Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37322e302f32332d3233203d3e20323637363638.roa
File:                     34352e3232342e37322e302f32332d3233203d3e20323637363638.roa (raw, json)
Hash identifier:          Kpu6ioDMZwSb+Q2swd77qmssrlYOosS5afgbd5H0C48=
Subject key identifier:   51:61:22:28:B7:6A:CC:B4:17:C7:AE:35:D6:7B:1D:A7:DA:21:26:BD
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       281222C7138B9B278DA6F3AFC9F4D12EA459D070
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37322e302f32332d3233203d3e20323637363638.roa
Signing time:             Thu 17 Jul 2025 20:23:58 +0000
ROA not before:           Thu 17 Jul 2025 20:18:58 +0000
ROA not after:            Thu 16 Jul 2026 20:23:58 +0000
asID:                     267668
IP address blocks:        45.224.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 15:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:12:22:c7:13:8b:9b:27:8d:a6:f3:af:c9:f4:d1:2e:a4:59:d0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Jul 17 20:18:58 2025 GMT
            Not After : Jul 16 20:23:58 2026 GMT
        Subject: CN=51612228B76ACCB417C7AE35D67B1DA7DA2126BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:46:73:dc:6f:87:63:8d:75:a2:47:32:b3:2c:
                    7b:c3:5f:d1:fc:61:81:d5:64:52:d2:8a:37:24:e4:
                    87:3f:4e:bf:b8:b2:4e:09:c0:85:ba:5e:2b:54:4a:
                    06:17:dc:ad:ad:bb:36:0a:43:83:7f:30:41:cd:64:
                    77:91:4c:f0:4a:5b:05:e9:ad:ac:cb:ba:c6:4e:c0:
                    47:bc:c9:b3:47:f0:cc:1d:1b:de:51:bb:16:ca:a5:
                    6c:6b:c5:b0:cf:06:db:39:a3:46:51:74:0c:dc:9b:
                    7d:d5:47:cb:1f:45:0d:55:0e:85:e5:1b:73:ca:37:
                    5a:dc:54:e6:e2:97:cd:bd:21:a4:c1:a2:2b:2a:4c:
                    3d:59:86:cf:39:73:72:6f:eb:4b:20:e1:b9:5f:49:
                    e8:13:f9:3d:94:59:ec:e8:5c:de:35:44:ce:5f:96:
                    ef:7b:f7:e6:54:1e:ad:e8:ad:41:3e:e0:e3:3e:dc:
                    cc:65:79:18:52:08:da:06:21:7a:f1:e5:3d:b1:95:
                    39:d2:8e:90:42:09:27:d9:b6:b7:03:8b:b8:7b:22:
                    9e:e7:b1:f9:7b:49:c0:ba:d6:78:e8:8c:a8:dc:14:
                    0d:48:19:c0:48:42:6a:dc:c9:01:85:38:62:51:16:
                    fc:c1:5a:c2:49:d2:e0:65:2f:8a:bd:81:88:d0:f9:
                    ba:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:61:22:28:B7:6A:CC:B4:17:C7:AE:35:D6:7B:1D:A7:DA:21:26:BD
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37322e302f32332d3233203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:2e:77:88:a6:da:e7:1d:41:7c:76:89:29:f7:fa:07:2b:20:
         7c:16:6f:50:ea:4c:4a:8a:66:cc:6e:b5:e5:47:b1:dd:3b:56:
         2c:7e:8a:53:2a:f9:b0:c4:48:ff:c6:be:59:e5:aa:d1:32:fb:
         1e:7e:3c:ab:7a:a6:d5:f0:eb:10:8c:b4:db:da:f5:d1:c0:64:
         c6:0b:02:9b:8b:36:6c:66:a6:cf:ac:37:dc:36:9e:14:2a:0b:
         38:5f:b4:cb:91:d8:2a:3e:cd:27:06:39:07:6f:3b:ae:12:00:
         93:f7:46:47:e7:c5:22:2e:4f:c3:03:3e:95:8d:da:b6:28:7c:
         1f:6b:78:fe:03:ea:3e:b5:cd:5f:98:8e:80:6b:8a:ea:9d:93:
         6f:54:23:d3:50:fd:ce:f6:f2:3c:e5:22:e9:db:a7:80:5e:22:
         2f:f2:12:26:69:b8:36:5d:34:c3:c5:56:0f:99:74:6d:42:95:
         f8:6e:b6:36:62:65:35:fc:e0:58:1d:80:d7:e7:3a:3f:58:7b:
         b1:4b:42:40:dc:60:de:24:83:e8:c5:6e:35:3e:d0:99:ad:9d:
         27:82:01:05:23:e8:91:68:9d:96:b5:bc:d3:e1:93:7d:f7:0f:
         13:8a:e7:6f:d9:42:99:62:d9:c8:f3:fa:bd:02:39:cd:f5:8b:
         da:cf:43:5e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKBIixxOLmyeNpvOvyfTRLqRZ0HAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4RjBBMjE1MkYxQThFNEQ1QjMwOTc3NDI3MkRCNzBE
OEJERTA1RDAeFw0yNTA3MTcyMDE4NThaFw0yNjA3MTYyMDIzNThaMDMxMTAvBgNV
BAMTKDUxNjEyMjI4Qjc2QUNDQjQxN0M3QUUzNUQ2N0IxREE3REEyMTI2QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVRnPcb4djjXWiRzKzLHvDX9H8
YYHVZFLSijck5Ic/Tr+4sk4JwIW6XitUSgYX3K2tuzYKQ4N/MEHNZHeRTPBKWwXp
razLusZOwEe8ybNH8MwdG95RuxbKpWxrxbDPBts5o0ZRdAzcm33VR8sfRQ1VDoXl
G3PKN1rcVObil829IaTBoisqTD1Zhs85c3Jv60sg4blfSegT+T2UWezoXN41RM5f
lu979+ZUHq3orUE+4OM+3MxleRhSCNoGIXrx5T2xlTnSjpBCCSfZtrcDi7h7Ip7n
sfl7ScC61njojKjcFA1IGcBIQmrcyQGFOGJRFvzBWsJJ0uBlL4q9gYjQ+bofAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUWEiKLdqzLQXx6411nsdp9ohJr0wHwYDVR0j
BBgwFoAU548KIVLxqOTVswl3QnLbcNi94F0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVVicEZZS1RRc21WcG45b3dqcUN2TnlxQ3NCM1hkNzJOVzVnWkd5aWt5
TGEvMS9FNzhGMEEyMTUyRjFBOEU0RDVCMzA5Nzc0MjcyREI3MEQ4QkRFMDVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEYwQTIxNTJGMUE4RTRE
NUIzMDk3NzQyNzJEQjcwRDhCREUwNUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVYnBGWUtUUXNtVnBuOW93anFDdk55cUNzQjNYZDcyTlc1Z1pHeWlreUxhLzEv
MzQzNTJlMzIzMjM0MmUzNzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLeBIMA0GCSqGSIb3DQEBCwUAA4IBAQCzLneIptrn
HUF8dokp9/oHKyB8Fm9Q6kxKimbMbrXlR7HdO1YsfopTKvmwxEj/xr5Z5arRMvse
fjyreqbV8OsQjLTb2vXRwGTGCwKbizZsZqbPrDfcNp4UKgs4X7TLkdgqPs0nBjkH
bzuuEgCT90ZH58UiLk/DAz6Vjdq2KHwfa3j+A+o+tc1fmI6Aa4rqnZNvVCPTUP3O
9vI85SLp26eAXiIv8hImabg2XTTDxVYPmXRtQpX4brY2YmU1/OBYHYDX5zo/WHux
S0JA3GDeJIPoxW41PtCZrZ0nggEFI+iRaJ2WtbzT4ZN99w8Tiudv2UKZYtnI8/q9
AjnN9Yvaz0Ne
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:22:53 2025 by rpki-client