Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231342e302f32342d3234203d3e20323635383939.roa
File:                     34352e3136332e3231342e302f32342d3234203d3e20323635383939.roa (raw, json)
Hash identifier:          8Ad67UOgDTOdZbZP6CL/0YbybDyDZ9yaLI2MtdHTvJs=
Subject key identifier:   F8:B2:53:14:EE:02:08:8B:90:31:ED:82:17:DD:DF:29:FF:75:AE:CB
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       46AC07F7D78BEA7AF5764ABBC122D2DE3203F547
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231342e302f32342d3234203d3e20323635383939.roa
Signing time:             Fri 25 Jul 2025 18:33:18 +0000
ROA not before:           Fri 25 Jul 2025 18:28:18 +0000
ROA not after:            Fri 24 Jul 2026 18:33:18 +0000
asID:                     265899
IP address blocks:        45.163.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 14:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ac:07:f7:d7:8b:ea:7a:f5:76:4a:bb:c1:22:d2:de:32:03:f5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jul 25 18:28:18 2025 GMT
            Not After : Jul 24 18:33:18 2026 GMT
        Subject: CN=F8B25314EE02088B9031ED8217DDDF29FF75AECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:18:18:c0:a8:ff:d0:fb:35:94:f7:20:ae:
                    16:19:9e:4e:14:6e:04:ac:34:dc:42:e6:16:83:3d:
                    14:8f:2f:3e:93:1f:2a:19:19:9c:58:44:f7:94:59:
                    af:9d:ee:a1:dc:a4:80:a6:f6:ed:80:bd:79:22:f6:
                    9d:db:27:4b:a7:98:2e:ef:f1:11:88:92:aa:88:2e:
                    0b:b5:6a:a6:9c:70:65:ca:e7:24:61:0f:cc:9b:28:
                    c9:34:51:9f:ff:dd:9e:75:2f:dd:c9:96:4a:8b:2d:
                    fc:5c:d3:81:4b:37:f1:f5:e3:8a:d8:17:2d:00:01:
                    0c:f0:eb:96:5e:af:95:68:e4:55:90:a9:b5:55:cf:
                    d8:13:97:d7:b9:7a:63:e6:a3:df:3d:0b:59:a4:c3:
                    69:68:e7:73:16:a2:af:13:f0:83:99:d3:2f:01:7d:
                    b3:94:4a:fe:3e:71:ec:09:28:af:b2:f3:ff:32:40:
                    39:65:37:e8:e3:25:2c:7c:43:3f:6b:4c:6e:73:d5:
                    e1:c4:05:26:f2:3e:22:02:8a:45:3c:1e:a1:2d:f7:
                    b3:85:7d:57:e4:45:28:2e:44:76:d0:67:7b:fb:d3:
                    35:11:fc:6d:d1:20:93:85:63:3f:d9:37:c9:5e:0f:
                    fd:c2:13:d0:e0:4c:51:eb:d5:84:07:1b:25:45:03:
                    90:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B2:53:14:EE:02:08:8B:90:31:ED:82:17:DD:DF:29:FF:75:AE:CB
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3136332e3231342e302f32342d3234203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:64:40:ea:6b:c5:22:5b:02:ac:2d:9c:19:31:4a:63:42:51:
         3f:ff:14:9f:46:7e:7d:63:31:56:b2:dc:a2:b6:71:49:d6:d7:
         3d:90:74:6d:36:ca:db:4a:4b:e9:bc:3e:aa:6f:6f:75:9c:75:
         ca:76:6a:86:a8:eb:bc:1d:d4:11:d0:b4:8a:c0:bd:05:b6:5f:
         80:a5:98:a8:ef:f5:1a:f6:dc:ec:3a:00:12:ca:77:62:52:e5:
         cb:1c:60:80:ae:c7:dd:25:c5:a9:08:69:2a:5c:82:d9:f8:f2:
         bb:2b:fd:94:b8:32:35:79:b0:aa:f6:f3:6b:2a:a2:90:33:ca:
         28:fb:51:64:e8:0d:82:02:76:b4:8a:83:d4:30:3f:44:bc:19:
         ae:bd:5e:fd:91:8e:b0:6d:f7:3c:1c:08:7b:a6:54:7e:12:c8:
         9b:c3:11:05:bd:29:0a:26:78:3a:b3:4b:35:0b:6e:f0:fb:27:
         e2:4c:31:d9:19:47:53:9b:6f:42:bc:74:95:ef:5c:01:24:45:
         06:26:21:e8:d6:48:6b:f9:ec:36:b9:3b:25:0b:ff:de:61:e0:
         41:88:c4:35:bb:98:80:d8:d5:34:6c:c0:e1:ff:ff:26:8c:fc:
         43:ba:0a:d3:54:e2:45:93:2b:b5:42:91:ab:59:f7:5b:04:25:
         25:c5:ae:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:11:59 2025 by rpki-client