Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32342d3332203d3e203631353931.roa
File:                     34352e3233372e37322e302f32342d3332203d3e203631353931.roa (raw, json)
Hash identifier:          Y2mW3d2sl5phrEWGs777gyoRhP9+TuLGCMNbxrU1DHs=
Subject key identifier:   4D:E9:09:F9:30:F8:7D:9F:27:6C:B6:14:81:3D:F8:FC:0A:4D:71:09
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       127784703708432B634F586BC9D64488A8EE5DE5
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32342d3332203d3e203631353931.roa
Signing time:             Mon 14 Jul 2025 21:00:00 +0000
ROA not before:           Mon 14 Jul 2025 20:55:00 +0000
ROA not after:            Mon 13 Jul 2026 21:00:00 +0000
asID:                     61591
IP address blocks:        45.237.72.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 13:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:77:84:70:37:08:43:2b:63:4f:58:6b:c9:d6:44:88:a8:ee:5d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jul 14 20:55:00 2025 GMT
            Not After : Jul 13 21:00:00 2026 GMT
        Subject: CN=3082010A0282010100A5F471B04990F80151B117C7A7D8C9FE4768BC6F215A179F69F11F5AF64D3DB9C1EC8DD313BED8770924C75401A09D1C54C324ED749E6DAC5AF2CAA827A4E4F0E73E3FC2543692EBA32B81BF19ECFBAAFD28012B449DA9FC19E750BBEB6798065FD751C19D59B2F581D0CD2F04B7E0AD6E1497094EA91B70F4AAF854672AC7568C8391D8AA4BC6F40F72AEDA1CEFC59279CFE9C60809C82AC5CCD44DB1B5374E8FB7FEEF7CA69C3987E1AF0995C93347C56627DACD380EAA95FFC5B5E4070C0BC5EF7A412B788456CD2308D8E3F28B348241CEEA072E9EC349ECE6A8B0ED79215DD655260CC279BEC788B5F0DF4F26D2751165BEA4BB7754BD18B421BD69E76D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:71:b0:49:90:f8:01:51:b1:17:c7:a7:d8:
                    c9:fe:47:68:bc:6f:21:5a:17:9f:69:f1:1f:5a:f6:
                    4d:3d:b9:c1:ec:8d:d3:13:be:d8:77:09:24:c7:54:
                    01:a0:9d:1c:54:c3:24:ed:74:9e:6d:ac:5a:f2:ca:
                    a8:27:a4:e4:f0:e7:3e:3f:c2:54:36:92:eb:a3:2b:
                    81:bf:19:ec:fb:aa:fd:28:01:2b:44:9d:a9:fc:19:
                    e7:50:bb:eb:67:98:06:5f:d7:51:c1:9d:59:b2:f5:
                    81:d0:cd:2f:04:b7:e0:ad:6e:14:97:09:4e:a9:1b:
                    70:f4:aa:f8:54:67:2a:c7:56:8c:83:91:d8:aa:4b:
                    c6:f4:0f:72:ae:da:1c:ef:c5:92:79:cf:e9:c6:08:
                    09:c8:2a:c5:cc:d4:4d:b1:b5:37:4e:8f:b7:fe:ef:
                    7c:a6:9c:39:87:e1:af:09:95:c9:33:47:c5:66:27:
                    da:cd:38:0e:aa:95:ff:c5:b5:e4:07:0c:0b:c5:ef:
                    7a:41:2b:78:84:56:cd:23:08:d8:e3:f2:8b:34:82:
                    41:ce:ea:07:2e:9e:c3:49:ec:e6:a8:b0:ed:79:21:
                    5d:d6:55:26:0c:c2:79:be:c7:88:b5:f0:df:4f:26:
                    d2:75:11:65:be:a4:bb:77:54:bd:18:b4:21:bd:69:
                    e7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E9:09:F9:30:F8:7D:9F:27:6C:B6:14:81:3D:F8:FC:0A:4D:71:09
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/34352e3233372e37322e302f32342d3332203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:c3:4e:c7:4f:06:21:ef:9e:69:ae:68:6c:d8:f8:10:ec:79:
         67:bc:54:14:6d:92:72:ff:43:59:b1:47:f5:ff:f8:10:87:e6:
         fa:83:48:4a:90:d2:40:74:3d:8e:e1:de:df:cd:ac:90:8f:b8:
         76:af:66:a8:c1:70:73:af:25:2c:4c:e3:27:7c:92:b0:7c:ed:
         eb:3e:e0:c3:97:f4:10:fc:a1:e7:32:09:ca:13:3e:6c:6a:1c:
         63:39:c1:63:4e:73:19:01:79:6b:96:aa:bf:45:b8:17:ac:b8:
         18:7d:23:1d:3e:75:00:d9:2e:f7:c8:63:38:d2:d1:11:98:39:
         99:10:5c:4f:8c:2f:d0:a9:ad:ad:39:70:87:6d:f9:b5:b4:0b:
         1e:74:f5:df:95:78:b5:c2:bb:a8:84:49:3d:a5:8f:6f:90:e1:
         f1:60:95:38:16:f0:92:cd:92:fc:21:7d:c3:aa:1a:d4:be:56:
         20:b6:a2:d9:41:83:ff:f1:25:1a:e5:e7:e0:b1:30:d8:82:37:
         47:12:22:01:c6:aa:81:21:2e:a8:5a:28:dd:b7:ab:e0:d1:1f:
         f1:00:3f:a0:12:be:52:3d:f8:a7:77:af:d2:d5:4d:30:46:71:
         6a:10:1b:8d:c0:63:85:bd:56:fd:ef:09:39:16:ad:2b:31:72:
         df:4e:5f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:17:35 2025 by rpki-client