Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa
File:                     34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          blBYZ0kleIWcb29ZG12+UlLmpn1Y3biO1wi140oHSHc=
Subject key identifier:   9D:19:B1:CF:BB:69:10:6D:13:8F:15:83:55:35:02:85:29:9E:E4:AB
Certificate issuer:       /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial:       6E04F09C039D7CB8B6D75367B5032DB783F74C08
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 19 Aug 2025 20:06:22 +0000
ROA not before:           Tue 19 Aug 2025 20:01:22 +0000
ROA not after:            Tue 18 Aug 2026 20:06:22 +0000
asID:                     262503
IP address blocks:        45.181.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:04:f0:9c:03:9d:7c:b8:b6:d7:53:67:b5:03:2d:b7:83:f7:4c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
        Validity
            Not Before: Aug 19 20:01:22 2025 GMT
            Not After : Aug 18 20:06:22 2026 GMT
        Subject: CN=9D19B1CFBB69106D138F158355350285299EE4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:cb:69:15:5e:9c:db:8c:f9:da:7e:50:12:
                    10:ef:da:de:e0:e9:e3:ed:59:8d:00:11:85:26:40:
                    ec:f0:fa:b5:18:4e:bf:49:90:11:a4:78:02:d3:1d:
                    95:a9:73:a4:9a:87:8d:b8:b6:2a:e0:7d:a7:3d:65:
                    3e:10:8d:aa:30:d5:86:49:2e:b0:5f:79:2f:02:3b:
                    bf:c4:90:1b:54:38:1b:fc:0d:4d:ca:14:4b:64:bc:
                    54:3d:aa:da:77:71:74:33:9c:a4:17:23:19:38:22:
                    7a:1e:dc:e9:2b:6b:ac:9f:b1:ab:7c:ac:a6:c5:78:
                    17:15:15:68:62:3a:eb:70:b5:fd:0c:88:d6:01:5a:
                    6f:85:79:0b:44:3a:3e:95:40:c0:33:8e:3e:a3:25:
                    2c:6d:0c:c6:3f:4e:db:0b:99:c2:9f:83:c9:8d:91:
                    d2:a5:92:c4:68:bb:51:9a:2e:80:0e:80:e5:45:3c:
                    4b:66:27:86:19:d3:8f:ce:9d:65:e7:71:09:82:ea:
                    07:2c:58:3c:a3:d2:ba:fc:e5:eb:63:6c:7d:96:75:
                    5c:c5:53:dd:cf:c2:5c:a4:b8:14:4d:b1:29:91:89:
                    ad:dc:01:31:23:2d:05:6a:3e:6f:52:f2:9b:cd:f1:
                    97:00:33:0c:b3:0a:4f:aa:92:b0:62:db:74:df:ad:
                    98:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:19:B1:CF:BB:69:10:6D:13:8F:15:83:55:35:02:85:29:9E:E4:AB
            X509v3 Authority Key Identifier:
                keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:88:56:20:23:33:8e:fe:bf:a5:ac:58:9e:8d:a8:43:24:48:
         e0:bf:1a:af:96:64:f0:4a:3c:75:28:d3:08:17:c7:07:27:f5:
         91:e7:a0:9f:1a:c3:88:6c:d4:d1:a9:85:e8:6a:25:00:f5:85:
         2e:82:37:f6:2e:98:a5:e2:68:2d:10:09:33:a6:e6:34:03:f4:
         da:6f:96:d2:29:26:8e:42:d5:52:c9:31:14:56:53:ac:ff:d5:
         61:6e:e1:67:73:21:49:94:e9:d3:0f:ba:17:27:29:e0:96:5f:
         7d:4d:f4:7e:70:e8:45:5d:c8:14:c9:5c:77:84:a0:4d:2d:8c:
         67:73:7a:aa:6c:0b:04:8b:07:84:28:c5:6e:ce:e3:cd:a9:b6:
         f2:aa:64:de:7b:5e:c6:2d:04:28:71:df:a8:60:80:df:4f:11:
         3e:a0:cd:ae:92:74:9f:5c:96:5c:f3:15:7f:ec:17:aa:e2:34:
         b5:7b:89:51:9e:28:0c:c4:42:e1:3a:a1:21:83:27:23:f9:8e:
         14:a5:b0:c4:5c:46:97:c5:06:28:73:37:63:51:ab:a4:1e:98:
         9f:1b:e1:79:35:fc:58:ce:af:68:3e:3c:46:a0:6c:aa:73:55:
         d8:9d:52:5a:87:4d:cb:fe:65:d6:79:55:6d:f1:52:38:3d:10:
         2e:65:59:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:24:11 2025 by rpki-client