Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3137302e302f32342d3234203d3e20323639353337.roa
File:                     34352e3138382e3137302e302f32342d3234203d3e20323639353337.roa (raw, json)
Hash identifier:          Vzd8xHxmsWngmBxWe4SQIQVawqPtWwCfdtOqfbWO5bM=
Subject key identifier:   FA:5D:D7:BB:A9:3A:0A:88:18:6E:C4:53:21:CE:0F:A2:80:EA:EE:70
Certificate issuer:       /CN=94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2
Certificate serial:       13ABDA22904C0A49D0D47CCA3804B5A873B17B19
Authority key identifier: 94:F5:D1:82:A1:AA:8D:6C:4F:E6:24:A8:F3:24:1D:6C:E5:D9:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3137302e302f32342d3234203d3e20323639353337.roa
Signing time:             Tue 22 Jul 2025 21:18:01 +0000
ROA not before:           Tue 22 Jul 2025 21:13:01 +0000
ROA not after:            Tue 21 Jul 2026 21:18:01 +0000
asID:                     269537
IP address blocks:        45.188.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.crl
                          rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 20:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ab:da:22:90:4c:0a:49:d0:d4:7c:ca:38:04:b5:a8:73:b1:7b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2
        Validity
            Not Before: Jul 22 21:13:01 2025 GMT
            Not After : Jul 21 21:18:01 2026 GMT
        Subject: CN=FA5DD7BBA93A0A88186EC45321CE0FA280EAEE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:33:66:de:e1:73:f8:91:c4:b4:e8:1c:76:
                    92:9b:9a:56:9e:5c:c4:32:f2:d0:f7:85:4c:92:79:
                    fa:4c:2a:a2:8c:2a:01:9d:4a:ea:c8:03:0d:56:fc:
                    ca:01:0b:7b:a5:ec:ae:e9:28:c8:48:7d:65:42:c0:
                    58:a8:50:ef:a5:07:70:9d:e4:f3:9e:35:25:b1:21:
                    8b:20:e0:6b:66:ab:a5:79:3b:80:5f:76:02:53:76:
                    6b:ac:2d:f6:20:ce:92:8c:7c:e5:89:a5:c5:a3:23:
                    40:45:de:40:69:16:bd:26:1e:c3:92:ea:ad:1a:ce:
                    d9:2c:cc:cf:00:17:01:90:17:b8:56:d2:65:2c:84:
                    87:84:93:6c:7d:b8:18:1a:e3:ae:c2:d1:8c:16:a4:
                    52:c8:8d:a0:26:70:b1:16:1f:d5:24:ec:c8:59:c3:
                    a7:73:68:1d:43:d7:31:fc:20:34:76:4b:b6:2c:f0:
                    bc:a1:43:01:c7:ef:51:23:07:4d:1f:31:22:a1:4e:
                    05:95:99:f4:e9:c2:51:44:aa:91:ff:2c:8f:66:d0:
                    3e:35:9c:8b:01:3c:3d:a9:c1:b1:7b:d9:8b:2f:f2:
                    ed:6c:92:df:1c:27:6c:7a:ce:7e:3d:bf:07:fe:50:
                    0e:49:cc:dc:f7:62:5c:f4:72:7b:97:08:1d:6c:53:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5D:D7:BB:A9:3A:0A:88:18:6E:C4:53:21:CE:0F:A2:80:EA:EE:70
            X509v3 Authority Key Identifier:
                keyid:94:F5:D1:82:A1:AA:8D:6C:4F:E6:24:A8:F3:24:1D:6C:E5:D9:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3137302e302f32342d3234203d3e20323639353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:f1:38:ca:bf:ea:5a:70:1e:e7:7c:e1:f1:96:bc:0f:73:82:
         3a:37:36:fa:ec:6d:7a:5e:39:5f:2c:92:71:cb:3e:49:02:0c:
         ab:d9:f9:b3:06:ba:7f:51:37:08:c6:7d:3b:b2:79:58:c4:e7:
         cc:05:1f:4b:0b:dd:4b:a6:69:e1:f3:1e:2c:a6:28:30:0f:84:
         2d:28:21:84:f7:cb:59:0e:8a:36:9a:78:3a:7f:8c:b0:41:f7:
         38:16:a8:57:ca:0b:bb:36:54:8f:9f:1a:1d:6a:c6:0a:94:8a:
         ee:1f:d6:88:bf:e2:a1:9f:06:e9:3d:e6:1d:bf:1b:28:ce:7c:
         db:e6:3d:5f:e4:42:6c:83:3d:cd:ea:00:59:d9:65:35:ba:8d:
         cb:f7:b9:8a:f7:37:66:ba:40:7f:91:6d:29:71:bc:1e:3b:ed:
         95:5d:10:9f:2a:0d:0a:f9:0b:36:e0:77:f9:75:cb:9f:5f:14:
         a7:c4:26:29:79:ad:fb:96:61:08:2b:89:da:d4:27:3a:ca:f8:
         d6:2b:1f:4a:98:b4:c7:ae:3e:b2:86:9d:7b:8b:4d:f4:4b:09:
         0a:91:99:0c:03:04:db:d6:a2:50:95:4f:3d:47:33:06:b7:bd:
         8a:6e:a5:be:f7:ab:fc:d1:bd:c7:d8:b1:01:a5:78:18:b8:c3:
         7f:21:ec:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 05:56:29 2025 by rpki-client