Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38312e302f32342d3234203d3e20323639303131.roa
File:                     34352e3137362e38312e302f32342d3234203d3e20323639303131.roa (raw, json)
Hash identifier:          zdfTnKlehgMHiO9UPakFU+XY4qEq5oGI6K5cn5388KM=
Subject key identifier:   ED:00:26:56:13:DB:71:36:F4:7E:D2:81:D9:25:E5:2C:20:30:CD:2D
Certificate issuer:       /CN=7161E84D34482AB3498808B14DA6C9DAB7635308
Certificate serial:       1F3B189FE1F918D16ECD56B04AC447FB19E09C4B
Authority key identifier: 71:61:E8:4D:34:48:2A:B3:49:88:08:B1:4D:A6:C9:DA:B7:63:53:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38312e302f32342d3234203d3e20323639303131.roa
Signing time:             Mon 07 Jul 2025 20:36:37 +0000
ROA not before:           Mon 07 Jul 2025 20:31:37 +0000
ROA not after:            Mon 06 Jul 2026 20:36:37 +0000
asID:                     269011
IP address blocks:        45.176.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.crl
                          rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 02:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3b:18:9f:e1:f9:18:d1:6e:cd:56:b0:4a:c4:47:fb:19:e0:9c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7161E84D34482AB3498808B14DA6C9DAB7635308
        Validity
            Not Before: Jul  7 20:31:37 2025 GMT
            Not After : Jul  6 20:36:37 2026 GMT
        Subject: CN=ED00265613DB7136F47ED281D925E52C2030CD2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:96:4b:72:eb:bb:f9:ac:cd:b2:06:21:ee:
                    0a:61:d3:4a:a3:63:ed:00:ae:36:97:74:02:5e:15:
                    ae:c2:43:4b:d5:08:cb:df:5e:8f:2e:b2:2b:a0:24:
                    b1:17:8d:56:c1:70:45:6e:90:06:a0:39:f6:fa:07:
                    00:9a:d1:20:25:08:7d:a5:8d:dd:98:da:93:67:8d:
                    63:d3:82:c8:88:4c:d8:e4:2d:26:89:c6:4c:b5:99:
                    c1:3e:99:17:2b:64:d1:c9:51:6e:f0:99:81:d7:ba:
                    1b:a9:28:6e:79:e0:ec:b9:23:91:bf:af:2f:8c:ff:
                    70:9a:cb:32:f8:7a:ec:7d:89:d0:28:5f:5a:37:08:
                    96:3e:90:79:5b:02:42:64:6f:44:1b:d0:85:26:04:
                    b0:aa:c9:1c:ae:8e:7f:35:6d:b4:4d:ff:2b:76:7e:
                    dc:dc:9a:07:fb:1f:5f:67:70:09:0f:30:4a:e8:80:
                    b7:d9:48:3f:48:e0:74:cd:f5:a9:35:e8:33:fb:77:
                    83:1d:4f:0d:0f:fa:1f:02:72:1e:5e:17:9b:46:30:
                    3c:be:39:8f:9a:12:d5:c6:bf:36:73:91:ff:f2:b8:
                    01:96:bf:dc:8c:f1:44:9c:0f:2c:b1:bc:65:83:aa:
                    76:81:ae:e5:0b:f6:74:3f:1b:2a:c0:18:bb:50:7b:
                    55:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:00:26:56:13:DB:71:36:F4:7E:D2:81:D9:25:E5:2C:20:30:CD:2D
            X509v3 Authority Key Identifier:
                keyid:71:61:E8:4D:34:48:2A:B3:49:88:08:B1:4D:A6:C9:DA:B7:63:53:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38312e302f32342d3234203d3e20323639303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:04:eb:93:8f:cf:8f:18:80:bc:c2:ab:a6:27:d5:62:f7:df:
         19:74:1f:88:c1:08:52:49:45:00:21:27:26:c8:25:66:f3:c0:
         f7:36:36:92:f7:69:16:1d:bf:ed:79:99:7b:92:06:e1:ef:74:
         36:af:b5:fb:f2:0b:40:7c:eb:49:31:28:33:2e:bd:27:08:e9:
         ff:d6:a2:1f:dc:b0:dc:66:47:5a:53:20:a3:bd:ca:59:de:6f:
         ef:87:9e:20:1a:1d:5d:cd:f3:83:5e:aa:c6:1b:58:48:5a:3b:
         d7:e1:6a:c5:8a:8e:ca:de:9f:93:72:d1:23:6a:84:84:68:21:
         d7:39:a9:77:9c:7b:03:4e:b3:d3:22:d6:14:1f:a4:2a:e5:36:
         79:e1:bf:83:4d:69:bc:8f:c0:5f:c1:00:24:f3:15:56:bd:76:
         46:db:60:bc:be:07:4b:c4:fc:95:6e:e1:e0:ff:f7:82:f9:bb:
         3c:d2:c9:c3:86:fe:86:e5:64:c9:14:3c:22:96:8d:ac:d9:d0:
         fe:e5:51:c1:dd:68:91:9a:a5:c6:9f:0f:b6:cc:71:da:9a:ad:
         30:ab:7b:b1:23:df:ac:15:0f:81:1d:40:c0:93:56:73:5c:80:
         43:43:74:9f:dc:41:a1:c1:0e:2d:e1:e7:92:77:9a:a2:ca:44:
         6d:93:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:21:34 2025 by rpki-client