Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31342e302f32342d3234203d3e20323639353637.roa
File:                     34352e3138382e31342e302f32342d3234203d3e20323639353637.roa (raw, json)
Hash identifier:          /IFthmGlny+dZrNtLAtzMhE/9viKdsCyfVCs8b/4h+o=
Subject key identifier:   7E:9C:47:CF:F5:16:D0:0E:26:ED:2F:FA:5B:71:20:A2:18:FB:B2:51
Certificate issuer:       /CN=25AB6D9AFCDCCEA2144006A444F04F4229AAF448
Certificate serial:       3837362F955B3761084C41E7A13322B3F521EB7E
Authority key identifier: 25:AB:6D:9A:FC:DC:CE:A2:14:40:06:A4:44:F0:4F:42:29:AA:F4:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31342e302f32342d3234203d3e20323639353637.roa
Signing time:             Thu 10 Jul 2025 15:08:17 +0000
ROA not before:           Thu 10 Jul 2025 15:03:17 +0000
ROA not after:            Thu 09 Jul 2026 15:08:17 +0000
asID:                     269567
IP address blocks:        45.188.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.crl
                          rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 14:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:37:36:2f:95:5b:37:61:08:4c:41:e7:a1:33:22:b3:f5:21:eb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25AB6D9AFCDCCEA2144006A444F04F4229AAF448
        Validity
            Not Before: Jul 10 15:03:17 2025 GMT
            Not After : Jul  9 15:08:17 2026 GMT
        Subject: CN=7E9C47CFF516D00E26ED2FFA5B7120A218FBB251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:97:15:de:41:d8:00:56:da:f0:44:96:15:f8:
                    f2:0f:79:04:4e:05:cd:21:bd:95:ea:6b:ec:46:dc:
                    50:97:69:e9:bb:f4:c7:3c:dd:26:fa:f1:b9:b1:fe:
                    8f:ac:cb:62:36:38:2d:a5:4b:af:f6:7e:74:95:bd:
                    a1:47:54:dc:a9:b0:d7:84:6b:e2:06:7b:8e:13:d6:
                    17:2b:5e:50:ec:31:af:b9:ac:4a:bf:52:0b:e3:f6:
                    29:93:12:ac:df:d6:5c:6a:41:b9:77:da:ef:b7:b1:
                    ae:e5:13:fd:66:0a:0b:b2:53:64:91:13:66:9a:86:
                    08:67:22:54:e2:c2:8d:16:f3:69:38:1a:83:59:91:
                    9b:97:53:66:b3:d5:51:9d:04:26:94:07:87:d6:1a:
                    ed:00:64:9a:a8:8b:d8:40:bc:e5:2a:f9:fa:74:af:
                    33:0f:18:fa:da:fa:43:aa:89:8a:86:dd:7c:0e:f8:
                    0e:ee:51:99:01:95:05:8f:ed:76:59:99:5a:f1:0a:
                    95:3c:d6:a4:0a:70:2c:1a:1b:8a:e4:50:1e:e3:98:
                    4a:dc:bb:4c:3c:7f:2f:6c:94:8e:39:29:be:e4:b4:
                    a9:cd:fa:4e:11:6b:f7:6a:79:6a:ec:b6:2b:0f:46:
                    ca:7c:58:81:34:4e:8e:76:32:37:27:c0:dc:93:cc:
                    4c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:47:CF:F5:16:D0:0E:26:ED:2F:FA:5B:71:20:A2:18:FB:B2:51
            X509v3 Authority Key Identifier:
                keyid:25:AB:6D:9A:FC:DC:CE:A2:14:40:06:A4:44:F0:4F:42:29:AA:F4:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31342e302f32342d3234203d3e20323639353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:46:36:e9:d5:fa:dc:d4:6a:dd:ac:e7:8b:11:bc:74:ad:58:
         18:8e:a1:65:2a:94:83:22:44:da:4d:ab:29:65:9f:61:f5:a7:
         1e:b9:8d:92:2d:02:53:00:85:48:9b:cd:eb:a8:7f:9d:f9:06:
         80:cd:86:f9:17:ed:3c:93:ca:8e:07:c8:55:71:ad:c3:ff:2e:
         c3:ee:67:99:56:08:72:5d:8b:d9:61:31:3b:89:0b:0e:af:d5:
         58:15:bf:01:ca:5b:33:b9:76:23:41:2d:7c:b0:7c:1f:ae:e5:
         f0:f8:cd:10:83:0b:96:00:19:63:50:0c:b4:33:36:2f:d8:8f:
         e4:8a:a5:34:3c:fe:0c:31:d8:e8:fd:27:1a:8e:16:bb:7f:aa:
         0c:aa:8d:cc:41:3e:26:f4:1f:d8:5c:8b:6e:aa:d5:6c:ab:db:
         51:b7:42:1e:08:5f:53:54:c3:36:f0:6d:de:ee:61:44:72:a2:
         e9:99:03:31:6c:01:1c:1c:0c:cc:2f:d9:ec:be:66:45:ef:5c:
         88:8d:fc:54:6e:d8:2d:e9:6a:9d:5e:0f:40:50:ba:2c:cd:a9:
         79:98:c8:bc:77:45:81:e3:92:ec:ba:2b:73:48:d4:64:4f:55:
         49:2f:ba:ba:9f:a6:a6:18:52:e6:3a:2e:0d:0f:bc:af:24:d7:
         1d:50:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:21:12 2025 by rpki-client