Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/34352e3136332e3131362e302f32322d3332203d3e20323638353737.roa
File:                     34352e3136332e3131362e302f32322d3332203d3e20323638353737.roa (raw, json)
Hash identifier:          Et77+LynBLMWqk+rHPa5qaEBgzJDRsbZGk2IR87u0z0=
Subject key identifier:   2D:BF:73:30:60:A2:95:00:9E:0B:A3:D5:71:59:28:80:AE:DB:58:CB
Certificate issuer:       /CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0
Certificate serial:       471DE3ED37C1C4AADED18F1B61795966D6F554E2
Authority key identifier: 0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/34352e3136332e3131362e302f32322d3332203d3e20323638353737.roa
Signing time:             Tue 22 Jul 2025 16:37:29 +0000
ROA not before:           Tue 22 Jul 2025 16:32:29 +0000
ROA not after:            Tue 21 Jul 2026 16:37:29 +0000
asID:                     268577
IP address blocks:        45.163.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl
                          rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 10:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1d:e3:ed:37:c1:c4:aa:de:d1:8f:1b:61:79:59:66:d6:f5:54:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0
        Validity
            Not Before: Jul 22 16:32:29 2025 GMT
            Not After : Jul 21 16:37:29 2026 GMT
        Subject: CN=2DBF733060A295009E0BA3D571592880AEDB58CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:3f:65:e7:0e:af:c8:7c:87:da:79:f5:a6:
                    32:c1:73:71:d2:c6:39:f2:3a:19:e7:bb:f4:fb:33:
                    b9:b5:a2:ce:7a:ba:8a:c2:31:b6:f8:58:63:f6:e2:
                    44:c5:97:f9:3f:a8:6b:b1:d6:c0:15:de:0c:4e:f4:
                    74:5e:46:fe:e9:43:b5:f8:2f:0d:f0:b1:0b:e5:81:
                    c5:50:e3:f5:f0:1e:46:fb:37:fe:1e:ee:20:a7:e4:
                    0b:84:10:4a:0c:e1:17:15:44:ea:7e:4e:f4:25:00:
                    89:51:e8:b9:42:2c:13:5f:12:70:73:e4:70:14:4c:
                    5d:a4:33:87:d3:1f:dc:e3:c0:c5:8d:d9:e1:9b:80:
                    5c:1e:9c:26:06:06:b4:44:39:0f:81:be:0b:3b:58:
                    ce:df:4a:7b:8b:8e:8b:0f:d8:2c:1c:03:eb:ee:57:
                    a2:69:4f:59:66:27:fe:e2:fd:e8:8f:a7:71:62:cf:
                    b4:23:18:f4:40:44:3d:fc:fa:c9:52:f1:90:35:20:
                    fc:d6:3e:39:d5:31:a9:98:38:1f:38:bb:91:dc:c2:
                    fb:e6:b5:8f:25:95:c6:07:67:d4:8b:28:33:b3:d9:
                    33:1d:17:eb:91:bc:d2:f3:b8:cd:69:ef:4c:02:00:
                    4e:62:60:0d:99:33:1a:1a:8f:ba:9e:d3:48:10:85:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BF:73:30:60:A2:95:00:9E:0B:A3:D5:71:59:28:80:AE:DB:58:CB
            X509v3 Authority Key Identifier:
                keyid:0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/34352e3136332e3131362e302f32322d3332203d3e20323638353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:73:64:75:52:45:54:e3:2f:13:02:a4:b2:fa:3f:01:23:2b:
         32:3b:ae:f3:84:4a:f7:e3:1b:b2:a0:14:29:34:65:07:0e:8c:
         db:81:cb:cf:4a:06:35:c0:be:09:80:5c:fe:34:e8:e6:66:f7:
         90:5d:02:de:79:ba:80:da:27:f8:5f:81:d9:38:5e:25:03:17:
         47:33:2c:a8:a6:36:bc:0d:7b:37:5e:fa:e1:50:93:64:4a:9e:
         0c:6a:d6:ee:c0:37:03:37:28:27:62:3c:53:69:fe:0e:0e:7d:
         7c:ed:a9:a5:75:b7:99:3f:67:da:6d:fe:af:73:25:13:e5:21:
         36:ef:93:32:9b:5d:30:bc:8c:01:71:f0:83:ec:51:8c:b4:22:
         42:2f:93:fb:ed:6d:88:24:92:38:31:8f:b9:75:80:03:b4:32:
         fb:73:14:dd:46:f0:eb:bb:c3:01:89:41:38:2c:4d:5a:9b:5e:
         ac:84:9f:f2:59:27:bb:d8:02:60:da:cc:78:fc:a7:80:d3:63:
         a1:ab:dc:01:20:04:60:56:09:63:c5:92:8e:9d:e7:12:4a:0a:
         65:80:ef:6b:cb:ee:94:2e:d3:dd:20:0e:85:60:3e:88:b2:c4:
         b3:a1:f5:1a:b3:49:06:dd:be:38:e7:a3:3f:95:40:1d:19:70:
         08:36:ee:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:20 2025 by rpki-client