Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234332e302f32342d3234203d3e20323639313434.roa
File:                     34352e3137392e3234332e302f32342d3234203d3e20323639313434.roa (raw, json)
Hash identifier:          ClFfKfr50X21kzIMNXUUuG0tPXXzUr0DHxM+iRyQnjY=
Subject key identifier:   1E:A2:2C:1B:B7:A0:F1:82:AC:FA:9A:4F:03:28:8E:52:A8:5E:D7:D3
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       7CD169735D0F73DA5095A7B26DEC94200FBD6038
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234332e302f32342d3234203d3e20323639313434.roa
Signing time:             Thu 10 Jul 2025 13:40:32 +0000
ROA not before:           Thu 10 Jul 2025 13:35:32 +0000
ROA not after:            Thu 09 Jul 2026 13:40:32 +0000
asID:                     269144
IP address blocks:        45.179.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 17:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d1:69:73:5d:0f:73:da:50:95:a7:b2:6d:ec:94:20:0f:bd:60:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Jul 10 13:35:32 2025 GMT
            Not After : Jul  9 13:40:32 2026 GMT
        Subject: CN=1EA22C1BB7A0F182ACFA9A4F03288E52A85ED7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:38:e7:3e:f0:c9:58:8d:e5:3d:ce:a4:62:
                    c0:d1:1c:af:3b:e6:5e:45:ef:ea:8e:79:1d:09:84:
                    53:fa:46:1c:f1:c5:53:b3:b0:e4:35:b1:fd:1a:e6:
                    cc:46:08:68:51:ed:34:eb:cd:06:11:a5:f9:50:43:
                    e1:1f:be:37:18:f5:dc:4d:7e:4e:7d:7f:7d:ca:a8:
                    b5:d6:86:47:b8:c1:74:1e:05:94:26:a1:de:eb:52:
                    cc:d1:4e:e2:b5:d2:48:e0:e5:be:6a:44:e7:03:a6:
                    b8:20:82:cd:cf:60:d7:b9:ed:c4:5a:10:23:d5:9f:
                    cd:5f:21:c8:50:94:c5:0e:cf:c6:be:db:99:ab:e3:
                    94:97:20:eb:3d:67:d4:e7:e7:44:d8:43:4f:9a:e0:
                    f7:3b:e8:7a:f6:da:ae:d5:64:60:30:13:6e:bd:c9:
                    c7:00:ef:66:51:89:20:c4:8c:86:5e:88:7e:13:5f:
                    37:a0:0b:1a:b7:eb:8b:73:10:59:f3:04:5d:41:06:
                    b6:7b:b9:dc:a4:db:e4:87:23:75:7d:b3:c6:e4:e1:
                    25:10:36:40:2c:f4:c2:b5:69:1f:7f:0e:57:dd:6d:
                    3a:14:d6:a2:57:8f:93:47:76:46:06:52:77:a6:f4:
                    fc:a2:f7:db:b2:bc:ec:68:09:3c:5a:46:fd:99:80:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A2:2C:1B:B7:A0:F1:82:AC:FA:9A:4F:03:28:8E:52:A8:5E:D7:D3
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234332e302f32342d3234203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:a7:59:75:c0:c8:5c:c0:70:52:9b:15:5b:9c:fb:be:87:16:
         5e:0f:40:61:d8:c1:d1:04:4f:c8:c1:85:f2:f3:fd:98:e5:87:
         67:2f:9a:23:e5:f8:fb:41:25:ca:a6:44:98:ac:6b:e3:64:83:
         e6:3d:0b:cc:7a:f4:1d:5f:0a:67:29:70:41:be:bd:71:29:93:
         e7:03:e4:f5:0a:b2:02:55:88:9b:a4:04:9c:6e:dd:ce:83:c0:
         d8:58:29:71:66:81:98:67:3e:c3:22:d4:10:e9:dd:17:60:c8:
         75:cc:43:8b:95:27:a7:46:03:e8:72:54:a8:ea:8a:00:43:bd:
         bc:fc:ec:15:99:83:43:fe:54:6c:c6:db:d2:a8:ef:76:91:0c:
         2a:d3:4d:fb:84:8f:c1:f3:25:c6:72:e2:fe:ae:e2:44:82:92:
         b9:73:6a:2a:ea:91:21:6f:d6:8d:54:c9:72:dc:d8:d3:03:13:
         03:28:7b:02:b5:92:d4:29:ff:82:cf:24:28:59:d8:b4:84:fa:
         30:67:e1:ad:7a:22:be:c8:75:fd:b2:0f:e4:c5:fb:9d:50:64:
         b8:56:b0:57:92:04:50:54:ec:ce:22:58:0a:22:a8:16:51:51:
         34:de:84:78:bd:80:39:74:74:d2:f4:ad:b5:5c:19:2b:82:a6:
         88:e2:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:32:01 2025 by rpki-client