Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35312e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          9m7yPscc1aQcelxqXKrPeemhvynpRkgj0fMDx9qc3dU=
Subject key identifier:   1C:D0:13:56:7E:7D:16:05:A4:AA:89:F4:02:F5:B5:F7:06:21:E0:18
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       7B6C8E4F56CCEF99DABD5BC5B489ABEDAE3B46FF
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35312e302f32342d3234203d3e20323638323035.roa
Signing time:             Thu 31 Jul 2025 21:32:40 +0000
ROA not before:           Thu 31 Jul 2025 21:27:40 +0000
ROA not after:            Thu 30 Jul 2026 21:32:40 +0000
asID:                     268205
IP address blocks:        45.236.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 11:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6c:8e:4f:56:cc:ef:99:da:bd:5b:c5:b4:89:ab:ed:ae:3b:46:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: Jul 31 21:27:40 2025 GMT
            Not After : Jul 30 21:32:40 2026 GMT
        Subject: CN=1CD013567E7D1605A4AA89F402F5B5F70621E018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:90:40:04:d8:f4:e7:d5:4e:94:6c:02:0b:
                    06:65:c7:15:e2:e6:40:15:63:b9:1e:fc:a0:ab:ab:
                    c8:b5:55:0b:68:91:f2:68:0a:3d:04:87:17:d0:cd:
                    ce:9f:7f:bc:83:32:5d:bf:8d:de:d1:b7:72:a1:43:
                    69:d5:fd:21:12:8a:b2:d9:a5:31:53:8d:d5:eb:99:
                    42:ca:88:80:d8:b2:1d:5b:d1:4b:ff:91:74:23:bf:
                    a3:18:86:60:7e:01:fe:ae:81:0a:87:c2:03:4c:c9:
                    fb:ed:2a:90:e1:dd:12:9d:ca:8c:4e:97:a5:51:8a:
                    a2:8e:68:93:ab:7e:19:8e:da:c4:65:47:5a:b0:1f:
                    db:9b:0a:66:bb:98:b9:da:86:04:5a:ed:27:8c:df:
                    f2:f4:38:e2:eb:b0:eb:ab:9f:de:db:24:0b:40:b7:
                    3c:48:73:0e:5d:a3:83:45:80:f2:39:92:8e:54:11:
                    67:0d:9b:2a:f3:f6:19:0a:9f:02:b2:16:35:dc:d0:
                    cb:00:98:bb:4f:04:e3:df:d8:4b:c7:d9:84:f9:7a:
                    90:f1:8d:6d:60:ad:05:71:7a:72:4d:c4:16:76:41:
                    fe:85:64:dd:58:bb:36:72:21:2d:5a:f7:85:1f:1f:
                    19:58:0c:5d:b9:fa:70:db:91:82:6b:49:25:dc:b8:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D0:13:56:7E:7D:16:05:A4:AA:89:F4:02:F5:B5:F7:06:21:E0:18
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35312e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:a8:40:f1:0f:82:3f:30:c4:50:8f:a6:6d:88:56:55:f5:44:
         9e:a3:be:59:b0:b4:72:73:b6:b7:df:7d:8a:04:9c:7d:9e:12:
         f1:fe:a2:42:51:42:cc:57:75:a5:81:32:9e:47:52:3a:35:b7:
         52:7d:f7:62:98:57:21:56:da:a7:4d:3f:65:40:4c:80:2d:12:
         20:fd:74:02:3f:9c:5d:c2:69:67:f1:86:47:f5:4f:98:2d:ca:
         3e:56:0f:36:81:e1:fb:b2:74:45:7d:a9:7c:45:dd:46:a2:1f:
         af:65:e7:f4:85:28:8a:34:b0:97:65:a0:88:5e:ed:26:d7:f7:
         57:f9:1e:64:d8:ba:cc:31:6b:35:71:f6:d8:fe:89:59:5a:4b:
         ba:14:12:45:54:95:d0:44:f9:ed:69:f4:34:da:29:3e:c6:d2:
         30:69:04:f5:55:f4:f3:39:2b:89:e4:7f:ac:09:c4:1e:8d:b2:
         ac:b9:7f:5b:9c:93:f1:2d:90:06:49:c8:b2:29:ac:83:e5:19:
         8a:61:22:1f:48:6e:85:e8:c7:27:91:b5:db:14:4c:da:53:80:
         22:bf:a8:c5:58:79:cd:4c:24:cb:8a:f2:dd:d1:ae:72:13:d4:
         e5:47:30:84:cc:ef:73:de:3b:7a:08:44:f8:a8:48:3e:9f:eb:
         38:68:54:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:18:30 2025 by rpki-client