Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32342d3234203d3e20323636313532.roa
File:                     34352e362e33362e302f32342d3234203d3e20323636313532.roa (raw, json)
Hash identifier:          lLWOxNktTRu3hG7MEUYdHWwzXSP3r3ieBO2RUIA0I74=
Subject key identifier:   CE:31:79:6F:BB:31:8D:69:58:06:FF:21:AE:FC:D2:E7:11:6C:DC:6C
Certificate issuer:       /CN=0D1F0EF9B6879F5981F0279711EDA3C940B65CC9
Certificate serial:       7CC7C18F00B215556B937EC18C9D761628F98F1A
Authority key identifier: 0D:1F:0E:F9:B6:87:9F:59:81:F0:27:97:11:ED:A3:C9:40:B6:5C:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32342d3234203d3e20323636313532.roa
Signing time:             Mon 08 Sep 2025 11:42:18 +0000
ROA not before:           Mon 08 Sep 2025 11:37:18 +0000
ROA not after:            Mon 07 Sep 2026 11:42:18 +0000
asID:                     266152
IP address blocks:        45.6.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.crl
                          rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 16:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c7:c1:8f:00:b2:15:55:6b:93:7e:c1:8c:9d:76:16:28:f9:8f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1F0EF9B6879F5981F0279711EDA3C940B65CC9
        Validity
            Not Before: Sep  8 11:37:18 2025 GMT
            Not After : Sep  7 11:42:18 2026 GMT
        Subject: CN=CE31796FBB318D695806FF21AEFCD2E7116CDC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:61:d0:a7:fc:21:8f:be:89:4a:c8:7a:45:
                    0a:06:ab:1a:f5:6c:c2:b3:a6:82:5c:2b:05:3a:fe:
                    bb:ca:df:8a:79:8e:92:d0:8f:60:ab:fb:ed:44:45:
                    13:d3:7a:09:59:d7:e1:fd:d3:a0:9b:13:05:22:95:
                    48:f5:d5:e5:22:34:83:e1:ff:26:11:13:ee:fb:11:
                    dd:d2:4d:87:9e:1d:1e:cc:38:c7:84:fe:f0:cb:b7:
                    a6:09:76:68:56:9a:30:d8:d6:ae:08:c4:6f:48:cb:
                    c2:f0:94:f4:90:9f:91:94:96:eb:69:69:ae:6d:3c:
                    e1:e3:66:97:2f:38:57:d4:45:61:c8:7c:69:a3:b4:
                    e1:39:17:42:66:cb:b1:15:43:f1:9d:06:99:b5:2c:
                    0d:bc:11:aa:1d:79:45:81:e4:c9:5e:c6:c4:de:fc:
                    21:19:1a:4c:86:e0:e1:e5:94:70:34:fb:f1:71:7c:
                    e8:61:7f:19:a8:e1:a7:9c:57:b3:23:0f:43:6b:35:
                    0e:23:00:56:68:d9:82:00:60:52:f2:8d:b0:5a:68:
                    0f:a7:e0:8c:e7:72:36:00:4f:28:b9:d3:1f:d9:c1:
                    79:c2:e5:9c:50:3d:9c:5e:d5:43:c2:c8:b5:4e:04:
                    7b:f5:af:65:c5:c4:15:a1:c5:d8:55:41:e8:ec:e9:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:31:79:6F:BB:31:8D:69:58:06:FF:21:AE:FC:D2:E7:11:6C:DC:6C
            X509v3 Authority Key Identifier:
                keyid:0D:1F:0E:F9:B6:87:9F:59:81:F0:27:97:11:ED:A3:C9:40:B6:5C:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32342d3234203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:ae:5c:67:29:0e:43:2f:05:be:4c:ee:c5:0a:d3:29:2a:
         1e:0c:45:1e:34:34:fe:e2:0d:c6:fd:53:ae:43:b9:24:7f:2d:
         b9:4f:23:9c:f9:81:3e:0f:28:a9:16:7d:0c:70:19:25:18:06:
         5b:e3:81:01:68:aa:6a:77:8a:4b:0c:09:94:5a:f7:14:b6:dc:
         08:22:0b:61:78:c9:58:56:6f:1e:6a:17:96:77:4a:25:56:7d:
         5a:01:2c:fb:75:6e:4e:e2:ae:60:83:93:65:e6:81:1d:7a:d0:
         6a:c3:64:5b:22:e9:98:5e:36:d9:99:51:7d:38:e3:14:3e:a7:
         aa:4a:af:cd:b8:0a:b1:10:ff:ab:81:fb:7c:94:ef:e6:d9:cc:
         92:19:02:65:5a:8f:fa:4f:3d:e3:ff:81:94:76:5f:38:b2:55:
         b6:1a:ae:55:31:90:a1:4f:df:56:80:d6:18:c2:5d:8c:48:bf:
         c4:0e:7a:df:7a:67:cb:5c:3e:d2:4c:aa:3f:61:f1:96:b6:8e:
         19:49:4b:07:c6:f1:74:0c:90:b0:30:d7:97:4c:24:fd:60:62:
         a7:6e:bc:38:68:b5:69:23:bb:2e:00:1b:60:4e:f6:01:4a:fa:
         bb:00:01:13:a0:a3:aa:47:96:9c:bf:fd:30:23:02:72:1f:95:
         7f:9c:27:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:23:56 2025 by rpki-client