Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e37312e32382e302f32322d3332203d3e20323638373338.roa
File:                     34352e37312e32382e302f32322d3332203d3e20323638373338.roa (raw, json)
Hash identifier:          i4NBX3EN+cxm08SiBdWHzh7x1uNRZy7XGYqryXbx+to=
Subject key identifier:   93:DE:23:52:8D:82:6F:47:82:50:92:04:81:AB:7B:CD:33:E9:44:E9
Certificate issuer:       /CN=974965D6034789E12B9ECD4E4D0FF230C71D1E3B
Certificate serial:       74D0CE8294581F2D82B91E1486FF74A3714EB834
Authority key identifier: 97:49:65:D6:03:47:89:E1:2B:9E:CD:4E:4D:0F:F2:30:C7:1D:1E:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974965D6034789E12B9ECD4E4D0FF230C71D1E3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e37312e32382e302f32322d3332203d3e20323638373338.roa
Signing time:             Tue 22 Jul 2025 13:33:11 +0000
ROA not before:           Tue 22 Jul 2025 13:28:11 +0000
ROA not after:            Tue 21 Jul 2026 13:33:11 +0000
asID:                     268738
IP address blocks:        45.71.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/974965D6034789E12B9ECD4E4D0FF230C71D1E3B.crl
                          rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/974965D6034789E12B9ECD4E4D0FF230C71D1E3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974965D6034789E12B9ECD4E4D0FF230C71D1E3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 11:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d0:ce:82:94:58:1f:2d:82:b9:1e:14:86:ff:74:a3:71:4e:b8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974965D6034789E12B9ECD4E4D0FF230C71D1E3B
        Validity
            Not Before: Jul 22 13:28:11 2025 GMT
            Not After : Jul 21 13:33:11 2026 GMT
        Subject: CN=93DE23528D826F478250920481AB7BCD33E944E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:ec:26:67:89:cd:4b:df:91:f3:24:78:4c:
                    c7:a3:47:6e:36:36:f7:d6:b3:cf:0a:db:76:50:03:
                    e3:d8:00:0d:50:46:12:51:f6:4c:e4:ec:3c:9f:e6:
                    71:07:15:b9:1d:55:31:d6:31:b5:bb:fb:46:dc:bf:
                    e5:dc:ca:0e:50:df:b4:68:de:3b:5c:c8:48:b3:dc:
                    ef:ea:48:01:51:25:2d:44:47:96:47:fd:ef:90:e5:
                    0c:5c:0a:4b:56:87:e9:8e:ac:8e:a0:99:2c:c4:41:
                    1e:5e:82:22:e6:82:0d:8b:b5:91:02:5c:e8:c4:76:
                    df:c2:94:66:86:ed:e0:2c:2c:89:61:4f:45:1c:04:
                    a5:46:42:be:be:91:c7:99:e7:d8:a1:8c:f2:0d:34:
                    91:b5:9e:0d:c6:43:08:4e:d9:4f:4b:03:5a:3c:da:
                    42:7b:8c:73:f4:01:09:09:9f:71:b6:41:74:5e:21:
                    6a:4a:28:c7:fc:aa:db:b3:39:83:a5:47:15:87:ed:
                    75:22:e9:55:84:60:28:6a:18:61:f8:c5:96:2a:f9:
                    4c:64:e9:ae:fd:a4:46:9c:5e:20:c2:db:b5:ee:ac:
                    ef:2a:74:89:86:89:7c:a8:28:56:84:ce:0b:eb:9a:
                    4a:3b:9b:00:dc:63:d0:71:a3:49:33:8b:20:15:57:
                    6e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DE:23:52:8D:82:6F:47:82:50:92:04:81:AB:7B:CD:33:E9:44:E9
            X509v3 Authority Key Identifier:
                keyid:97:49:65:D6:03:47:89:E1:2B:9E:CD:4E:4D:0F:F2:30:C7:1D:1E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/974965D6034789E12B9ECD4E4D0FF230C71D1E3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974965D6034789E12B9ECD4E4D0FF230C71D1E3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e37312e32382e302f32322d3332203d3e20323638373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:17:1f:28:65:53:bd:10:24:6f:c5:2a:52:f1:b0:41:e2:05:
         93:18:cc:d8:67:43:ef:e9:38:88:a1:b1:5f:62:cd:37:2b:0c:
         bb:c3:07:4c:7a:b7:9c:19:7e:60:3b:94:50:2f:f2:d6:32:67:
         bc:22:e4:36:98:85:f1:26:86:fa:5b:32:5a:05:82:2b:34:cd:
         93:61:a0:41:b3:76:f2:d8:05:f0:24:8b:8c:2b:bc:25:ee:61:
         db:00:78:ef:20:1e:f8:e4:01:d0:d4:19:58:fe:7b:3f:3c:78:
         f6:7c:29:2e:de:fa:cc:3d:25:72:22:ae:6a:af:05:63:0d:b6:
         c8:8b:9c:86:e6:ac:c3:5b:44:d0:4b:a0:de:9e:62:7e:9f:02:
         62:36:c5:e4:b7:69:cc:fd:c4:7e:c0:d5:24:95:62:63:03:0b:
         31:a0:60:01:f3:08:3c:e5:a2:96:bc:dc:ab:9b:c4:73:43:22:
         90:e4:17:cb:2d:19:87:97:fa:45:0d:15:bc:4b:e4:56:32:ca:
         33:67:04:dc:cd:23:a5:c2:9d:2b:50:4f:6e:22:bf:f2:a7:1f:
         a8:3a:af:7c:33:2b:3b:13:8b:50:bf:1d:b2:f6:47:3c:a1:95:
         66:4c:ec:8c:2d:cf:b3:a0:aa:0c:77:ba:f0:8b:14:5b:aa:2e:
         37:f3:e0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:12 2025 by rpki-client