Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32322d3232203d3e20323637393931.roa
File:                     34352e3136372e35322e302f32322d3232203d3e20323637393931.roa (raw, json)
Hash identifier:          5RWo7eIbSETfwohhTtjbMdoA7jr/Xhoyxq+cz7lGhoI=
Subject key identifier:   41:F5:86:01:B4:CE:4D:29:7F:32:F4:7C:86:7B:1C:AA:2D:D1:EA:CA
Certificate issuer:       /CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
Certificate serial:       7C41D26F21202420AFA9467EB006064131EA89D9
Authority key identifier: 18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32322d3232203d3e20323637393931.roa
Signing time:             Tue 03 Jun 2025 16:01:50 +0000
ROA not before:           Tue 03 Jun 2025 15:56:50 +0000
ROA not after:            Tue 02 Jun 2026 16:01:50 +0000
asID:                     267991
IP address blocks:        45.167.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 16:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:41:d2:6f:21:20:24:20:af:a9:46:7e:b0:06:06:41:31:ea:89:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
        Validity
            Not Before: Jun  3 15:56:50 2025 GMT
            Not After : Jun  2 16:01:50 2026 GMT
        Subject: CN=41F58601B4CE4D297F32F47C867B1CAA2DD1EACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:7b:0d:e3:2f:d2:c6:a9:d2:7c:e3:7a:2d:
                    70:e6:42:df:3e:02:5c:51:31:fa:70:a2:7f:22:c3:
                    64:41:65:a4:c7:cb:2e:a8:12:4d:67:fd:c0:df:57:
                    e8:2c:ad:28:ba:5f:20:64:e8:3b:40:27:63:02:70:
                    87:1b:55:82:70:60:8d:6b:3b:fc:75:73:d0:cb:63:
                    f2:72:b1:1d:a7:b7:72:b9:16:bb:22:ee:90:53:b9:
                    07:f3:4b:5d:0c:16:91:3e:8a:a2:6e:87:21:b1:c7:
                    d0:ed:c1:0e:a3:8f:02:2e:b9:b4:64:c6:de:97:fc:
                    09:f4:34:9b:66:12:60:2a:b6:93:c6:63:d5:60:3f:
                    44:56:43:fb:80:d0:f3:9b:b7:56:25:2d:b5:43:36:
                    5e:f0:2f:db:60:25:f0:9d:18:a3:22:12:de:95:95:
                    84:95:ad:ea:1c:70:a8:bb:40:b1:d4:05:27:98:89:
                    09:d8:e3:4d:7e:bf:b9:29:21:63:a5:35:f3:1a:a4:
                    bb:66:84:fb:09:f3:80:8e:8f:60:bf:57:fe:ea:b5:
                    43:9e:de:d5:fb:fb:f2:96:35:15:69:65:91:93:c4:
                    80:b7:b1:a0:67:55:d2:04:9b:7c:08:1b:d0:53:54:
                    4b:fe:0c:26:bb:54:7a:fb:94:99:4a:1b:66:40:a7:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F5:86:01:B4:CE:4D:29:7F:32:F4:7C:86:7B:1C:AA:2D:D1:EA:CA
            X509v3 Authority Key Identifier:
                keyid:18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32322d3232203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:23:95:b5:a2:6d:07:ad:36:6b:2f:17:7e:de:81:23:c9:1e:
         c4:f2:bd:30:88:51:87:73:1d:30:c1:aa:d4:80:5a:52:1d:6e:
         e8:82:67:c9:57:dd:85:d7:d7:96:42:64:bb:35:cc:d7:ae:28:
         fd:f2:98:ba:ad:b8:c3:f8:17:39:64:be:2d:5a:f6:43:23:d2:
         b7:be:4b:14:83:a2:1e:ee:12:94:f7:04:5d:37:0d:be:54:f5:
         3b:26:91:12:e1:2b:67:8b:47:5c:f1:50:52:fd:a2:66:e5:81:
         54:b1:23:a5:c8:e7:3c:aa:2f:d7:a0:23:91:1b:13:22:3a:6a:
         b5:f6:9b:b0:b0:66:a8:b6:2a:9a:00:2c:58:35:e1:2e:3d:c8:
         49:0d:d1:2a:23:74:65:f5:b6:1d:36:58:c2:1e:6e:cf:60:67:
         de:d3:1d:14:17:bb:94:52:76:64:5c:fe:13:e4:64:e5:24:fa:
         01:ac:f0:50:7c:f2:fb:b3:33:aa:56:bc:3d:f3:72:9c:31:07:
         af:bf:e0:90:43:9f:a4:3c:c3:45:26:af:db:25:65:7f:b4:ce:
         4b:ff:02:22:52:db:75:b8:ce:40:56:9e:d8:9a:49:9b:fb:2f:
         db:97:46:ce:42:66:83:a5:dc:40:80:ce:ce:cc:f2:7c:b1:0a:
         c4:41:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:40 2025 by rpki-client