Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234322e302f32332d3233203d3e20323633343237.roa
File:                     34352e3136322e3234322e302f32332d3233203d3e20323633343237.roa (raw, json)
Hash identifier:          Vr7ObznSqlrIPc/sEDvU4i1s/EUCAI3MycI73JLMmq0=
Subject key identifier:   5E:B6:B9:1A:CB:D1:36:64:32:72:B0:20:DE:C4:B3:45:6D:23:F3:D4
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       536D51244931661E9D65842B3A513EBC4DB169DA
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234322e302f32332d3233203d3e20323633343237.roa
Signing time:             Tue 22 Jul 2025 20:54:41 +0000
ROA not before:           Tue 22 Jul 2025 20:49:41 +0000
ROA not after:            Tue 21 Jul 2026 20:54:41 +0000
asID:                     263427
IP address blocks:        45.162.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6d:51:24:49:31:66:1e:9d:65:84:2b:3a:51:3e:bc:4d:b1:69:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jul 22 20:49:41 2025 GMT
            Not After : Jul 21 20:54:41 2026 GMT
        Subject: CN=5EB6B91ACBD136643272B020DEC4B3456D23F3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3f:ed:46:8b:45:d0:bc:d5:a7:86:dc:02:de:
                    f3:3b:70:cd:e3:bd:ed:b5:d0:c6:50:da:56:a4:40:
                    ed:8c:16:e4:4d:5b:39:24:d7:97:2f:36:c9:00:e2:
                    58:5c:e7:a9:09:58:3b:30:ea:dc:fb:36:fd:7b:5a:
                    b6:75:7f:c7:65:b7:29:3b:af:f0:16:86:5b:8e:0e:
                    4c:16:f0:84:ad:b5:f2:53:3d:3c:01:bb:5f:cb:de:
                    04:61:e0:3b:54:81:35:a3:3f:83:33:26:49:47:d2:
                    ef:07:ac:45:69:5e:bc:c5:c1:25:61:4d:0d:87:31:
                    02:56:88:c7:f9:0e:47:2c:87:cf:b9:73:df:d7:46:
                    af:38:06:61:a9:38:c3:02:ea:fc:9a:0b:66:fd:47:
                    76:f2:3d:8c:bd:ad:b2:f9:dd:33:f3:4a:b6:88:58:
                    db:5d:23:ed:48:c9:36:9b:5d:39:5e:08:da:dc:e9:
                    1e:6f:41:d2:91:4c:86:30:35:bd:d2:03:c7:f4:54:
                    90:86:6b:5c:bb:93:7e:66:e0:13:63:ef:22:03:4f:
                    8d:a2:c8:d4:13:47:ba:b6:ca:8f:43:b2:64:3f:e7:
                    09:7b:13:23:18:b7:dc:86:6c:73:19:4d:78:ef:89:
                    c5:5f:f3:ad:a9:9c:95:ca:9c:29:7c:49:8a:a8:95:
                    c7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B6:B9:1A:CB:D1:36:64:32:72:B0:20:DE:C4:B3:45:6D:23:F3:D4
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234322e302f32332d3233203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:83:c5:40:a1:73:9f:93:13:e3:ef:f3:06:ba:cd:e5:05:6c:
         f6:dd:b1:9b:a0:6d:e2:88:4c:20:a6:57:65:ba:52:7c:a2:2b:
         ca:af:78:d5:c8:30:90:f4:db:9e:80:00:1e:30:ae:15:b1:0e:
         2c:d2:9e:d8:65:4b:7f:25:22:b2:9d:f2:14:25:e2:3b:20:64:
         ad:2b:77:80:0b:b1:9f:48:b5:fe:de:d3:f0:3d:b2:18:96:9b:
         cd:a9:07:e9:0a:41:30:de:17:2c:15:62:df:e0:90:d7:f9:e3:
         9d:6f:28:be:2a:6c:85:2b:6f:36:ba:f9:85:88:90:77:ef:d9:
         29:16:2f:cf:46:8e:15:a0:62:51:81:23:a1:19:f0:7d:99:15:
         41:3f:de:6e:e6:83:07:90:1d:c1:1b:a8:13:47:81:bd:7e:31:
         33:10:f7:15:0d:8e:77:2f:a3:fc:6e:37:03:8e:50:42:32:3f:
         9d:7e:60:41:27:9b:9a:4f:e3:26:e3:07:8b:0c:38:b3:7d:d0:
         f9:ef:9f:bf:63:de:c2:e2:93:98:fb:24:07:db:9a:c6:42:71:
         3a:cc:c4:15:48:3f:43:22:8a:2f:ad:65:56:59:c0:64:9b:2a:
         43:46:6f:fb:fb:2f:db:35:0d:1d:ac:ca:85:93:0d:ed:9d:4a:
         6f:d8:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:44:10 2025 by rpki-client