Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/34352e3136342e3230362e302f32342d3234203d3e20323632343137.roa
File:                     34352e3136342e3230362e302f32342d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          IF87+KtwwNiREt5icCgxES2wVFrjN/lkPKY/94s2Itw=
Subject key identifier:   E4:35:D6:81:F6:C0:C6:0D:46:0D:1F:EA:7E:2B:1E:30:A7:D3:A7:0C
Certificate issuer:       /CN=8A6FD0B797ED6A627290062BC40CB751266060C8
Certificate serial:       49DEEF51294348389080988FA54689CF723F3629
Authority key identifier: 8A:6F:D0:B7:97:ED:6A:62:72:90:06:2B:C4:0C:B7:51:26:60:60:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6FD0B797ED6A627290062BC40CB751266060C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/34352e3136342e3230362e302f32342d3234203d3e20323632343137.roa
Signing time:             Thu 24 Jul 2025 20:51:51 +0000
ROA not before:           Thu 24 Jul 2025 20:46:51 +0000
ROA not after:            Thu 23 Jul 2026 20:51:51 +0000
asID:                     262417
IP address blocks:        45.164.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/8A6FD0B797ED6A627290062BC40CB751266060C8.crl
                          rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/8A6FD0B797ED6A627290062BC40CB751266060C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6FD0B797ED6A627290062BC40CB751266060C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 04:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:de:ef:51:29:43:48:38:90:80:98:8f:a5:46:89:cf:72:3f:36:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6FD0B797ED6A627290062BC40CB751266060C8
        Validity
            Not Before: Jul 24 20:46:51 2025 GMT
            Not After : Jul 23 20:51:51 2026 GMT
        Subject: CN=E435D681F6C0C60D460D1FEA7E2B1E30A7D3A70C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:4c:88:d2:9f:1d:5e:f4:bf:75:fc:93:8d:
                    19:74:47:3a:af:ef:51:34:2c:76:91:c2:8f:99:00:
                    bc:df:14:f1:fb:63:05:36:bb:d8:0f:7d:20:68:a1:
                    43:89:34:f7:1d:10:d0:23:72:78:08:63:e2:71:f9:
                    23:ff:c4:ed:a2:31:57:41:97:6d:3a:b5:b1:bf:0e:
                    fd:3b:59:06:34:8a:d0:06:1e:c2:4c:81:6b:f1:fb:
                    3b:4b:61:c7:40:08:64:2d:f4:85:d4:46:71:e7:02:
                    a3:c8:2b:fe:dd:80:de:6f:08:3d:94:b3:d1:d0:08:
                    1f:fe:7f:a2:a4:33:e0:94:e9:b1:64:e9:21:db:85:
                    e6:30:7e:33:a8:31:70:97:98:04:f1:12:eb:03:a6:
                    80:eb:1f:b8:af:d5:ce:a2:51:a8:c0:51:1f:7b:7a:
                    ff:b3:06:12:52:dd:89:12:0a:9d:c6:b3:83:b8:4f:
                    bf:c2:46:24:6a:88:f7:c7:86:c2:7e:38:61:b6:74:
                    0e:6f:33:2f:f1:b1:7b:fb:86:ef:f8:89:b5:94:5e:
                    3d:6d:4d:8b:35:5e:ba:45:6c:c5:38:7a:05:c0:a8:
                    f0:6e:df:fb:b0:88:fb:11:27:cd:91:33:76:77:23:
                    b9:3d:dd:50:64:e8:07:ed:e9:80:6d:89:ee:3b:96:
                    76:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:35:D6:81:F6:C0:C6:0D:46:0D:1F:EA:7E:2B:1E:30:A7:D3:A7:0C
            X509v3 Authority Key Identifier:
                keyid:8A:6F:D0:B7:97:ED:6A:62:72:90:06:2B:C4:0C:B7:51:26:60:60:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/8A6FD0B797ED6A627290062BC40CB751266060C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6FD0B797ED6A627290062BC40CB751266060C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/34352e3136342e3230362e302f32342d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:a2:68:84:ce:66:23:d0:06:05:20:c3:01:48:33:bf:22:42:
         b9:0d:1a:18:61:d5:04:1d:5f:f5:cc:82:a6:32:67:32:7e:70:
         fc:9a:4f:a5:1c:ba:75:8b:f1:10:2a:60:0a:19:90:af:62:a9:
         22:1c:47:22:55:76:09:07:27:49:92:00:cc:5a:67:e1:72:10:
         7f:85:22:81:97:94:fb:7d:75:3e:6f:99:21:28:7d:e3:02:06:
         98:51:bb:85:44:41:84:23:68:70:8c:30:20:9f:1a:12:4e:df:
         bc:ee:5f:a8:5b:1f:aa:dc:56:49:81:89:09:fa:77:24:91:95:
         90:b2:5d:b5:23:cc:78:33:49:1f:f2:c4:7b:0c:4e:5d:6d:5d:
         ca:1f:43:7c:3e:c8:46:3f:7e:f3:84:4d:c6:46:8c:6f:e2:cc:
         61:36:16:35:d9:55:89:4c:a5:87:d8:8f:ea:dc:a7:8e:55:e8:
         82:ae:fc:88:66:d2:c7:fb:9f:61:00:af:b2:83:90:41:01:b8:
         24:88:77:f7:1e:5f:ae:98:ef:38:c3:33:eb:f8:3c:a9:f0:70:
         ac:2a:7e:1a:67:5e:7d:bc:cf:37:89:a6:bc:88:69:2a:4e:3e:
         ef:48:5b:0a:f1:8c:1e:0c:62:15:e1:16:37:3c:0a:60:69:ce:
         e3:b9:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:54:12 2025 by rpki-client