Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32342e302f32332d3234203d3e20323638383739.roa
File:                     34352e3137352e32342e302f32332d3234203d3e20323638383739.roa (raw, json)
Hash identifier:          NwcGSrpPTlgvRBomA7U3G9uqF5/dhmtT3nLHS4inwYs=
Subject key identifier:   FE:41:F6:84:F6:75:33:CE:F6:2E:2D:85:B9:B4:0A:1B:B0:17:83:59
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       7A63D1DAF97F481A4EF9C2D03F6554034FFCF2A4
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32342e302f32332d3234203d3e20323638383739.roa
Signing time:             Fri 04 Jul 2025 20:31:43 +0000
ROA not before:           Fri 04 Jul 2025 20:26:43 +0000
ROA not after:            Fri 03 Jul 2026 20:31:43 +0000
asID:                     268879
IP address blocks:        45.175.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 06:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:63:d1:da:f9:7f:48:1a:4e:f9:c2:d0:3f:65:54:03:4f:fc:f2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Jul  4 20:26:43 2025 GMT
            Not After : Jul  3 20:31:43 2026 GMT
        Subject: CN=FE41F684F67533CEF62E2D85B9B40A1BB0178359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:65:fb:71:87:75:74:0d:6b:ce:76:3e:ed:
                    cb:4a:47:9a:29:0d:08:94:06:b9:99:63:de:84:31:
                    a8:a3:7a:27:84:08:55:73:5f:e1:82:8c:40:87:34:
                    8e:b2:54:cb:7c:e3:c8:36:71:ec:df:37:dc:d1:0f:
                    50:fe:ce:7e:fc:ac:4c:2f:96:21:cd:3a:23:d8:9b:
                    b4:06:4d:87:49:1c:47:26:e5:45:6c:bf:b5:56:2f:
                    e3:25:c0:4f:58:e0:29:04:24:93:79:bf:12:6a:71:
                    95:b2:94:6b:a0:3f:8f:d4:a4:ca:f4:0b:0f:52:0e:
                    b4:88:c2:09:bf:a2:00:97:d2:08:98:fd:eb:4f:3f:
                    b0:ff:59:78:7f:7a:f5:b4:2b:8f:19:2e:bb:2f:99:
                    80:f6:85:87:af:bc:45:21:04:29:a2:5c:88:27:54:
                    55:e2:1b:76:0e:3f:1e:64:80:5f:59:62:ec:47:0e:
                    8d:31:27:53:d0:96:3a:6a:dd:05:96:a5:4e:32:51:
                    cf:3d:b3:4e:b5:fa:c3:5c:a9:15:36:cf:71:ec:8c:
                    67:45:43:d4:8f:3d:fb:bc:64:3d:48:99:75:46:b7:
                    90:ae:42:f3:7b:b4:4d:1b:a2:30:47:af:28:e3:b8:
                    4d:1b:91:77:b3:99:20:c5:dd:57:78:2c:00:46:5c:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:41:F6:84:F6:75:33:CE:F6:2E:2D:85:B9:B4:0A:1B:B0:17:83:59
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32342e302f32332d3234203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:50:9f:79:a8:58:1f:f3:b1:26:af:b1:f5:60:50:cc:65:cb:
         dd:d3:52:af:3a:94:64:e3:a1:d6:d2:2c:51:50:80:05:bb:80:
         a7:d1:29:99:bd:3e:fc:50:15:4e:e4:a4:12:9c:1a:7e:a7:be:
         91:33:18:8a:84:ab:85:46:e6:5d:e2:86:64:b1:9e:a8:64:57:
         9d:d0:31:31:c2:9e:cc:af:5d:52:3d:da:0e:96:80:89:06:cb:
         2d:48:99:3f:79:96:31:f1:a4:8d:f2:09:63:4c:35:30:43:2e:
         07:c5:a1:cd:13:5e:ea:51:10:fa:7e:bf:4d:26:b1:12:4e:09:
         35:8c:b2:89:ec:b5:ba:a1:e2:42:61:52:6a:c2:31:7a:8d:0e:
         8e:c2:c9:ff:fe:07:8f:ba:09:63:a9:01:5b:51:8c:47:37:7a:
         a7:c1:25:e1:53:1e:a2:11:48:e4:ac:96:b4:1b:64:13:41:ba:
         fe:26:41:9a:a4:97:ed:d1:60:e9:4f:22:21:d6:d1:73:8d:6f:
         9d:6f:91:29:ce:d9:0e:4a:5b:c2:3a:4d:c7:30:86:68:70:13:
         cb:f8:3d:1c:ba:95:d2:1f:bf:78:07:bf:3d:16:f0:f8:6f:37:
         06:f7:9c:98:f9:c1:f8:1f:52:60:94:a0:c0:26:24:f6:11:89:
         25:57:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:02:34 2025 by rpki-client