Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232322e302f32342d3234203d3e20323638383239.roa
File:                     34352e3137332e3232322e302f32342d3234203d3e20323638383239.roa (raw, json)
Hash identifier:          oufeTU339xeYBTJ6pS+MJFdA5y026IYgHd3/nQKGTvQ=
Subject key identifier:   4D:3D:20:87:6F:5A:E1:18:EC:2D:3F:A9:C4:52:9A:DE:6E:DF:8F:F7
Certificate issuer:       /CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
Certificate serial:       7A7CA8393CE14769104B6F4464548F343B1A605F
Authority key identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232322e302f32342d3234203d3e20323638383239.roa
Signing time:             Fri 18 Jul 2025 18:08:38 +0000
ROA not before:           Fri 18 Jul 2025 18:03:38 +0000
ROA not after:            Fri 17 Jul 2026 18:08:38 +0000
asID:                     268829
IP address blocks:        45.173.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7c:a8:39:3c:e1:47:69:10:4b:6f:44:64:54:8f:34:3b:1a:60:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
        Validity
            Not Before: Jul 18 18:03:38 2025 GMT
            Not After : Jul 17 18:08:38 2026 GMT
        Subject: CN=4D3D20876F5AE118EC2D3FA9C4529ADE6EDF8FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:30:0a:65:08:18:84:f9:c8:67:f7:47:9c:
                    ad:d1:8a:92:59:87:44:a7:62:e2:00:b0:cb:9b:91:
                    a1:10:b5:2c:66:f0:6e:81:58:6f:90:d1:36:3b:a4:
                    26:6c:8f:2b:51:00:ed:d5:14:64:44:d1:08:a7:24:
                    07:21:27:cb:26:7c:1d:01:85:4f:8e:da:79:88:8d:
                    95:6b:89:e5:c6:d1:99:4b:3d:3b:e2:91:cf:c8:e3:
                    f6:5a:aa:ab:06:12:59:9d:d6:dc:52:3a:bd:48:9c:
                    88:9e:d1:e4:de:c7:e5:c3:9b:ea:dc:b2:a3:d3:d3:
                    a1:9e:51:76:10:87:42:51:66:07:41:bb:07:22:2e:
                    bf:97:95:8e:49:b3:9f:1f:0b:b6:38:92:de:4d:b2:
                    f0:e6:4c:9b:83:e7:8c:45:65:25:03:96:04:e6:09:
                    61:97:5f:df:3d:a6:f4:93:8e:3b:5b:2e:6e:de:ca:
                    c8:0e:df:6e:28:ca:1a:fe:50:70:36:df:34:c0:62:
                    3e:7f:8e:4d:9a:74:70:07:7c:d2:6f:73:e7:a5:56:
                    d7:67:9e:04:f9:7d:da:c6:e8:e9:12:f6:82:6d:40:
                    e8:87:ef:e1:5f:47:db:15:57:9d:18:44:2a:aa:e9:
                    18:f7:f7:b9:de:a2:35:d5:ab:86:a6:6d:ea:ea:7c:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3D:20:87:6F:5A:E1:18:EC:2D:3F:A9:C4:52:9A:DE:6E:DF:8F:F7
            X509v3 Authority Key Identifier:
                keyid:31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232322e302f32342d3234203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:6b:33:80:7f:17:52:a3:07:fa:ba:58:30:b0:8f:b4:04:7f:
         3c:67:25:e3:51:5e:65:49:e5:65:fe:0f:9a:b6:1e:5f:f8:09:
         d9:c9:d4:0c:1c:c8:f9:46:a4:26:c5:c2:00:5b:31:20:39:e9:
         64:a6:af:a5:bb:ce:e8:87:2e:83:35:d2:de:e1:fc:e8:0c:e3:
         16:a5:f2:17:0d:a1:44:76:a6:49:c5:12:f0:87:7e:7c:ce:2b:
         02:04:91:16:fd:a8:56:5b:1c:7b:bc:55:a9:89:a4:b7:c1:7f:
         bc:b0:4d:38:9a:4d:50:29:9f:cc:bd:cd:6c:10:9c:12:86:81:
         82:15:25:6b:eb:5e:a3:da:9e:55:4a:9f:ae:92:5a:68:ed:84:
         33:41:13:12:08:81:e9:86:2a:2a:01:a3:5a:cd:7a:b2:23:4b:
         5b:82:b7:de:7d:81:75:d2:f3:8d:fc:15:f0:f2:f9:30:dd:99:
         c5:28:6c:c7:92:51:4c:38:cf:c8:65:d6:42:ef:fe:a1:ee:ec:
         ef:6d:ef:fd:43:06:81:92:f7:f0:2f:2e:da:cd:f4:43:04:28:
         49:e9:d0:c8:00:ca:aa:ea:8f:3f:16:29:85:66:98:53:63:ae:
         46:e9:89:a1:23:10:2a:2f:9c:84:a6:e3:5c:d3:3f:93:97:fd:
         f1:c1:f3:20
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUenyoOTzhR2kQS29EZFSPNDsaYF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzExOTE3MjlBMENCNTJDRDZBQjQyNTMxRDlFMUI1QjA1
NkY1MDIwQjAeFw0yNTA3MTgxODAzMzhaFw0yNjA3MTcxODA4MzhaMDMxMTAvBgNV
BAMTKDREM0QyMDg3NkY1QUUxMThFQzJEM0ZBOUM0NTI5QURFNkVERjhGRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0TAKZQgYhPnIZ/dHnK3RipJZ
h0SnYuIAsMubkaEQtSxm8G6BWG+Q0TY7pCZsjytRAO3VFGRE0QinJAchJ8smfB0B
hU+O2nmIjZVrieXG0ZlLPTvikc/I4/ZaqqsGElmd1txSOr1InIie0eTex+XDm+rc
sqPT06GeUXYQh0JRZgdBuwciLr+XlY5Js58fC7Y4kt5NsvDmTJuD54xFZSUDlgTm
CWGXX989pvSTjjtbLm7eysgO324oyhr+UHA23zTAYj5/jk2adHAHfNJvc+elVtdn
ngT5fdrG6OkS9oJtQOiH7+FfR9sVV50YRCqq6Rj397neojXVq4amberqfIuvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTT0gh29a4RjsLT+pxFKa3m7fj/cwHwYDVR0j
BBgwFoAUMRkXKaDLUs1qtCUx2eG1sFb1AgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkNEaHhlSHlCazRRUHZ1SmdhYmY1Uks5VXdVdnJyU0ptZEtDSFBKQTVZ
WnEvMC8zMTE5MTcyOUEwQ0I1MkNENkFCNDI1MzFEOUUxQjVCMDU2RjUwMjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxMTkxNzI5QTBDQjUyQ0Q2
QUI0MjUzMUQ5RTFCNUIwNTZGNTAyMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZDRGh4ZUh5Qms0UVB2dUpnYWJmNVJLOVV3VXZyclNKbWRLQ0hQSkE1WVpxLzAv
MzQzNTJlMzEzNzMzMmUzMjMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzODMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtrd4wDQYJKoZIhvcNAQELBQADggEBACprM4B/
F1KjB/q6WDCwj7QEfzxnJeNRXmVJ5WX+D5q2Hl/4CdnJ1AwcyPlGpCbFwgBbMSA5
6WSmr6W7zuiHLoM10t7h/OgM4xal8hcNoUR2pknFEvCHfnzOKwIEkRb9qFZbHHu8
VamJpLfBf7ywTTiaTVApn8y9zWwQnBKGgYIVJWvrXqPanlVKn66SWmjthDNBExII
gemGKioBo1rNerIjS1uCt959gXXS8438FfDy+TDdmcUobMeSUUw4z8hl1kLv/qHu
7O9t7/1DBoGS9/AvLtrN9EMEKEnp0MgAyqrqjz8WKYVmmFNjrkbpiaEjECovnISm
41zTP5OX/fHB8yA=
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:32:52 2025 by rpki-client