Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38362e302f32342d3234203d3e20323633323932.roa
File:                     34352e3136362e38362e302f32342d3234203d3e20323633323932.roa (raw, json)
Hash identifier:          lXpmPM1i5Cnyu9046GVi63L2UnLp4khaOwCuYbbBSK0=
Subject key identifier:   80:A9:69:77:89:B4:42:69:22:9F:03:0C:22:57:0E:AF:53:23:54:34
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       502ACC15299500069B79C489231C51C969614913
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38362e302f32342d3234203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:15 +0000
ROA not before:           Mon 16 Jun 2025 19:54:15 +0000
ROA not after:            Mon 15 Jun 2026 19:59:15 +0000
asID:                     263292
IP address blocks:        45.166.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 01:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2a:cc:15:29:95:00:06:9b:79:c4:89:23:1c:51:c9:69:61:49:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:15 2025 GMT
            Not After : Jun 15 19:59:15 2026 GMT
        Subject: CN=80A9697789B44269229F030C22570EAF53235434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:a5:cc:95:a0:69:53:70:c7:12:2c:6e:53:
                    fc:15:1c:9f:6b:51:95:8d:e7:36:81:46:57:cd:34:
                    6d:1d:b8:13:81:ad:71:d9:a2:e9:6e:61:8f:d2:ea:
                    20:70:aa:dc:c9:9d:24:8e:41:bf:c1:40:0e:01:26:
                    3c:01:7c:24:86:b1:91:90:f5:e2:79:a7:30:69:5b:
                    be:75:c3:fb:38:8f:7e:0a:9b:c1:fb:f1:ef:75:b9:
                    1d:ce:93:e2:03:32:9b:a4:f8:cb:2d:4c:6c:92:69:
                    b9:7c:fc:c5:8c:35:a0:8a:6b:32:37:63:17:c0:b9:
                    2e:c6:3f:b5:3d:bf:f1:d5:08:f4:fa:a2:f7:2a:76:
                    07:29:da:cc:ef:b4:a9:8d:c8:ad:c5:71:bc:d8:8e:
                    1c:ae:a3:26:e8:2a:a1:4a:32:96:36:bb:1b:93:65:
                    30:d3:db:40:e4:61:c0:bf:4b:52:0f:81:e5:94:7f:
                    fc:ec:39:b7:e8:c4:08:21:a2:7b:c4:ad:57:27:75:
                    e0:15:13:4d:d0:fd:9f:dd:93:4f:2a:26:6a:fa:72:
                    94:b7:45:84:97:d7:84:ba:44:fc:8c:36:16:13:7a:
                    97:db:3c:bb:19:52:4d:b1:42:d6:ff:a0:a7:87:bf:
                    77:ad:ed:bc:3d:a7:ad:02:4d:e6:5b:7c:50:a7:70:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A9:69:77:89:B4:42:69:22:9F:03:0C:22:57:0E:AF:53:23:54:34
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38362e302f32342d3234203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:ac:ff:22:ba:d5:e0:8f:72:6d:55:6b:d5:9d:ef:4f:24:ee:
         6e:1d:46:cd:83:a8:c1:ec:1b:f3:31:35:fc:04:4a:4f:f2:58:
         34:4a:7e:07:63:18:5a:46:3c:12:9f:64:5c:09:98:45:58:07:
         20:c3:fe:5e:8d:26:d5:3d:b5:4d:b8:e7:7c:6f:32:60:1e:4e:
         fc:02:8c:62:9b:b9:fe:6a:0d:93:bd:dc:eb:c2:20:04:09:66:
         ca:e2:3a:ae:cc:18:3a:f9:97:c3:c4:c2:7e:eb:03:20:6b:17:
         1e:27:cb:6c:6f:12:21:ef:93:0f:9f:37:20:ae:96:a2:f6:53:
         b5:8d:9e:3b:58:ca:53:c4:df:f6:3b:61:5f:f9:3e:7c:14:1b:
         27:e2:8a:8c:76:ff:f6:a0:1c:11:19:a7:46:f2:b8:2c:42:a8:
         c6:ff:bf:42:ca:ab:95:a2:80:76:03:af:19:80:54:a5:fe:43:
         65:c0:aa:b4:95:45:42:2d:29:5e:f3:8c:af:ac:a0:dc:cd:ed:
         b5:ac:8b:1c:f9:d4:65:8e:bb:e2:e1:12:27:ef:da:fe:3d:58:
         d0:a2:68:3f:d5:d9:17:89:37:74:cd:ea:3e:a3:7e:d0:25:04:
         20:6e:32:21:30:0b:25:81:24:16:10:e3:a9:48:5a:c8:59:f6:
         bd:d3:ab:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:17:57 2025 by rpki-client