Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3136382e302f32342d3234203d3e20323639353337.roa
File:                     34352e3138382e3136382e302f32342d3234203d3e20323639353337.roa (raw, json)
Hash identifier:          r8aAmuCdyWT//enPJIocqmXkWH8seETx34ogLL1ek20=
Subject key identifier:   E9:21:FE:1B:BC:0C:AE:80:53:07:B8:4B:92:43:D4:0D:DC:F9:E4:08
Certificate issuer:       /CN=94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2
Certificate serial:       30E7F48E0C66BC65B2AC73DC6F547FEAEE1C4EE9
Authority key identifier: 94:F5:D1:82:A1:AA:8D:6C:4F:E6:24:A8:F3:24:1D:6C:E5:D9:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3136382e302f32342d3234203d3e20323639353337.roa
Signing time:             Tue 22 Jul 2025 21:17:56 +0000
ROA not before:           Tue 22 Jul 2025 21:12:56 +0000
ROA not after:            Tue 21 Jul 2026 21:17:56 +0000
asID:                     269537
IP address blocks:        45.188.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.crl
                          rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 20:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e7:f4:8e:0c:66:bc:65:b2:ac:73:dc:6f:54:7f:ea:ee:1c:4e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2
        Validity
            Not Before: Jul 22 21:12:56 2025 GMT
            Not After : Jul 21 21:17:56 2026 GMT
        Subject: CN=E921FE1BBC0CAE805307B84B9243D40DDCF9E408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:56:8f:bb:e2:f2:9d:0b:2e:66:ad:b5:e7:
                    dc:d9:72:6d:36:eb:c8:8b:70:b6:d6:39:48:dc:57:
                    43:7d:86:4a:34:38:40:07:26:83:a2:bd:d7:d9:a3:
                    9b:f9:ee:33:5c:62:8e:f3:73:1c:76:ea:9b:ac:14:
                    25:25:7b:0c:32:d7:58:ae:00:f7:d7:03:6a:c3:d9:
                    59:fc:9a:b7:52:eb:41:90:f4:3f:d2:a2:36:d0:4a:
                    ec:1f:af:84:be:9f:2c:e9:e9:83:e3:ab:7a:73:41:
                    b1:b8:60:ed:b4:8f:bb:61:a2:2e:19:e5:af:25:52:
                    a8:bb:92:82:5b:1e:c7:f6:9b:50:1f:7b:e7:44:c2:
                    4c:2c:5f:64:ee:f6:8d:a4:1f:de:6a:64:a8:47:f1:
                    14:01:9b:ca:0c:6d:2e:0d:92:8b:08:48:f0:e4:75:
                    79:27:1d:47:d3:c4:ca:f6:10:4a:00:52:aa:41:24:
                    e3:c9:47:63:d3:f2:a5:7f:6f:a1:b5:d5:40:33:b2:
                    9b:a5:51:72:23:db:06:e4:ae:70:b7:91:44:0b:66:
                    26:e3:f5:20:4f:22:ef:39:56:fd:6b:05:da:70:43:
                    50:1c:76:21:83:5a:e8:a5:a5:4b:ce:1e:6c:59:53:
                    0f:91:d0:55:8c:3a:3a:c1:8e:9f:a0:0f:5c:40:42:
                    37:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:21:FE:1B:BC:0C:AE:80:53:07:B8:4B:92:43:D4:0D:DC:F9:E4:08
            X509v3 Authority Key Identifier:
                keyid:94:F5:D1:82:A1:AA:8D:6C:4F:E6:24:A8:F3:24:1D:6C:E5:D9:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3136382e302f32342d3234203d3e20323639353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:6d:e2:d2:c2:e8:02:f5:a4:a4:0d:d5:d3:4c:7d:f6:ca:29:
         c0:49:6d:11:f6:09:21:ae:ca:43:3d:b2:86:7d:83:e2:51:5c:
         68:2c:55:6c:72:11:c2:a1:f2:68:61:30:44:df:5b:2c:7d:63:
         5e:d7:dc:9f:e4:90:4e:d0:93:be:10:78:c8:1c:d0:99:44:32:
         15:8d:a0:f5:7f:c0:b6:91:54:22:b6:bd:ad:cb:cd:72:84:97:
         89:91:bb:48:d1:3b:12:81:48:06:e1:00:6d:65:d2:40:de:25:
         5c:18:b8:a9:e0:8f:21:ed:91:10:3f:16:e4:4b:7d:cb:08:31:
         71:06:c5:5b:33:0a:d0:6f:f8:1f:35:d4:73:2c:9b:e2:9f:53:
         af:0b:57:8a:72:fd:f8:f9:7e:8e:65:a8:32:b5:b3:41:a3:c3:
         d4:00:45:c4:a3:8e:8c:a8:11:10:a0:9f:a2:7a:4a:ff:b4:dc:
         fb:b9:07:91:02:0a:f7:2f:52:ce:de:8e:81:1e:98:71:62:d5:
         64:32:66:fe:6b:8f:ff:86:26:7a:f0:6e:16:40:a5:f4:e0:ad:
         9a:c3:69:d0:50:38:d5:16:4c:19:e1:44:34:bd:a4:b4:ea:73:
         f5:01:35:20:e3:ba:0d:a6:54:69:04:54:93:a3:26:35:00:e9:
         54:ae:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 05:54:23 2025 by rpki-client