Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230372e302f32342d3234203d3e20323639313439.roa
File:                     34352e3138302e3230372e302f32342d3234203d3e20323639313439.roa (raw, json)
Hash identifier:          CErcDYhKaMHssx+Ak9xRwf31rOJ9giW+pURgXp6Dqi8=
Subject key identifier:   A0:0B:53:B5:EC:21:87:53:E0:AD:41:C0:7B:76:AF:04:53:07:5C:FC
Certificate issuer:       /CN=F82D21AF854C0D12899CF9E18B7205BCF75379D1
Certificate serial:       59CA4F29E78A8A2F31F049D3B0E5BC07B4761F57
Authority key identifier: F8:2D:21:AF:85:4C:0D:12:89:9C:F9:E1:8B:72:05:BC:F7:53:79:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230372e302f32342d3234203d3e20323639313439.roa
Signing time:             Thu 25 Sep 2025 18:48:11 +0000
ROA not before:           Thu 25 Sep 2025 18:43:11 +0000
ROA not after:            Thu 24 Sep 2026 18:48:11 +0000
asID:                     269149
IP address blocks:        45.180.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.crl
                          rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ca:4f:29:e7:8a:8a:2f:31:f0:49:d3:b0:e5:bc:07:b4:76:1f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F82D21AF854C0D12899CF9E18B7205BCF75379D1
        Validity
            Not Before: Sep 25 18:43:11 2025 GMT
            Not After : Sep 24 18:48:11 2026 GMT
        Subject: CN=A00B53B5EC218753E0AD41C07B76AF0453075CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:60:fc:b9:6f:8a:65:c1:a8:1c:35:de:09:1f:
                    d1:8b:93:dc:b7:18:f2:7c:78:32:b2:14:f3:51:04:
                    10:9c:5d:6c:93:68:f0:2a:90:2c:7f:ae:8c:01:0e:
                    67:28:53:42:dc:48:2e:c8:22:37:47:7c:ba:36:fc:
                    1a:6e:26:dd:bf:ff:19:7d:0a:4b:ec:29:d3:7b:88:
                    ea:25:4a:fb:4d:b4:96:0d:a9:4f:16:69:93:bb:c3:
                    4d:ac:d1:ca:c3:81:b2:ff:c6:e0:f7:6e:bd:2e:a7:
                    96:e0:2a:3f:12:05:e4:19:ad:94:12:ce:53:3e:b9:
                    05:5f:34:9a:4d:db:9d:24:0e:76:f6:78:7f:a2:dc:
                    76:3f:ea:93:be:76:a6:62:ff:ed:7f:a7:99:e6:df:
                    f2:3d:63:b2:4c:b4:e4:61:12:30:9f:05:22:39:5e:
                    7a:fd:39:d1:54:df:15:2a:ba:ec:0e:c9:45:83:fa:
                    29:13:1d:e0:e6:f0:86:cb:34:6f:c5:2d:21:b2:15:
                    d6:5b:61:e9:9d:1c:b9:23:d2:6b:c0:90:d9:e7:a4:
                    32:31:fd:11:79:8e:21:69:c4:c8:db:85:aa:33:57:
                    55:75:b5:aa:bb:c8:59:78:97:90:de:d8:58:9b:00:
                    06:67:74:6a:1c:10:db:03:71:af:27:5d:2a:21:99:
                    a1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0B:53:B5:EC:21:87:53:E0:AD:41:C0:7B:76:AF:04:53:07:5C:FC
            X509v3 Authority Key Identifier:
                keyid:F8:2D:21:AF:85:4C:0D:12:89:9C:F9:E1:8B:72:05:BC:F7:53:79:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230372e302f32342d3234203d3e20323639313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d3:62:32:68:af:80:6a:aa:ee:c2:fa:47:81:8f:67:03:6f:
         93:d5:9b:8b:f8:4b:52:d4:58:e9:79:1e:0a:28:b3:dd:54:24:
         e2:10:cd:64:37:d9:d7:91:3c:aa:1e:49:bb:0c:e1:46:bb:0a:
         25:0f:b3:76:2d:0b:fb:a8:72:20:d8:50:a1:b2:32:41:1d:d2:
         1f:b3:ec:c8:ad:64:79:c8:ab:3a:19:93:42:0e:8a:41:99:f7:
         54:03:8a:c1:04:04:db:27:eb:e0:0d:fe:82:3a:a9:ad:ec:ae:
         dd:08:ea:f9:01:f6:75:fd:2b:48:25:44:f8:88:15:91:a4:6b:
         99:49:d5:05:4a:22:21:25:ea:31:1e:dd:6e:25:dd:f6:5f:eb:
         d6:be:31:c3:3e:16:2f:39:97:3d:3f:04:5c:ba:9e:27:b4:86:
         71:b1:40:f0:ee:d1:8f:b2:a4:94:8e:4a:40:0d:3f:c7:0a:b6:
         80:88:65:6e:40:23:7b:e8:73:c8:f3:a0:0a:1e:26:ac:ec:92:
         62:cc:ad:0f:32:0b:72:02:98:f6:d2:8e:10:ec:73:4c:33:2d:
         2f:ff:52:10:f7:90:19:d5:b5:0a:90:fd:73:69:00:4d:58:20:
         a0:5c:18:8d:0e:71:c1:7c:ff:64:ae:f2:38:ef:f3:9d:a7:0c:
         8e:ac:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:06:41 2025 by rpki-client