Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/34352e3137372e3137322e302f32332d3233203d3e20323639303338.roa
File:                     34352e3137372e3137322e302f32332d3233203d3e20323639303338.roa (raw, json)
Hash identifier:          Ay9+Vgrpi+2tLfUUBwOqmdyaOtiUmgoqrmGiikRBtBQ=
Subject key identifier:   6B:06:DA:A2:86:3E:15:EB:1E:19:47:79:38:92:80:ED:D5:88:49:7B
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       30D5A2AC0F9E818952E10BEF5D3B3152CEDAB026
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/34352e3137372e3137322e302f32332d3233203d3e20323639303338.roa
Signing time:             Mon 05 May 2025 13:04:21 +0000
ROA not before:           Mon 05 May 2025 12:59:21 +0000
ROA not after:            Mon 04 May 2026 13:04:21 +0000
asID:                     269038
IP address blocks:        45.177.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d5:a2:ac:0f:9e:81:89:52:e1:0b:ef:5d:3b:31:52:ce:da:b0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: May  5 12:59:21 2025 GMT
            Not After : May  4 13:04:21 2026 GMT
        Subject: CN=6B06DAA2863E15EB1E194779389280EDD588497B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:04:99:f8:a7:f2:a8:74:df:3d:62:ec:39:
                    63:0c:29:f2:12:2a:c8:32:55:ae:2e:a7:f4:61:93:
                    d7:5d:09:1a:40:a1:66:0e:c2:02:62:45:75:72:04:
                    57:8f:b0:5a:4f:e3:3b:e7:d6:91:76:c6:c1:7b:b9:
                    72:9b:55:4e:32:2b:27:63:d9:77:17:0a:cb:8e:bc:
                    da:49:61:c8:2b:87:e7:e1:4c:8f:97:d7:75:ad:cd:
                    49:02:ee:43:a7:7a:0c:7a:5c:3f:b2:e9:dd:a5:fe:
                    ea:27:6a:0c:52:f4:03:e5:9a:f4:13:18:46:9e:8d:
                    04:75:90:67:14:d7:35:c6:c9:65:3b:b0:cd:29:c3:
                    dd:d3:0e:08:ac:25:5c:2c:84:79:7b:4e:c5:c2:4f:
                    86:0d:4c:55:75:59:ea:07:16:e7:a2:a1:64:e9:ac:
                    11:4a:77:53:21:d6:eb:34:d4:00:5a:e8:50:da:6d:
                    ce:2c:77:52:5a:32:63:02:4d:8a:96:08:5f:52:48:
                    bc:9e:82:02:3f:5a:47:41:2c:d7:68:83:29:7f:5d:
                    6d:f4:4e:5c:5d:84:df:a0:52:7c:14:50:8b:5a:0c:
                    0b:09:fd:12:81:95:ed:b0:08:f9:af:12:ae:70:c4:
                    da:70:b3:c9:16:b1:1d:cf:50:fa:6d:a9:d4:2e:73:
                    12:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:06:DA:A2:86:3E:15:EB:1E:19:47:79:38:92:80:ED:D5:88:49:7B
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/34352e3137372e3137322e302f32332d3233203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:2d:9b:2d:9e:00:30:f8:09:0e:e7:78:0f:ac:f6:80:b1:
         19:19:3d:96:f4:01:0c:79:11:41:bc:30:ed:9f:00:d6:93:d4:
         49:ea:85:63:e7:87:ae:33:af:8d:35:51:40:61:03:aa:5c:24:
         4d:d1:e8:f4:f1:53:80:69:e2:af:f0:99:cb:6f:94:eb:4b:1d:
         eb:c0:57:76:6c:37:f6:3e:a9:b1:89:97:06:38:cf:b8:51:06:
         8e:41:1d:a5:e7:19:a6:3e:0b:42:c2:53:15:f6:2f:06:57:ff:
         21:34:73:cd:36:64:7e:af:38:10:b4:bd:a1:6b:c6:52:4a:fa:
         1a:6f:5f:ed:02:23:52:e7:94:c5:44:f3:4b:70:6b:69:69:b0:
         5f:76:a4:46:84:3e:f5:da:c5:ec:12:f2:28:54:a4:88:f7:a8:
         a4:c1:90:cd:89:96:87:be:01:01:44:de:19:e4:4d:64:3f:44:
         0b:8a:b9:ee:94:93:22:d7:91:e2:bd:52:e8:6f:27:e2:2c:06:
         79:47:38:9d:48:cd:ff:73:f2:82:c7:98:a7:eb:93:64:98:05:
         46:f9:e7:40:dd:75:ed:d6:22:b9:36:3f:b8:24:05:8b:fc:11:
         04:aa:b6:cd:a5:69:2e:cf:33:ed:d1:de:73:b5:bb:a2:ae:ca:
         cf:43:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:49 2025 by rpki-client