Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/34352e3137322e35362e302f32322d3234203d3e20323638373632.roa
File:                     34352e3137322e35362e302f32322d3234203d3e20323638373632.roa (raw, json)
Hash identifier:          EKOgHj4yxNdz9Y4XxGUayWrsOgR16imBpcDtkHU6BWw=
Subject key identifier:   91:CE:1D:4E:5F:D4:FB:E7:FB:AD:F6:AC:27:DE:3C:52:48:8B:69:19
Certificate issuer:       /CN=4C539A68ECE2E8F0BE8E155A0E78005044890AEC
Certificate serial:       4817647EB5C062A5263B0CF13FB2AC358C9455D4
Authority key identifier: 4C:53:9A:68:EC:E2:E8:F0:BE:8E:15:5A:0E:78:00:50:44:89:0A:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/34352e3137322e35362e302f32322d3234203d3e20323638373632.roa
Signing time:             Sat 21 Jun 2025 13:38:14 +0000
ROA not before:           Sat 21 Jun 2025 13:33:14 +0000
ROA not after:            Sat 20 Jun 2026 13:38:14 +0000
asID:                     268762
IP address blocks:        45.172.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.crl
                          rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 11:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:17:64:7e:b5:c0:62:a5:26:3b:0c:f1:3f:b2:ac:35:8c:94:55:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C539A68ECE2E8F0BE8E155A0E78005044890AEC
        Validity
            Not Before: Jun 21 13:33:14 2025 GMT
            Not After : Jun 20 13:38:14 2026 GMT
        Subject: CN=91CE1D4E5FD4FBE7FBADF6AC27DE3C52488B6919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:32:30:98:52:02:f0:34:54:2d:be:b0:ff:
                    d9:07:ce:b2:3c:7c:b2:22:a5:17:28:71:44:38:10:
                    1c:2a:20:91:90:35:34:b7:46:f6:72:b4:8c:ae:e0:
                    11:5e:85:33:83:50:a2:57:36:14:56:1e:50:23:c2:
                    db:96:6e:e3:3c:8e:b9:62:b1:65:5b:ee:95:7c:d8:
                    4d:a9:84:26:aa:e5:e8:8a:ca:cd:05:e9:aa:57:a6:
                    c4:78:b4:cf:9d:88:79:7f:65:a6:5f:56:82:66:fe:
                    48:10:49:ab:73:ad:5a:e4:51:5b:22:d0:32:10:fa:
                    6b:c8:08:00:59:02:46:b3:2e:c6:7c:cf:22:4e:89:
                    2a:9e:f7:08:e1:33:bc:24:09:a3:86:c6:8c:98:7a:
                    c8:19:24:14:f7:da:a8:23:5a:2a:7e:ae:3c:bd:d5:
                    b7:22:f2:60:81:01:43:52:1a:6f:31:14:1d:16:4d:
                    82:e3:9d:0f:34:6f:08:99:71:4d:68:1d:4d:38:a0:
                    f7:f5:8c:cd:61:6d:3d:1a:64:18:ae:42:9a:aa:c3:
                    6f:31:90:85:73:2d:fe:d3:3d:1e:11:ed:0e:01:b0:
                    9c:5d:c8:63:f2:7f:fd:3c:c2:c4:f3:30:ff:43:f9:
                    a2:76:5d:95:d1:cf:70:9d:83:a6:f5:2b:1f:b6:44:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CE:1D:4E:5F:D4:FB:E7:FB:AD:F6:AC:27:DE:3C:52:48:8B:69:19
            X509v3 Authority Key Identifier:
                keyid:4C:53:9A:68:EC:E2:E8:F0:BE:8E:15:5A:0E:78:00:50:44:89:0A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/34352e3137322e35362e302f32322d3234203d3e20323638373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:a0:57:c1:60:8f:38:db:4a:a6:d9:00:7c:25:28:b1:74:14:
         e6:17:16:e4:a7:8d:95:8b:a2:1a:46:5c:59:7b:cf:8e:51:ca:
         99:62:56:01:3e:51:58:83:88:90:ae:f7:32:b3:9e:64:64:75:
         96:69:42:a5:11:8f:f2:63:d9:91:95:b2:d1:83:1e:35:f5:91:
         79:23:0a:87:3c:33:e5:52:56:a7:30:38:0a:ca:d3:af:e6:dd:
         e1:d0:61:20:00:8e:97:42:a2:6b:a5:93:88:8a:ec:86:2b:49:
         df:c4:42:aa:03:b4:25:1e:0e:c8:29:ee:ce:5e:7e:55:e7:f6:
         3c:11:d1:22:56:de:ab:73:a3:cc:8b:d3:ed:c1:08:5c:cd:e7:
         c6:b9:f1:b7:68:72:a9:35:d6:2a:d5:f9:49:bc:86:f3:30:43:
         e4:4c:5f:87:d4:80:6d:2f:54:1a:39:ee:60:c9:02:5a:93:f9:
         f8:0a:8a:7d:99:b7:e6:ee:b6:b5:70:14:11:f5:1d:c4:ca:29:
         2d:aa:59:d5:56:47:09:ba:ba:95:7d:ec:3e:3e:bc:e4:e2:84:
         78:3a:86:d7:6a:ff:8a:d2:a1:2d:b9:9f:6e:7d:63:ac:ef:0e:
         f2:40:ed:a8:7f:b2:8b:87:a4:dc:e7:fe:d7:46:eb:33:c1:a6:
         75:12:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:17:51 2025 by rpki-client