Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36352e302f32342d3234203d3e20323639353238.roa
File:                     34352e3138372e36352e302f32342d3234203d3e20323639353238.roa (raw, json)
Hash identifier:          1dWTEVip5rJMxAJY3MvVnEePwaw2qNkxhQqE71H4DUs=
Subject key identifier:   CF:12:F5:C4:69:68:2B:E4:8E:04:BD:F6:43:6F:D5:8B:CF:24:F6:E0
Certificate issuer:       /CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
Certificate serial:       73E314281D17FBDF8A03CDDC1DF32CB028B1AC27
Authority key identifier: 4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36352e302f32342d3234203d3e20323639353238.roa
Signing time:             Mon 02 Jun 2025 11:26:39 +0000
ROA not before:           Mon 02 Jun 2025 11:21:39 +0000
ROA not after:            Mon 01 Jun 2026 11:26:39 +0000
asID:                     269528
IP address blocks:        45.187.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl
                          rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 02:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e3:14:28:1d:17:fb:df:8a:03:cd:dc:1d:f3:2c:b0:28:b1:ac:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
        Validity
            Not Before: Jun  2 11:21:39 2025 GMT
            Not After : Jun  1 11:26:39 2026 GMT
        Subject: CN=CF12F5C469682BE48E04BDF6436FD58BCF24F6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:56:ce:53:cc:f5:49:3d:02:fa:8e:04:1c:
                    e7:fa:b4:1a:39:5c:88:9d:97:f5:c2:fb:3d:98:0d:
                    2e:6b:01:80:a7:2b:33:0c:a3:f9:49:28:9e:b9:07:
                    cd:2f:af:85:a7:af:45:f3:d0:20:a3:0a:81:c2:94:
                    08:37:f4:d9:27:ac:01:03:ac:78:82:29:0b:1a:22:
                    c1:ce:a3:fd:cc:c5:f5:d0:32:34:bf:85:6d:8f:cb:
                    26:de:ee:14:bc:f7:3f:08:0e:86:67:02:5b:53:3d:
                    79:17:4a:25:6e:32:4d:8b:e7:70:c0:cf:34:f2:d3:
                    ed:7c:c6:c6:3d:aa:8d:e9:1f:5d:d2:70:c9:42:b7:
                    91:8d:92:f2:2f:d5:fe:83:24:e4:56:09:be:1a:1c:
                    c7:b8:48:7f:2b:cc:26:86:8f:5c:82:a1:7a:fa:8d:
                    d2:a9:18:26:83:80:0b:36:39:fe:89:88:b0:1f:ec:
                    0c:33:f9:fd:a9:ba:05:ed:67:df:4d:6f:99:fe:2a:
                    d8:2b:a5:0d:2f:d6:66:22:c2:e3:a2:74:13:5e:6f:
                    32:4c:0c:fa:f4:57:4b:f1:67:3e:12:ea:5c:0f:39:
                    4f:a8:eb:16:55:ed:64:4c:de:de:ad:ba:71:31:f8:
                    44:6f:49:1d:57:b9:d3:97:a7:02:e7:5f:31:3d:11:
                    4b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:12:F5:C4:69:68:2B:E4:8E:04:BD:F6:43:6F:D5:8B:CF:24:F6:E0
            X509v3 Authority Key Identifier:
                keyid:4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36352e302f32342d3234203d3e20323639353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:c8:80:d8:b7:1d:2e:55:5d:fd:9f:50:c0:1e:52:e9:c1:7a:
         83:f5:4f:0b:e0:31:f2:e8:8b:12:fd:4d:7e:9f:81:0c:e0:b6:
         54:fa:60:4d:36:8d:0b:f1:f3:f2:f3:7f:f4:9c:6a:38:8a:f0:
         88:57:5e:86:b4:5f:82:09:f1:ef:48:99:f9:41:e7:23:97:08:
         31:99:5f:2f:31:e8:c2:bb:05:39:d1:9e:0f:68:2f:08:be:03:
         89:c5:1f:ae:f9:9f:3e:c2:cc:f4:8b:8a:77:c3:1a:c7:bf:06:
         91:ad:8b:8a:89:39:f5:97:d5:4f:b8:ff:e4:c1:30:1c:5d:6e:
         0f:8e:75:7a:77:d7:1c:af:70:b3:9f:25:b5:f4:e0:49:d7:b7:
         0c:59:2e:23:74:27:5c:33:ac:c3:f6:42:68:53:db:1e:48:4c:
         5e:10:7b:20:9e:2b:78:c1:46:7b:9b:4f:8f:02:c8:fa:3f:ae:
         f8:06:a5:a7:93:80:b9:2c:d6:aa:bf:6d:38:01:50:0f:02:9d:
         15:4c:f4:b9:95:62:0d:04:e3:3d:e3:b9:0f:e5:ff:b2:67:73:
         ac:ba:0a:48:b2:3f:1b:fc:67:ae:10:f7:32:38:41:99:05:56:
         6b:db:27:37:10:33:71:9b:1e:89:6c:06:1a:5c:48:10:12:0f:
         ca:68:63:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:03:45 2025 by rpki-client