Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130382e302f32322d3234203d3e20323639343633.roa
File:                     34352e3138372e3130382e302f32322d3234203d3e20323639343633.roa (raw, json)
Hash identifier:          /t9r8dXALNNmICRUSk6onSNr+y4XfmjBYIialMDDkzo=
Subject key identifier:   5C:33:A6:11:CE:D8:2F:7A:48:9B:23:09:03:54:70:DC:F2:0D:B0:33
Certificate issuer:       /CN=0BAA958EF789368FEFA40DA3630D88B921AC75F3
Certificate serial:       43A9DA7B3F72AF988E58B4C7E394429C6CB1B649
Authority key identifier: 0B:AA:95:8E:F7:89:36:8F:EF:A4:0D:A3:63:0D:88:B9:21:AC:75:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BAA958EF789368FEFA40DA3630D88B921AC75F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130382e302f32322d3234203d3e20323639343633.roa
Signing time:             Wed 28 May 2025 20:38:16 +0000
ROA not before:           Wed 28 May 2025 20:33:16 +0000
ROA not after:            Wed 27 May 2026 20:38:16 +0000
asID:                     269463
IP address blocks:        45.187.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/0BAA958EF789368FEFA40DA3630D88B921AC75F3.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/0BAA958EF789368FEFA40DA3630D88B921AC75F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BAA958EF789368FEFA40DA3630D88B921AC75F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a9:da:7b:3f:72:af:98:8e:58:b4:c7:e3:94:42:9c:6c:b1:b6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BAA958EF789368FEFA40DA3630D88B921AC75F3
        Validity
            Not Before: May 28 20:33:16 2025 GMT
            Not After : May 27 20:38:16 2026 GMT
        Subject: CN=5C33A611CED82F7A489B2309035470DCF20DB033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2d:65:ab:91:98:c9:94:a9:7a:7b:46:97:78:
                    66:40:22:f7:04:8c:dc:d8:00:a0:9a:3e:0e:18:12:
                    4b:df:af:fa:c6:24:6d:82:68:9f:14:6b:08:cb:a3:
                    06:c9:87:b9:4f:e8:55:e7:2f:0b:8c:c9:82:07:4c:
                    23:c1:53:be:90:bb:8b:ee:5a:04:08:85:6e:d9:65:
                    62:3f:cb:ca:00:c9:5f:63:f1:b8:a6:d1:f7:29:c8:
                    99:06:d7:c8:dc:52:a8:d3:a5:8f:fd:70:32:a9:9b:
                    cb:7b:06:03:9e:19:6d:f5:a1:b7:67:a3:2d:94:1d:
                    d5:db:cd:57:11:89:fb:14:80:1f:a8:f5:b2:5c:1c:
                    70:f0:51:e7:42:bd:ff:67:f7:fc:91:5f:92:b1:c5:
                    21:10:90:24:64:4c:7a:b3:8d:3f:ae:37:6c:e2:19:
                    be:0a:d3:5c:d1:65:af:af:94:00:1d:d8:f2:b6:26:
                    73:1c:1f:77:f5:17:de:aa:e3:20:ed:74:b9:6b:1b:
                    4f:0f:16:5c:70:4d:c6:c8:23:4d:c8:db:3e:12:2f:
                    a1:88:60:63:e9:ff:89:e8:89:af:3d:38:f4:c1:4d:
                    64:35:ec:93:6d:67:8a:6b:18:0c:f1:dd:ab:0c:1c:
                    1e:26:bf:4e:e2:1e:a4:29:fa:95:d3:82:a8:c7:44:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:33:A6:11:CE:D8:2F:7A:48:9B:23:09:03:54:70:DC:F2:0D:B0:33
            X509v3 Authority Key Identifier:
                keyid:0B:AA:95:8E:F7:89:36:8F:EF:A4:0D:A3:63:0D:88:B9:21:AC:75:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/0BAA958EF789368FEFA40DA3630D88B921AC75F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BAA958EF789368FEFA40DA3630D88B921AC75F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130382e302f32322d3234203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:1c:2a:3d:93:28:60:76:6a:cd:3b:b2:bb:ff:13:ab:7a:19:
         54:0b:ea:6a:e0:8a:72:1b:00:d3:ac:ca:be:03:da:32:03:a1:
         27:2f:bc:c6:9a:51:24:df:31:e2:45:17:a4:95:30:dd:0e:5a:
         14:69:52:0d:9d:a9:90:7a:e5:04:fa:89:83:a2:d2:09:92:af:
         84:41:01:78:d8:ea:71:9d:9f:82:fa:52:49:fa:c0:10:e2:57:
         2b:7e:f3:eb:39:db:11:6f:a1:43:e0:ee:f3:76:eb:6e:06:5a:
         77:4e:f4:29:37:34:67:a9:dd:3b:37:98:72:6f:02:6e:14:3c:
         e9:a9:eb:46:32:1d:b5:a2:76:d4:62:04:4c:10:cf:c2:ea:85:
         19:83:ad:71:f7:1e:7e:23:94:5f:24:57:d5:66:2d:d1:0c:8f:
         5c:ba:dd:ab:4f:00:08:d3:71:b2:7d:f2:ce:7b:f6:72:b0:39:
         b0:2f:5f:70:f7:9f:cd:3c:81:b9:c1:1e:f0:31:66:76:d2:99:
         1e:95:dc:24:c9:a2:69:07:98:08:b2:60:9b:08:1d:ff:d0:d4:
         bf:c1:7b:f1:09:b2:35:9f:e4:75:1f:09:65:bf:32:30:18:66:
         c0:15:27:84:ae:52:f1:10:10:de:26:9e:ad:46:65:ab:8e:94:
         58:9b:9b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:57:28 2025 by rpki-client