Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa
File:                     34352e3138342e36382e302f32322d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          WahgXvFTzO2TOXSOYZB443g2NyGaJtus376Y2S/dC6Y=
Subject key identifier:   52:00:31:AC:3E:AD:EF:45:6C:16:1D:FB:C1:D1:83:76:66:68:4C:1B
Certificate issuer:       /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial:       7F8453787E3931230ED407DF2CD5A9CC610D474C
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa
Signing time:             Wed 03 Sep 2025 16:46:12 +0000
ROA not before:           Wed 03 Sep 2025 16:41:12 +0000
ROA not after:            Wed 02 Sep 2026 16:46:12 +0000
asID:                     269359
IP address blocks:        45.184.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl
                          rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 18:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:84:53:78:7e:39:31:23:0e:d4:07:df:2c:d5:a9:cc:61:0d:47:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
        Validity
            Not Before: Sep  3 16:41:12 2025 GMT
            Not After : Sep  2 16:46:12 2026 GMT
        Subject: CN=520031AC3EADEF456C161DFBC1D1837666684C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e6:82:08:ab:91:58:63:e2:2d:6e:66:7d:c1:
                    c9:9e:eb:74:cd:06:ea:ef:80:bc:48:4a:bb:be:dc:
                    8a:8b:12:f8:00:6f:78:97:9a:c1:e6:bc:ae:d7:3c:
                    78:c1:43:c8:ca:1b:5d:6d:e1:06:b6:e9:36:c2:3e:
                    56:b0:8a:02:8e:81:d7:fc:dc:44:22:26:fa:5e:03:
                    d4:be:fc:98:2a:cf:d8:ab:07:65:b1:83:51:84:2f:
                    3e:c8:d0:87:77:42:8d:5b:eb:31:17:8c:91:35:07:
                    44:bd:73:73:84:b3:6a:e8:aa:a0:f4:d4:26:91:74:
                    71:50:b2:48:7f:dd:d5:31:a4:1f:45:dc:70:53:9b:
                    71:86:5f:c4:7b:ad:fb:61:bb:d1:33:ab:8e:4b:51:
                    17:27:4e:ff:69:6a:66:15:4f:16:59:53:4e:21:3a:
                    fb:b6:d4:12:d0:c8:c9:2f:a1:a4:4a:72:20:08:6a:
                    25:0f:84:65:49:57:7e:de:c9:fe:0d:65:9a:96:a7:
                    cc:8c:89:91:a4:d8:65:c0:10:47:b4:0d:d5:20:24:
                    a0:aa:63:b5:1a:27:c5:65:82:71:9d:c9:37:79:23:
                    cf:5c:02:5a:3c:6b:c0:5b:29:37:d8:d9:91:c9:7f:
                    1b:e4:39:67:f5:f4:bc:c7:76:d3:7a:7f:56:b2:c6:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:00:31:AC:3E:AD:EF:45:6C:16:1D:FB:C1:D1:83:76:66:68:4C:1B
            X509v3 Authority Key Identifier:
                keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:36:ab:d4:b5:7c:f4:fb:71:06:5a:a3:6f:35:e0:5e:40:8a:
         a0:83:91:6f:1b:db:2a:1f:6e:36:13:53:fc:be:86:7b:fb:e0:
         c8:ac:c4:0a:fc:95:02:ae:52:23:8c:2a:23:3b:3b:58:b3:90:
         42:bb:7a:ba:44:32:27:db:2e:22:5f:f3:84:42:d3:6c:47:e9:
         ef:d4:94:78:37:43:8b:10:22:c1:13:63:a9:d5:0c:75:df:45:
         18:4b:1d:7e:9a:72:be:5e:4e:fa:25:e3:1c:6c:0b:5b:f1:72:
         79:36:e2:27:4d:5f:25:43:c7:72:54:4a:fa:95:55:aa:b1:d3:
         8d:b0:b9:c1:11:10:3f:11:22:64:5f:ed:3b:2d:fe:23:15:db:
         aa:19:28:5f:2b:87:be:1c:e1:b0:55:a6:a3:c6:d0:dd:c3:f7:
         4f:02:98:26:44:71:1a:24:a6:91:05:bc:4a:a4:4e:c5:e2:a4:
         7b:b5:ff:5f:6b:79:5e:28:13:f2:48:1d:ca:ec:3e:c7:18:f1:
         8d:1d:cc:5d:5a:1c:d3:61:41:5e:f4:92:c1:45:4b:31:4a:8c:
         e5:40:2e:25:a0:46:d1:b5:a7:49:7d:d4:74:5c:e5:17:9d:5e:
         1a:e6:7f:60:da:73:d4:bb:6a:62:aa:83:0d:82:7c:54:2c:38:
         6e:4b:28:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:18:59 2025 by rpki-client