Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa
File:                     34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa (raw, json)
Hash identifier:          Bhcl4QNuIisUlCDdMxjaHBjL1Vsw0/XGrDgzWErfU/o=
Subject key identifier:   13:A0:ED:05:99:DE:8E:05:DB:93:BC:C1:A9:7D:98:21:86:AE:7D:31
Certificate issuer:       /CN=DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035
Certificate serial:       763D3FC517A4434A4D1C09DCD57C2C85F02F1CBA
Authority key identifier: DE:4E:C8:FB:8E:4B:9C:58:3B:69:BD:B5:0F:52:7D:D6:B5:9E:80:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa
Signing time:             Thu 14 Aug 2025 12:44:13 +0000
ROA not before:           Thu 14 Aug 2025 12:39:13 +0000
ROA not after:            Thu 13 Aug 2026 12:44:13 +0000
asID:                     268993
IP address blocks:        45.177.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.crl
                          rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3d:3f:c5:17:a4:43:4a:4d:1c:09:dc:d5:7c:2c:85:f0:2f:1c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035
        Validity
            Not Before: Aug 14 12:39:13 2025 GMT
            Not After : Aug 13 12:44:13 2026 GMT
        Subject: CN=13A0ED0599DE8E05DB93BCC1A97D982186AE7D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:c3:89:df:84:f5:d9:72:b6:0e:d1:a6:33:
                    7d:88:ed:7a:4e:78:4c:79:60:3d:a1:9e:ee:4a:06:
                    a5:e1:98:07:06:1e:23:f8:27:22:61:65:75:a8:e9:
                    a5:7e:a7:af:60:f9:4f:8b:b8:84:7c:2d:95:1e:e8:
                    df:b6:32:4b:03:ca:2c:04:bd:22:c9:8a:20:d9:50:
                    c9:36:6c:bc:98:c0:89:24:89:83:8a:85:75:f5:ac:
                    4d:ac:11:8f:17:d7:aa:59:4e:f2:22:c4:b3:30:4d:
                    91:7c:39:44:04:80:be:90:96:2e:31:04:9b:9b:5e:
                    d4:5f:30:70:c9:36:9d:9f:62:76:fa:e9:81:24:ff:
                    b3:25:51:67:bf:83:c3:74:f2:29:a1:85:ba:c7:44:
                    b6:14:27:88:0c:57:b4:3f:97:ec:e7:1a:ea:f4:d8:
                    ae:91:60:4e:20:3a:b2:88:54:2d:cd:ce:fc:c3:17:
                    af:a1:71:14:f6:0a:bf:bc:43:ac:af:c3:dd:07:8e:
                    1a:24:1c:59:24:27:1f:e1:2a:c0:5f:9e:7d:eb:c4:
                    af:d4:16:c1:cd:97:b0:f8:69:16:d9:21:1c:0b:85:
                    e8:2c:2b:a8:3d:94:85:4e:b0:76:eb:4d:da:f3:cd:
                    f6:73:32:ae:50:70:98:52:6c:5d:a4:3f:93:1e:a7:
                    ab:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A0:ED:05:99:DE:8E:05:DB:93:BC:C1:A9:7D:98:21:86:AE:7D:31
            X509v3 Authority Key Identifier:
                keyid:DE:4E:C8:FB:8E:4B:9C:58:3B:69:BD:B5:0F:52:7D:D6:B5:9E:80:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:bd:17:17:12:d0:d0:bb:2f:b5:1d:79:21:2c:68:dd:50:50:
         ed:43:2d:bd:8e:f5:57:72:ab:03:1f:93:77:02:e0:9c:6c:09:
         07:a7:95:e5:78:d9:0c:3c:b2:2b:18:2b:c9:25:9f:77:e9:14:
         76:6a:be:08:71:08:66:fe:f8:24:f5:61:06:c9:e3:10:b3:0c:
         71:10:1d:c3:c2:9c:5f:06:01:ee:af:da:04:80:88:e6:a1:db:
         b4:69:5b:cf:c8:be:88:88:5b:58:d5:77:66:15:23:ab:7f:12:
         29:9c:4d:ce:6e:f9:1f:44:fe:5f:84:d6:44:98:fa:b0:f1:f5:
         2b:a1:4c:c1:d8:f0:15:87:04:62:d9:d7:da:df:68:e5:80:8d:
         8c:a6:95:11:2d:e9:b5:2c:54:71:8e:72:df:05:ea:99:ff:86:
         33:63:a7:a2:7e:14:43:de:f5:6b:8b:58:b8:f3:af:53:ae:24:
         84:e3:a9:e9:07:2f:24:51:52:e1:b1:d1:e8:7f:ad:b2:f5:9a:
         49:7c:c9:cf:77:bc:93:8c:08:e5:e1:b1:d2:4d:30:b9:ad:f2:
         ed:56:cb:58:75:f5:a4:52:49:bc:b1:64:4f:8e:49:f2:6b:a9:
         ee:bf:91:3c:10:51:90:4d:25:f9:f7:24:30:ae:a9:3b:c7:73:
         f6:bd:a3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 22:34:49 2025 by rpki-client