Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/34352e34322e3136302e302f32322d3234203d3e20333936353039.roa
File:                     34352e34322e3136302e302f32322d3234203d3e20333936353039.roa (raw, json)
Hash identifier:          R8qUjIZ6ysKWvC5/eDGClxNbLjc/860MLitI4fgP5XI=
Subject key identifier:   32:6D:D6:40:73:E2:5C:6B:0C:02:A4:05:B8:64:00:68:2B:83:3F:02
Certificate issuer:       /CN=4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33
Certificate serial:       1519D8A29A1ECB359553E1A928BC8710B183EC10
Authority key identifier: D3:79:09:F7:13:CB:E9:89:D0:A9:93:E0:FC:6E:6A:45:70:B0:59:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/34352e34322e3136302e302f32322d3234203d3e20333936353039.roa
Signing time:             Wed 24 Sep 2025 02:12:08 +0000
ROA not before:           Wed 24 Sep 2025 02:07:08 +0000
ROA not after:            Wed 23 Sep 2026 02:12:08 +0000
asID:                     396509
IP address blocks:        45.42.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.crl
                          rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:19:d8:a2:9a:1e:cb:35:95:53:e1:a9:28:bc:87:10:b1:83:ec:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33
        Validity
            Not Before: Sep 24 02:07:08 2025 GMT
            Not After : Sep 23 02:12:08 2026 GMT
        Subject: CN=326DD64073E25C6B0C02A405B86400682B833F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:c4:d4:03:26:e1:d6:18:9c:52:9f:0b:b1:
                    99:a4:74:c6:53:a0:3f:3e:8b:ca:73:ba:33:06:55:
                    a3:cd:22:0f:07:29:49:89:58:59:e6:fd:90:39:ad:
                    54:1b:e5:6b:1e:20:96:9e:55:c3:db:3e:d0:10:70:
                    c4:04:ed:c8:a6:c8:ec:e6:a1:2f:fe:cb:d2:55:63:
                    f9:1b:0d:f8:b7:a1:0f:4e:22:5b:50:a5:06:53:6f:
                    ff:d8:d2:82:af:84:c0:8b:69:05:17:41:b0:06:e1:
                    a1:4b:5f:20:53:be:c9:d3:28:a8:2a:33:64:50:08:
                    a7:2c:a8:80:79:b4:ba:9d:23:8f:70:60:b5:71:6b:
                    64:f7:2f:57:99:06:76:a0:9b:38:13:72:75:21:95:
                    3f:75:e2:e2:3b:29:ce:0a:99:ee:32:43:09:fd:84:
                    b0:59:bd:e0:93:6f:bc:61:41:bf:00:e4:54:b5:ed:
                    9a:a8:19:1d:4a:b6:5f:2c:ca:cf:3a:39:76:57:9c:
                    01:60:60:e2:cb:33:b8:03:19:54:92:91:c0:a0:59:
                    2b:a7:70:b7:9d:bc:0a:2c:5d:dd:69:c5:e6:e2:63:
                    4a:6e:7f:04:d8:5a:bb:15:d7:ce:31:8d:a8:5d:54:
                    80:dc:6b:c1:3b:35:b5:23:9e:33:0f:d4:57:56:e8:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6D:D6:40:73:E2:5C:6B:0C:02:A4:05:B8:64:00:68:2B:83:3F:02
            X509v3 Authority Key Identifier:
                keyid:D3:79:09:F7:13:CB:E9:89:D0:A9:93:E0:FC:6E:6A:45:70:B0:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/34352e34322e3136302e302f32322d3234203d3e20333936353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:04:62:74:94:15:1a:e4:65:db:0d:f9:b9:d7:87:1f:ec:63:
         14:eb:ba:91:22:85:94:4c:7a:eb:d0:62:c8:17:c5:27:17:ee:
         c9:6e:ba:15:ac:28:b4:0f:e3:8c:f4:80:05:40:72:81:58:2e:
         35:43:db:f1:8e:1b:e1:ca:da:25:c6:81:c2:d9:da:62:79:32:
         f9:06:17:8e:be:72:5a:43:ca:8c:19:1e:c1:37:4e:09:49:aa:
         ba:c0:5d:16:75:19:e5:1b:10:59:72:3d:ba:f2:94:9d:53:c3:
         a1:c7:0b:33:02:71:a1:13:5b:02:95:87:3a:74:af:e2:c9:8c:
         89:ab:53:a6:32:78:80:41:bf:66:a3:4d:f1:0c:d2:e9:53:d1:
         b0:f1:34:83:ce:2a:3c:cb:a4:05:49:5d:2a:96:82:c0:ea:ad:
         e5:65:a5:42:76:47:5f:73:9f:42:88:bb:75:11:00:e2:0a:89:
         3f:4a:cd:38:2c:a6:2f:c1:72:09:c6:33:82:63:6c:b9:24:f8:
         56:c7:83:a3:ff:16:36:2f:fb:c3:74:d5:b8:ec:e0:64:70:39:
         2b:16:f3:6a:19:81:57:4c:d9:f3:68:10:19:ea:6b:77:17:2a:
         ef:ca:43:35:86:c7:12:d2:06:8c:d9:c8:74:34:2f:69:e0:be:
         85:0e:36:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:18:50 2025 by rpki-client