Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32322d3232203d3e203631353931.roa
File:                     34352e3233372e37322e302f32322d3232203d3e203631353931.roa (raw, json)
Hash identifier:          hnYjs3bjWAP+oQ9cN17Fk770+cPW2njFqKDGTm4tHuc=
Subject key identifier:   3D:FC:D3:8A:EB:8A:D7:E7:A5:10:7A:A6:6F:C3:8C:41:B5:09:50:FF
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       318B42865EE177481C18A41A290E51746B573D6B
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32322d3232203d3e203631353931.roa
Signing time:             Mon 14 Jul 2025 21:00:01 +0000
ROA not before:           Mon 14 Jul 2025 20:55:01 +0000
ROA not after:            Mon 13 Jul 2026 21:00:01 +0000
asID:                     61591
IP address blocks:        45.237.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8b:42:86:5e:e1:77:48:1c:18:a4:1a:29:0e:51:74:6b:57:3d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jul 14 20:55:01 2025 GMT
            Not After : Jul 13 21:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:55:74:2c:c6:3a:57:24:fa:12:29:74:7e:
                    01:b3:fa:6f:a7:38:fc:80:76:7f:24:b1:72:7c:60:
                    0e:5f:19:04:f6:a4:26:14:fa:45:e8:e3:83:04:35:
                    6f:09:c3:db:79:bb:ee:72:b0:6e:b4:75:9a:9b:1d:
                    6c:e2:7e:f0:b1:ea:2a:eb:f0:34:52:36:f2:59:3b:
                    5c:65:d9:ab:b0:1c:96:08:18:f2:f3:42:57:6e:d6:
                    4d:4f:f7:74:bd:52:f6:bd:cc:e4:ae:76:f7:8a:df:
                    99:48:f7:6a:44:63:0d:b0:30:52:9f:61:92:6d:e3:
                    ca:b7:30:ec:cc:6e:4b:f4:32:81:08:4b:9a:a2:06:
                    e5:c9:7c:cc:c8:ed:74:e3:5e:d2:77:e7:8b:b9:50:
                    41:52:b4:41:d2:7f:e9:d3:a5:df:db:08:a2:12:b7:
                    b4:c9:1c:9d:a3:bc:bb:25:52:73:e8:85:e4:e0:48:
                    5f:99:ed:e1:00:73:56:21:f9:50:81:bf:1b:84:d6:
                    99:eb:b6:93:25:b6:8e:ef:d1:18:cb:8e:10:9f:b7:
                    43:fc:c3:fa:a8:74:d8:22:e1:91:7f:a8:4d:4e:22:
                    99:48:0d:9e:1d:d7:56:1f:19:6a:33:22:cd:72:b5:
                    75:18:68:e2:60:58:3f:8f:08:5a:f4:c3:ce:a9:2f:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FC:D3:8A:EB:8A:D7:E7:A5:10:7A:A6:6F:C3:8C:41:B5:09:50:FF
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32322d3232203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:b6:41:8c:15:b6:dd:b2:e5:99:d9:b3:4f:c1:a4:60:6d:d1:
         cd:6a:70:91:51:4b:a9:86:38:79:1e:87:76:fb:01:ff:26:8b:
         5e:4a:23:6f:17:7e:7d:0e:fe:44:8f:ee:f2:1e:c8:8b:74:bd:
         19:17:30:12:97:ed:7c:a0:fd:a6:e8:01:e5:f5:bb:c5:90:98:
         ce:0e:da:41:bb:c8:cf:eb:dc:64:9e:fc:f3:cc:a1:e7:05:da:
         e8:a6:ea:21:4a:e7:f5:66:0f:e6:94:65:9c:5d:ec:36:14:eb:
         f3:cf:a0:54:5e:ed:b3:96:e1:db:90:06:1c:05:4c:ee:1a:a9:
         34:99:06:c2:7f:20:21:c5:12:67:8c:6e:5e:af:65:d5:06:8e:
         f0:63:61:cd:61:b7:ee:24:0a:8a:7b:6f:dd:92:22:7b:81:4a:
         04:15:be:33:c6:c0:a3:9d:51:95:cd:b3:6a:3b:da:92:3f:65:
         61:01:08:99:e8:d3:2a:5d:7e:d0:dc:14:f1:d7:6c:cf:f2:1f:
         e2:72:48:74:f8:7c:57:a0:3b:bc:b0:10:47:9b:09:6a:58:47:
         3f:27:94:8e:1e:cc:82:fe:2d:b1:c1:f6:61:db:06:b2:6a:4d:
         c1:f5:7b:d5:15:8b:69:c7:9f:bc:61:4c:6a:97:60:44:a9:0e:
         54:3b:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:36:55 2025 by rpki-client