Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230332e302f32342d3234203d3e20323638383239.roa
File:                     34352e3232392e3230332e302f32342d3234203d3e20323638383239.roa (raw, json)
Hash identifier:          84yXQ2cON5jixSf/3tY+PphjSNWdv5c2rTKZfhaBjYA=
Subject key identifier:   5D:68:6B:55:11:79:1B:9C:C3:76:D7:DF:6D:D8:06:E6:DC:4C:DD:21
Certificate issuer:       /CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
Certificate serial:       03CD93967B06BAB8E1F297A2AF6A935B9A6F548C
Authority key identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230332e302f32342d3234203d3e20323638383239.roa
Signing time:             Fri 18 Jul 2025 18:09:07 +0000
ROA not before:           Fri 18 Jul 2025 18:04:07 +0000
ROA not after:            Fri 17 Jul 2026 18:09:07 +0000
asID:                     268829
IP address blocks:        45.229.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cd:93:96:7b:06:ba:b8:e1:f2:97:a2:af:6a:93:5b:9a:6f:54:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
        Validity
            Not Before: Jul 18 18:04:07 2025 GMT
            Not After : Jul 17 18:09:07 2026 GMT
        Subject: CN=5D686B5511791B9CC376D7DF6DD806E6DC4CDD21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:ca:14:90:60:84:cc:5b:ac:ec:92:13:3c:
                    6f:d9:56:93:d0:84:34:8e:7d:5a:1e:65:9b:df:b4:
                    40:3c:8f:c8:a8:66:da:d2:3b:7f:b3:11:9b:93:a7:
                    ff:f3:71:e1:4b:03:0e:1d:db:f1:04:45:4f:a4:2a:
                    c3:e1:b3:f7:73:62:2d:b7:06:84:30:01:16:85:13:
                    a5:b8:4c:f0:7b:27:23:59:90:11:1a:4a:c4:7c:76:
                    8b:83:95:2b:04:c6:e8:61:b5:82:57:d2:8f:a4:e7:
                    99:4c:66:9f:33:13:36:e1:06:3e:90:85:06:25:b3:
                    fe:b4:a9:a0:6a:db:35:43:a9:ec:8a:1f:47:c2:46:
                    07:d4:93:2f:3f:5d:e9:14:dc:12:f9:58:c8:79:1f:
                    aa:0e:03:2b:0f:cb:0a:ca:e4:9e:24:29:be:14:d0:
                    d8:36:51:07:10:5a:65:91:5e:53:a0:ef:05:e0:ef:
                    4d:14:75:fe:a4:ed:98:48:92:1b:a9:d2:6f:2c:60:
                    ea:8b:f8:1d:ae:a9:e9:00:6f:63:71:cf:64:e7:93:
                    40:7a:b7:70:2d:2c:85:c4:ca:b8:0f:bb:03:6f:66:
                    06:7a:0c:95:cb:c6:bb:f3:cc:b3:0c:ea:f0:87:ac:
                    43:04:a1:36:49:76:3d:e7:18:2a:01:4e:23:42:ed:
                    34:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:68:6B:55:11:79:1B:9C:C3:76:D7:DF:6D:D8:06:E6:DC:4C:DD:21
            X509v3 Authority Key Identifier:
                keyid:31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230332e302f32342d3234203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:db:1c:50:6f:0a:c3:81:4d:e0:fe:71:a8:2e:e2:b7:43:c5:
         ff:71:37:59:02:79:39:12:8e:b2:38:b7:3c:8b:25:d4:79:7b:
         f0:78:72:1f:56:ac:ea:47:41:3d:90:6a:86:94:9f:cc:0d:50:
         a0:52:27:25:86:35:e1:56:fc:b6:55:70:03:51:b5:d3:2e:16:
         f3:5c:9d:d3:1c:b2:5b:56:a0:03:2e:b0:ee:7c:4c:a6:3c:37:
         0c:31:72:ea:d7:0a:7f:a9:a6:78:08:d8:9d:74:7f:3a:bc:de:
         4b:d5:73:9c:56:7f:8d:aa:6b:00:1f:7e:e1:57:04:df:9d:ee:
         43:13:0d:6f:55:d7:32:8d:3d:a6:94:43:4c:37:ca:33:03:e8:
         e4:d6:c2:d7:15:89:63:ca:95:d3:79:a9:17:3c:c3:ae:e1:81:
         e3:12:c3:28:26:77:3f:9c:03:07:57:d5:79:0f:2c:20:1f:b9:
         1e:ba:bf:53:95:00:49:66:04:48:71:53:d0:96:0b:49:1f:78:
         ae:7a:93:77:61:17:a0:a8:0c:aa:b3:79:71:f7:71:ff:d5:50:
         0f:e8:c0:24:0c:1e:d5:cd:26:29:61:b5:db:fb:c1:73:67:6a:
         8a:97:bb:4d:78:9b:83:87:56:bc:7c:0a:79:17:ba:7e:01:8c:
         57:15:3d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:25:40 2025 by rpki-client