Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/34352e3232352e3230382e302f32322d3332203d3e20323636393732.roa
File:                     34352e3232352e3230382e302f32322d3332203d3e20323636393732.roa (raw, json)
Hash identifier:          JSzHgpxlF6P0SM6Ji1j7nwocOG/tZXDgQCXCJAUejYY=
Subject key identifier:   04:B4:20:E0:17:3A:76:B6:25:68:FB:69:5B:C8:CF:57:FA:13:16:02
Certificate issuer:       /CN=3E1AA64F1F90D524070428F948C2D4929E70635C
Certificate serial:       78BF5556D80B37AAE6687A1264D59A9219B5D2C2
Authority key identifier: 3E:1A:A6:4F:1F:90:D5:24:07:04:28:F9:48:C2:D4:92:9E:70:63:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E1AA64F1F90D524070428F948C2D4929E70635C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/34352e3232352e3230382e302f32322d3332203d3e20323636393732.roa
Signing time:             Mon 21 Jul 2025 18:50:30 +0000
ROA not before:           Mon 21 Jul 2025 18:45:30 +0000
ROA not after:            Mon 20 Jul 2026 18:50:30 +0000
asID:                     266972
IP address blocks:        45.225.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/3E1AA64F1F90D524070428F948C2D4929E70635C.crl
                          rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/3E1AA64F1F90D524070428F948C2D4929E70635C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E1AA64F1F90D524070428F948C2D4929E70635C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 20:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bf:55:56:d8:0b:37:aa:e6:68:7a:12:64:d5:9a:92:19:b5:d2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E1AA64F1F90D524070428F948C2D4929E70635C
        Validity
            Not Before: Jul 21 18:45:30 2025 GMT
            Not After : Jul 20 18:50:30 2026 GMT
        Subject: CN=04B420E0173A76B62568FB695BC8CF57FA131602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:8e:22:29:65:8e:de:6d:fd:8a:f9:92:dc:
                    a3:e0:c9:07:4c:83:32:da:d2:e8:2b:cc:b6:ad:ad:
                    77:09:40:4b:0d:2a:b0:02:d5:b9:80:ed:16:79:3f:
                    ce:97:14:8e:ac:ac:6e:a3:06:16:ce:e8:10:a0:d6:
                    77:95:68:12:82:43:77:45:1b:2d:18:6a:41:06:2c:
                    93:03:91:13:01:b4:cc:1c:8c:76:8b:9c:73:45:7c:
                    72:70:56:0b:ea:57:a2:bc:42:16:82:94:c1:bb:57:
                    37:19:9d:bf:95:29:fb:b2:54:63:55:a9:bf:0d:49:
                    68:c0:ad:92:46:4d:7a:36:75:d4:c8:59:bd:a3:74:
                    a3:8b:f2:fb:2b:87:cd:84:01:dc:b3:19:1e:09:3e:
                    d7:19:0b:d9:0b:ad:ef:c4:07:5d:c6:fd:22:0f:d7:
                    52:f0:2e:6f:33:c7:c5:e0:12:a5:30:d8:53:a4:00:
                    b4:4b:da:e8:f8:18:c5:be:ca:03:f8:a1:56:4b:40:
                    26:06:66:85:12:47:a5:0b:7c:79:5b:f2:ac:c6:29:
                    75:55:9c:c8:bb:c7:73:c3:8d:52:fa:1b:ff:2f:23:
                    37:e0:f2:a5:37:68:6e:c6:16:89:14:47:42:ab:ab:
                    ab:70:fd:fa:dd:98:e8:29:54:9a:e2:f0:06:76:8e:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B4:20:E0:17:3A:76:B6:25:68:FB:69:5B:C8:CF:57:FA:13:16:02
            X509v3 Authority Key Identifier:
                keyid:3E:1A:A6:4F:1F:90:D5:24:07:04:28:F9:48:C2:D4:92:9E:70:63:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/3E1AA64F1F90D524070428F948C2D4929E70635C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E1AA64F1F90D524070428F948C2D4929E70635C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/34352e3232352e3230382e302f32322d3332203d3e20323636393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:7c:de:20:24:47:31:6e:1e:38:de:cb:9e:c1:1b:d7:ba:54:
         34:d9:eb:6c:72:5f:b3:f9:b4:bf:d7:91:c1:d3:04:83:de:bb:
         f9:0e:a3:c5:73:4a:44:38:c8:46:c7:54:14:40:ad:3e:b9:d2:
         4f:a2:e2:5e:1b:e2:27:e1:a7:e9:cc:f4:34:b6:85:6d:f1:41:
         35:17:9f:6c:7f:0a:55:51:9b:30:98:a9:cc:45:24:94:76:d6:
         25:10:03:72:30:95:50:6e:0f:9a:ce:13:be:dd:4c:a5:c2:b6:
         ab:20:1f:73:f7:fb:a5:f0:fc:b4:af:5c:07:df:60:7e:97:fb:
         26:99:93:8a:b0:95:d1:9e:b6:dd:9e:be:6d:07:e2:ee:03:ac:
         a3:1d:5d:f6:3d:2c:32:32:a5:45:2a:92:f0:7e:ce:e9:68:14:
         92:47:5f:e9:2f:56:0c:3f:10:1c:99:54:6b:27:30:69:cf:4d:
         49:39:b9:7f:50:ed:d3:93:75:57:94:19:97:c9:cd:7b:a3:1a:
         68:81:6b:d1:f0:f8:2f:19:93:d0:a8:d5:92:4b:a9:ab:a7:b8:
         c9:54:09:00:1e:89:6b:0b:42:a4:c0:63:47:e1:53:70:5b:18:
         95:9a:8e:02:73:6a:c4:f9:bb:de:a3:b1:ce:21:fb:d3:d9:c0:
         a0:a8:0b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:13:54 2025 by rpki-client