Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3138362e39322e302f32342d3234203d3e20323638313833.roa
File:                     34352e3138362e39322e302f32342d3234203d3e20323638313833.roa (raw, json)
Hash identifier:          d/SIiWYDTCdfpDzkwCwhavyT5CFLWN+IbJsBkxLqR0c=
Subject key identifier:   68:3E:FA:85:78:9F:E1:64:7C:57:C2:F4:D1:3B:DF:CF:C6:AF:1F:D2
Certificate issuer:       /CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
Certificate serial:       3E788382B78523C327D4C476CE659869549538A7
Authority key identifier: 43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3138362e39322e302f32342d3234203d3e20323638313833.roa
Signing time:             Fri 23 May 2025 18:48:27 +0000
ROA not before:           Fri 23 May 2025 18:43:27 +0000
ROA not after:            Fri 22 May 2026 18:48:27 +0000
asID:                     268183
IP address blocks:        45.186.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl
                          rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 09:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:78:83:82:b7:85:23:c3:27:d4:c4:76:ce:65:98:69:54:95:38:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
        Validity
            Not Before: May 23 18:43:27 2025 GMT
            Not After : May 22 18:48:27 2026 GMT
        Subject: CN=683EFA85789FE1647C57C2F4D13BDFCFC6AF1FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:53:df:5f:c3:11:ff:5a:61:5a:41:9b:0a:
                    ce:70:d7:11:9d:77:41:78:16:10:d0:1b:6a:f0:83:
                    d8:0f:95:c8:07:7b:06:3f:9c:4b:00:4c:2b:ef:5f:
                    2e:75:d9:93:36:fb:19:8a:85:0d:20:8f:98:fa:d8:
                    1b:86:b9:2b:50:2e:92:46:37:fb:37:f4:94:3e:47:
                    06:9a:04:e7:82:1e:57:d4:f6:71:17:af:b2:94:47:
                    3b:06:a2:a2:ae:35:53:e7:67:e3:7a:ca:b8:11:34:
                    40:9e:ca:6c:e1:62:ea:22:d9:2b:dc:19:b2:bf:48:
                    5f:cc:05:31:54:99:04:aa:ac:d7:6f:c5:ab:d3:2b:
                    48:e6:8c:2b:06:84:ad:b9:70:f1:63:fb:01:ea:ea:
                    db:f7:ad:9f:13:06:9e:28:4f:74:b5:c5:3d:64:ff:
                    b4:3c:1d:d5:90:7c:14:d7:67:65:48:ae:aa:87:1b:
                    ce:3e:25:56:0d:74:61:ee:3a:59:a5:6e:1e:0c:30:
                    37:68:53:36:95:69:91:6b:15:7a:4a:85:3c:b0:36:
                    08:1b:51:24:ec:f9:9f:f8:b4:80:6b:ab:55:1d:3b:
                    98:47:82:07:0c:e1:eb:38:b8:fa:59:46:e5:45:05:
                    c1:2c:98:6c:f6:b2:6c:02:28:f3:79:38:54:e5:9b:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3E:FA:85:78:9F:E1:64:7C:57:C2:F4:D1:3B:DF:CF:C6:AF:1F:D2
            X509v3 Authority Key Identifier:
                keyid:43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3138362e39322e302f32342d3234203d3e20323638313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:5f:bd:e3:a5:d8:f1:a8:85:fb:b5:f1:97:a7:08:7c:9b:e9:
         9f:9e:94:02:a9:b5:a4:18:b1:29:77:56:ae:1b:5d:48:f6:ab:
         31:eb:c4:c2:34:46:19:e1:5f:fc:d9:17:82:c8:0c:e4:41:90:
         e4:d9:68:2b:2e:94:e3:37:0b:a4:a1:e5:f1:10:5d:71:9e:92:
         2b:bb:d8:31:f4:22:a7:c6:03:74:4f:37:cd:6b:a5:40:14:a7:
         1d:ad:8d:28:71:8b:44:69:17:80:b8:8a:f8:c5:f4:96:3b:88:
         47:fb:b0:01:c3:35:ae:df:49:d1:03:30:3c:52:07:b5:d7:c6:
         20:1e:dc:ed:34:ba:81:9b:06:ac:cb:fb:14:4b:4d:41:32:00:
         60:44:cb:f0:19:b2:6e:bb:6f:c1:ca:ac:7f:21:b1:b1:85:d0:
         69:29:9e:ec:ca:56:67:10:22:cc:51:9e:45:d0:ab:72:d3:65:
         6b:1e:f7:61:b9:d1:84:e1:a3:e3:09:48:00:79:28:7d:88:00:
         f6:3e:07:27:da:c6:78:95:0b:f1:d2:71:c8:df:5f:ba:df:75:
         9c:d8:85:4b:64:f2:58:1e:3e:33:98:32:5e:3e:59:8c:1a:37:
         ee:20:de:f9:23:26:40:b9:49:c0:a9:4d:8a:58:3a:c0:5e:9f:
         be:14:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:17:59 2025 by rpki-client