Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3137312e32352e302f32342d3234203d3e20323638313833.roa
File:                     34352e3137312e32352e302f32342d3234203d3e20323638313833.roa (raw, json)
Hash identifier:          ppxaf1gfv0HFGEe0KHbY11vXWeC7+QQcz+W+QIoq/+c=
Subject key identifier:   6D:6E:48:DA:55:3B:D6:BA:19:7D:77:3B:5C:09:2A:C4:C1:31:77:DF
Certificate issuer:       /CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
Certificate serial:       4716B856F197592E9241151169E09D7919304737
Authority key identifier: 43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3137312e32352e302f32342d3234203d3e20323638313833.roa
Signing time:             Fri 23 May 2025 18:46:34 +0000
ROA not before:           Fri 23 May 2025 18:41:34 +0000
ROA not after:            Fri 22 May 2026 18:46:34 +0000
asID:                     268183
IP address blocks:        45.171.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl
                          rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 13:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:16:b8:56:f1:97:59:2e:92:41:15:11:69:e0:9d:79:19:30:47:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
        Validity
            Not Before: May 23 18:41:34 2025 GMT
            Not After : May 22 18:46:34 2026 GMT
        Subject: CN=6D6E48DA553BD6BA197D773B5C092AC4C13177DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:1d:ae:a7:6f:c5:fc:f5:c6:e3:b1:7d:9a:
                    f8:52:2b:95:8b:a3:c6:9a:53:5c:96:9f:cd:f1:5a:
                    f6:f4:d6:14:8f:14:6f:76:c6:56:c7:67:be:b2:fa:
                    b2:46:c4:3c:6e:8f:9f:70:90:a4:56:90:3a:7a:18:
                    41:b5:ad:de:35:eb:98:dd:04:e8:7d:3b:a3:1d:95:
                    36:e7:96:74:6e:38:12:29:59:16:ac:80:4d:b5:d4:
                    d9:db:eb:d1:90:2e:39:cb:3f:75:80:31:fd:ef:b7:
                    30:4f:8e:1f:ff:3b:ea:93:1a:87:26:a1:e9:98:34:
                    ba:bf:45:77:76:fe:99:5c:6e:67:56:1f:e5:8c:49:
                    e5:10:92:a4:00:91:3e:ce:ec:99:d1:8a:86:46:8e:
                    fb:9a:09:0b:4e:e4:bf:1f:e3:ef:59:4d:c9:f9:bf:
                    fc:9f:2b:ee:e5:1f:ce:c5:c8:4a:ad:67:fd:b7:d1:
                    34:20:98:a3:69:01:4e:c4:69:4a:7a:60:1a:cc:f1:
                    f6:57:f3:ad:12:1a:9f:48:fd:71:90:97:ee:b5:2f:
                    60:02:2d:0f:c4:8b:88:d6:6a:db:30:0c:dc:81:e7:
                    2d:37:8b:64:65:c1:ad:5d:1d:04:09:d7:7f:fb:d0:
                    9f:4d:cd:81:0c:fb:a9:d9:eb:e3:0d:32:b6:99:b1:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6E:48:DA:55:3B:D6:BA:19:7D:77:3B:5C:09:2A:C4:C1:31:77:DF
            X509v3 Authority Key Identifier:
                keyid:43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3137312e32352e302f32342d3234203d3e20323638313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:48:c9:55:ec:8b:0f:90:e9:16:24:2c:70:b9:a5:f6:46:49:
         37:32:96:b4:e0:2a:c5:03:35:01:68:14:4a:9f:2d:18:91:71:
         b4:51:98:75:98:ca:48:7c:40:e4:55:69:a6:4d:aa:16:59:ab:
         62:9f:3a:3a:6e:fa:79:b9:64:70:9b:04:34:ea:e8:b0:6c:86:
         d5:64:35:a5:4d:43:c1:b1:04:5c:e5:85:52:dd:a0:12:42:cc:
         af:55:a1:00:11:9d:7b:68:cc:19:73:b4:44:8f:f5:75:cb:2c:
         27:8c:c3:07:82:0a:06:23:68:e1:08:5f:56:05:d9:c8:88:c6:
         96:d2:80:e0:56:4f:eb:b1:c1:25:19:8b:ae:2b:79:ce:9e:fd:
         00:64:6c:86:36:bd:7f:24:6a:09:b3:4e:9f:da:fe:d8:0b:48:
         b4:f1:72:1c:b5:53:cd:c2:48:a0:ed:00:d8:63:93:7a:d3:70:
         82:8d:07:2d:c6:9b:da:a6:22:31:0a:2f:77:54:10:ad:c1:54:
         b1:51:98:69:ca:a1:f6:07:80:9f:5a:e5:02:95:19:37:52:2f:
         b4:f9:f3:32:a5:f0:e5:c3:ec:45:a6:7d:19:39:c2:ad:45:14:
         d8:d4:1c:b5:fe:0d:ba:bc:32:80:4b:46:59:f7:66:ec:b4:21:
         de:2d:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:27:56 2025 by rpki-client