cc:ca:fc:
         72:7b:fb:4b:e0:3a:ec:4e:d3:dd:40:92:47:67:a9:6f:cf:60:
         23:bf:b6:99:cd:99:e2:29:50:05:a6:bc:c7:a0:70:ef:d7:49:
         c9:6a:25:3b:60:8c:d8:da:4d:3d:f3:98:60:5b:86:e1:47:60:
         30:65:99:3b:bf:60:69:1b:f7:36:33:02:af:f2:69:0e:d9:e7:
         00:3e:1e:bc:43:d4:4e:ec:f6:fd:33:3b:b2:eb:8f:4a:ef:a5:
         97:26:c1:d4:fa:24:32:ee:97:0a:6e:bb:c7:e9:ce:e9:b1:aa:
         2f:34:ba:e7:ef:f8:2b:7f:bd:2d:24:10:02:3c:7a:e3:0d:52:
         95:6e:18:59:61:9f:5a:f7:8a:0f:c4:eb:d0:98:94:ee:44:d2:
         dd:00:91:9b:be:42:5c:3e:0d:39:4b:d6:b2:12:ef:56:2d:06:
         ac:93:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:34:06 2025 by rpki-client