Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/34352e3233382e3133362e302f32322d3234203d3e20323632353837.roa
File:                     34352e3233382e3133362e302f32322d3234203d3e20323632353837.roa (raw, json)
Hash identifier:          7kvJzb55F3f5GZfLEG1iWUD1xMmUJj6mRic/pFKcjH4=
Subject key identifier:   58:20:3A:83:D5:B6:E4:37:9F:7C:30:AE:FD:F9:0F:46:2E:65:4F:12
Certificate issuer:       /CN=5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569
Certificate serial:       6AC412C214BCC7E4C539C8E45DB59BE3A9CD3351
Authority key identifier: 5F:D4:E6:E1:ED:FB:75:29:B3:E6:62:21:5D:DD:A6:DA:02:6A:25:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/34352e3233382e3133362e302f32322d3234203d3e20323632353837.roa
Signing time:             Wed 06 Aug 2025 18:48:23 +0000
ROA not before:           Wed 06 Aug 2025 18:43:23 +0000
ROA not after:            Wed 05 Aug 2026 18:48:23 +0000
asID:                     262587
IP address blocks:        45.238.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.crl
                          rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 21:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c4:12:c2:14:bc:c7:e4:c5:39:c8:e4:5d:b5:9b:e3:a9:cd:33:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569
        Validity
            Not Before: Aug  6 18:43:23 2025 GMT
            Not After : Aug  5 18:48:23 2026 GMT
        Subject: CN=58203A83D5B6E4379F7C30AEFDF90F462E654F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:42:33:73:38:ed:a9:6e:21:ca:62:28:6d:
                    fb:84:08:43:56:a2:6e:84:ac:2f:2e:48:1a:03:c9:
                    77:8c:3e:3c:7b:87:10:9e:43:b4:4d:98:85:56:d5:
                    c5:04:4d:da:d8:ec:66:b7:3a:ad:4d:56:4e:79:27:
                    88:41:7a:4c:d0:e3:04:18:6a:df:c5:bd:52:a5:1a:
                    b5:b7:b1:07:11:88:eb:d5:ff:a0:46:16:9a:ef:8f:
                    74:6f:2a:1f:ec:07:5d:45:4f:3d:bb:54:4a:25:2d:
                    fd:69:40:7b:6f:d3:8c:e1:dd:d9:61:be:d5:2d:a7:
                    d9:d7:05:b2:88:6c:c3:bd:ca:10:6d:b9:58:02:a4:
                    4c:0a:40:b6:06:1f:76:6b:93:cd:6b:ca:80:ad:5a:
                    6e:e3:dd:51:a0:19:e0:44:0a:39:bc:60:3b:69:c5:
                    9a:14:79:b5:39:7a:08:1f:4b:f3:dc:ee:83:64:b8:
                    da:06:f8:1f:cd:95:59:5f:d8:2e:21:1e:54:db:6d:
                    d8:05:09:22:24:c4:24:7d:70:c0:09:37:5e:70:f4:
                    dd:db:fe:cd:24:cf:6e:0d:48:2f:be:89:56:c2:c6:
                    ca:ea:bd:3c:e8:55:49:5e:07:b4:4f:f3:af:84:5c:
                    a5:b6:9a:61:41:05:c3:b9:14:c6:02:46:fe:96:0c:
                    f5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:20:3A:83:D5:B6:E4:37:9F:7C:30:AE:FD:F9:0F:46:2E:65:4F:12
            X509v3 Authority Key Identifier:
                keyid:5F:D4:E6:E1:ED:FB:75:29:B3:E6:62:21:5D:DD:A6:DA:02:6A:25:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/34352e3233382e3133362e302f32322d3234203d3e20323632353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:68:7b:be:4f:45:8c:13:62:ae:6a:40:90:81:63:c6:11:23:
         af:7e:74:dc:15:88:37:cf:f0:b3:51:b6:f0:09:da:e2:df:9e:
         db:6e:b2:98:e7:37:af:2f:a4:b5:40:e4:34:7c:1c:b5:73:5d:
         ca:cf:cb:39:2b:02:95:0d:65:c8:d0:6f:04:d8:23:a0:80:3e:
         07:2b:4d:6c:b2:a7:ad:be:b2:40:6b:61:50:85:f6:00:c0:24:
         1d:21:0f:13:0c:25:e7:4c:e3:2b:f0:5c:c3:33:67:55:03:c1:
         a6:cb:b9:1b:4a:a4:95:e4:6f:c6:aa:03:37:a7:a0:db:cc:26:
         69:37:bf:6b:39:00:7b:1f:92:08:50:fd:f6:ea:00:03:d5:54:
         f0:7f:23:05:3a:e2:f3:ee:a4:b8:fb:82:5a:7e:ab:8e:af:8f:
         fb:a8:ab:56:d0:b4:c5:46:cd:26:71:3c:90:c2:5d:95:4b:a2:
         f4:80:a4:a4:51:1f:77:5a:fe:33:94:31:46:39:1f:79:1d:76:
         00:3b:26:13:1d:64:2c:43:41:6f:e8:c6:44:65:66:e7:10:38:
         1c:1d:c4:3f:29:2d:b9:f4:14:f3:69:47:0a:bc:d5:ca:b2:60:
         04:ad:25:1b:a6:16:e9:f0:dc:b7:88:8b:42:03:a8:7e:99:a0:
         df:9a:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:59:33 2025 by rpki-client