Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35312e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          7okcUwk3RHV5/oqQFOnE3M53PVFtlw9eMDgxuep1LTM=
Subject key identifier:   93:16:7F:59:2C:BA:F4:3B:A6:B5:57:9F:8C:FF:7A:9D:64:22:5C:13
Certificate issuer:       /CN=FA3907829FD3FBDB932447112E7CCAE0C541AF99
Certificate serial:       7A370FA7962CD9D8886DD4D92DF43CAF7BA681BF
Authority key identifier: FA:39:07:82:9F:D3:FB:DB:93:24:47:11:2E:7C:CA:E0:C5:41:AF:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA3907829FD3FBDB932447112E7CCAE0C541AF99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35312e302f32342d3234203d3e20323638323035.roa
Signing time:             Thu 24 Jul 2025 01:42:15 +0000
ROA not before:           Thu 24 Jul 2025 01:37:15 +0000
ROA not after:            Thu 23 Jul 2026 01:42:15 +0000
asID:                     268205
IP address blocks:        45.236.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/FA3907829FD3FBDB932447112E7CCAE0C541AF99.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/FA3907829FD3FBDB932447112E7CCAE0C541AF99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA3907829FD3FBDB932447112E7CCAE0C541AF99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 08:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:37:0f:a7:96:2c:d9:d8:88:6d:d4:d9:2d:f4:3c:af:7b:a6:81:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA3907829FD3FBDB932447112E7CCAE0C541AF99
        Validity
            Not Before: Jul 24 01:37:15 2025 GMT
            Not After : Jul 23 01:42:15 2026 GMT
        Subject: CN=93167F592CBAF43BA6B5579F8CFF7A9D64225C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:8c:87:b7:c8:b6:06:45:5c:3b:7f:29:62:
                    c2:47:ee:db:83:4b:bb:70:4f:67:56:67:bc:5d:79:
                    39:3e:dc:fa:26:20:0b:83:fe:df:2f:e3:87:b1:c8:
                    65:d2:7d:3f:42:3a:f6:a2:79:73:37:07:71:93:cb:
                    58:c1:73:76:72:70:08:66:b4:ea:44:75:f3:57:fb:
                    b6:f0:1a:56:14:4e:8c:61:9e:84:37:17:1c:87:32:
                    f8:6c:09:89:9e:cb:c2:29:2a:2c:ae:24:ca:26:a2:
                    83:8b:67:4c:c8:a3:60:5d:fb:2b:c6:db:0c:e1:df:
                    87:30:75:37:0c:ee:cd:b1:69:cd:e0:13:bf:b4:29:
                    04:83:0b:c1:11:5a:16:3e:54:2a:9a:6d:18:58:81:
                    b3:50:e1:8a:88:b3:4b:71:31:48:54:04:2b:40:ba:
                    db:34:9a:ac:c0:56:a2:1c:5c:b7:84:6d:c6:84:bd:
                    bb:54:a7:11:91:d8:f9:1c:34:e3:f1:1b:68:89:06:
                    c6:8a:aa:f4:88:74:23:c2:49:56:58:1a:07:64:43:
                    46:a7:b8:68:ce:d3:db:a5:2e:2f:f1:c0:bc:b8:89:
                    56:d8:46:47:56:b4:1f:3a:fd:fb:72:6b:66:37:35:
                    3b:41:55:85:8a:b7:b9:06:25:8b:92:2c:2e:8a:25:
                    7e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:16:7F:59:2C:BA:F4:3B:A6:B5:57:9F:8C:FF:7A:9D:64:22:5C:13
            X509v3 Authority Key Identifier:
                keyid:FA:39:07:82:9F:D3:FB:DB:93:24:47:11:2E:7C:CA:E0:C5:41:AF:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/FA3907829FD3FBDB932447112E7CCAE0C541AF99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA3907829FD3FBDB932447112E7CCAE0C541AF99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35312e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e5:4f:67:cd:70:6b:0e:e6:68:a3:01:82:5e:39:16:79:92:
         dd:15:88:9c:a8:93:52:63:2a:aa:29:ec:c5:48:35:c9:0e:69:
         ce:50:0e:44:d0:36:00:2c:d2:fd:05:a2:aa:ac:8e:8f:d9:a5:
         71:60:9b:62:fc:4e:b8:36:a0:0b:05:a4:69:55:0f:7c:68:8f:
         70:c4:a5:8c:42:1d:c6:df:c1:58:97:45:ad:bc:b7:4f:18:43:
         0d:ed:0e:19:91:4a:fe:8e:6f:68:cb:90:7a:54:7d:e8:a7:dd:
         1a:60:cd:21:16:cf:a6:3f:69:a6:44:b5:96:43:4e:5c:3b:67:
         43:2d:50:ba:eb:c5:03:f2:7c:aa:c9:61:ef:55:d0:4d:2b:f4:
         e7:0d:22:df:53:fb:3a:42:98:e5:51:67:ac:6d:59:7f:03:b8:
         d4:00:69:f3:b5:33:cf:c9:ad:96:c2:98:64:d0:9e:ce:15:c6:
         71:a1:e6:d1:ce:4b:a3:63:e1:ae:ed:17:65:5f:fe:c7:f0:1d:
         de:89:3a:c0:09:c7:1a:5b:ad:e2:93:14:a9:70:f5:a4:bd:fa:
         e6:93:de:6b:4e:ef:7c:89:4d:ea:f6:e2:8c:09:73:44:0b:34:
         e9:0e:b2:bd:2a:75:86:0e:82:b7:b1:29:b7:6d:11:07:fa:c1:
         d7:6c:ae:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:42:51 2025 by rpki-client