Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa
File:                     34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa (raw, json)
Hash identifier:          SR+iKMHfimEi6IWEPgrGJUY5z/UMNN1jyiagjTPEHvY=
Subject key identifier:   BE:89:DC:77:0B:82:06:8B:34:95:BD:18:AC:D5:93:87:53:64:61:BC
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       09223C529A632BAB3E038FE7CD6B8022D02879B5
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa
Signing time:             Tue 22 Jul 2025 20:54:40 +0000
ROA not before:           Tue 22 Jul 2025 20:49:40 +0000
ROA not after:            Tue 21 Jul 2026 20:54:40 +0000
asID:                     263427
IP address blocks:        45.162.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 06:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:22:3c:52:9a:63:2b:ab:3e:03:8f:e7:cd:6b:80:22:d0:28:79:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jul 22 20:49:40 2025 GMT
            Not After : Jul 21 20:54:40 2026 GMT
        Subject: CN=BE89DC770B82068B3495BD18ACD59387536461BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:07:63:58:76:ac:16:5c:09:15:84:6b:c9:
                    60:f8:6e:3a:60:b9:5d:e8:43:9b:a5:8d:53:eb:5a:
                    e8:64:c6:77:f7:d6:b1:4f:b8:66:37:f4:71:83:be:
                    19:ec:ee:9a:ef:3d:6c:c7:2f:72:5a:ce:b0:1f:73:
                    c3:5f:4b:c8:ab:1d:96:5d:42:c5:a9:af:2a:ad:a9:
                    f9:04:93:1a:53:9a:38:5c:6c:0b:93:e9:86:c1:71:
                    af:7e:bb:0a:7f:00:64:59:e0:99:1c:96:76:60:59:
                    66:cc:74:15:e4:08:fd:73:72:73:9c:3e:59:cb:5e:
                    21:be:5e:38:95:8c:32:87:d6:3b:2b:f1:1a:f9:d3:
                    19:88:df:85:3c:0e:f3:c6:7e:b3:c7:f8:ee:ec:e0:
                    03:77:91:75:f8:94:6c:1a:df:01:ae:aa:ec:b4:69:
                    db:70:17:14:53:46:ea:66:63:94:ca:77:0b:06:50:
                    33:db:61:22:ab:8d:cc:04:89:88:91:3e:3a:27:c4:
                    f0:22:31:bf:d8:7e:c0:47:12:ca:65:de:b3:4d:65:
                    e3:51:56:e4:33:c2:3b:b4:8e:b9:97:97:65:5c:67:
                    21:2a:dd:9b:aa:93:58:b8:a3:41:5b:2b:00:dc:e0:
                    6e:c9:2b:57:90:ec:9b:26:73:91:29:c1:23:39:32:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:89:DC:77:0B:82:06:8B:34:95:BD:18:AC:D5:93:87:53:64:61:BC
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:fd:fb:36:22:c2:ee:28:64:ac:0f:d6:91:81:f6:e3:dd:64:
         87:11:74:3b:87:81:31:ac:68:7e:b4:4e:49:d5:c3:ef:88:de:
         90:ae:a9:f3:e9:a9:e6:fd:0b:ef:86:b1:3f:b2:18:79:74:03:
         ff:bc:0f:d3:73:23:34:ce:1c:d1:a0:68:16:94:a5:db:ce:ec:
         3a:b5:c0:53:f0:fe:46:58:5d:f9:39:f5:c0:9f:9c:bf:d1:3d:
         67:71:72:e2:25:7b:30:8a:bc:49:68:d1:8b:50:e6:b0:8c:3b:
         d0:22:6c:ff:7e:68:13:a5:a9:74:13:d7:79:fb:5b:55:13:32:
         9f:f1:98:be:75:35:b8:ba:0b:b0:19:7b:e9:a9:c7:c2:1d:43:
         92:bd:ef:39:1a:fd:cb:fa:8c:43:36:0f:99:39:22:f5:85:c4:
         dd:47:c7:4e:32:4d:c4:c7:15:6d:09:c2:30:b4:7e:69:4b:24:
         d7:25:44:50:20:85:9a:be:93:ff:e4:63:74:32:a8:4f:0b:19:
         92:fd:38:fd:e9:1a:04:0d:86:70:27:c2:6d:df:1c:65:86:bf:
         18:b2:09:7a:d6:8f:4f:00:c2:c0:ab:68:2a:14:3e:36:12:f3:
         48:5e:87:2c:17:a9:44:e7:f2:12:14:32:66:2f:a9:36:a4:d9:
         5e:6e:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:46:51 2025 by rpki-client