Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa
File:                     34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa (raw, json)
Hash identifier:          dEF3V3UoF2L8N3I4o+SbEBWDv8w83I90UJn4HALV0os=
Subject key identifier:   90:5B:3A:2B:6D:65:44:68:AE:2E:48:51:6F:0C:7E:96:A1:70:E0:DA
Certificate issuer:       /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Certificate serial:       1419C15FBF8BD0244FF7EA7F814D93F8D227BD26
Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa
Signing time:             Fri 18 Jul 2025 02:25:03 +0000
ROA not before:           Fri 18 Jul 2025 02:20:03 +0000
ROA not after:            Fri 17 Jul 2026 02:25:03 +0000
asID:                     269433
IP address blocks:        45.185.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl
                          rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 31 Jul 2025 10:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:19:c1:5f:bf:8b:d0:24:4f:f7:ea:7f:81:4d:93:f8:d2:27:bd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
        Validity
            Not Before: Jul 18 02:20:03 2025 GMT
            Not After : Jul 17 02:25:03 2026 GMT
        Subject: CN=905B3A2B6D654468AE2E48516F0C7E96A170E0DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:37:f4:f0:70:f9:d3:95:fb:c9:72:ed:49:
                    48:b2:2b:2b:07:cf:ff:04:77:65:d0:01:18:08:aa:
                    99:6e:62:a1:60:12:2c:22:cb:f9:09:0b:da:2c:38:
                    82:a7:dc:ee:1b:e9:2f:e5:42:bd:fa:6e:5e:a6:a0:
                    d7:c8:53:4a:bf:13:d4:0b:6f:27:d0:2a:30:c5:85:
                    e7:48:f2:d5:e8:9b:26:dd:71:b1:94:fb:c8:ae:04:
                    4a:88:13:ab:09:cf:3a:5a:af:91:d1:67:31:20:33:
                    d5:96:47:8b:7e:a0:a1:70:c7:0a:53:33:9b:ad:a0:
                    e6:67:dc:4a:3c:9c:20:97:ab:b8:14:08:1a:d0:2c:
                    e8:43:18:d9:58:bb:2e:c4:e8:39:fa:a8:25:f7:ef:
                    a8:11:48:3b:38:b2:50:36:b5:24:c1:aa:66:81:df:
                    89:ee:2a:a0:48:38:9e:3f:49:d6:93:27:3f:84:f9:
                    ef:41:57:89:e4:05:a0:27:9b:8d:33:2d:fa:07:99:
                    da:03:53:6a:90:21:13:c4:74:7d:86:82:1b:84:db:
                    27:f9:30:f3:81:f4:15:8b:34:f7:44:70:c8:ae:3b:
                    74:d5:3f:e8:5f:ac:71:4c:be:7d:70:a3:90:c0:84:
                    bb:01:35:b6:4f:47:b8:36:ee:ec:41:71:a8:c6:5a:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5B:3A:2B:6D:65:44:68:AE:2E:48:51:6F:0C:7E:96:A1:70:E0:DA
            X509v3 Authority Key Identifier:
                keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:66:7c:e7:0c:33:23:8c:8b:5d:88:2f:01:4f:09:74:20:82:
         c6:5c:a8:35:b6:66:75:a1:e9:ea:c0:52:4d:1d:6e:08:84:e6:
         28:4f:da:a9:14:7e:fa:ce:d2:95:c4:d7:62:f4:fe:41:9b:f4:
         00:9e:bf:13:ac:89:44:16:16:b5:69:d8:df:77:8e:bc:9f:21:
         d6:b3:e0:96:82:22:7d:d6:e7:3e:26:c8:69:4c:4f:9b:de:83:
         ab:fe:8d:62:dd:c0:14:b8:01:49:d9:c2:fb:20:a7:18:4f:28:
         10:54:40:15:8c:86:8e:d9:28:79:4c:cd:66:01:52:8d:66:85:
         cd:01:39:03:a9:1c:6e:5f:e0:38:b4:73:22:ff:73:f3:33:9e:
         ed:d2:dd:e5:92:dc:d3:24:86:95:46:55:d8:98:64:d3:66:7c:
         79:0c:ca:78:6d:d3:c7:66:a6:08:40:3b:21:1c:c9:cc:62:29:
         e9:6c:62:13:34:e4:c1:c2:58:58:f6:10:fe:53:8c:aa:98:a0:
         7d:1f:3e:6e:23:b7:29:c5:b1:b8:ae:68:3a:73:4d:29:72:c2:
         92:fc:b0:cd:f1:b4:db:77:70:c6:a8:c8:34:24:46:1b:dd:da:
         c8:10:9e:98:5c:8f:c3:b2:18:52:07:53:95:31:26:17:17:16:
         a0:2a:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 21:03:07 2025 by rpki-client