Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137342e302f32342d3234203d3e20323638353536.roa
File:                     34352e3136332e3137342e302f32342d3234203d3e20323638353536.roa (raw, json)
Hash identifier:          1obdS7GhEIPdoUJVl9cAoY0T8F8M52QkHJqRa321qVs=
Subject key identifier:   72:DD:A7:E5:BC:BF:2B:C8:2C:62:94:59:52:B4:50:39:97:4C:8B:5A
Certificate issuer:       /CN=78FAEDBB051194630540EEEFB7EB5EDD6D083EE5
Certificate serial:       6C1F2289187F6C1F1AADAB5D5C83954A1CD5748D
Authority key identifier: 78:FA:ED:BB:05:11:94:63:05:40:EE:EF:B7:EB:5E:DD:6D:08:3E:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137342e302f32342d3234203d3e20323638353536.roa
Signing time:             Mon 30 Jun 2025 12:55:32 +0000
ROA not before:           Mon 30 Jun 2025 12:50:32 +0000
ROA not after:            Mon 29 Jun 2026 12:55:32 +0000
asID:                     268556
IP address blocks:        45.163.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.crl
                          rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1f:22:89:18:7f:6c:1f:1a:ad:ab:5d:5c:83:95:4a:1c:d5:74:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78FAEDBB051194630540EEEFB7EB5EDD6D083EE5
        Validity
            Not Before: Jun 30 12:50:32 2025 GMT
            Not After : Jun 29 12:55:32 2026 GMT
        Subject: CN=72DDA7E5BCBF2BC82C62945952B45039974C8B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:08:fd:38:e5:a1:57:db:30:22:1d:0a:6f:1c:
                    9b:7b:c7:4c:98:60:97:34:3c:5b:69:ec:c6:70:4a:
                    fe:dc:f0:6a:44:71:bd:a8:af:c8:38:ff:76:72:e2:
                    33:94:1d:cb:71:31:e9:bc:37:21:bc:8c:ad:19:a4:
                    cf:ed:c3:c2:02:95:e5:ff:a4:f7:92:a8:4b:f8:66:
                    5a:11:cb:f9:5d:08:bf:5e:06:28:04:44:50:e9:06:
                    34:b6:51:cb:bd:7f:b7:ff:0a:83:f9:82:63:6c:d5:
                    e3:99:5e:c2:b7:2d:05:32:bc:ff:ef:f4:1e:f2:7f:
                    47:ab:a2:92:72:3b:b7:c9:2c:95:3c:3a:5d:6e:65:
                    ea:9a:e9:b5:a4:0e:c3:ad:a9:e8:51:64:76:44:b0:
                    c8:0d:d9:57:ae:92:44:5e:f9:13:31:e4:d9:d9:87:
                    1f:bd:30:d0:8c:ba:bd:2c:7e:2c:fd:14:e5:48:f4:
                    ea:1a:7e:ba:8e:30:7d:4e:09:ee:dc:5d:20:33:7f:
                    16:5c:08:50:78:58:ef:0c:88:5e:aa:d1:5b:d2:e2:
                    de:db:bf:9d:e4:c7:eb:ab:ea:7f:fe:9d:31:ba:19:
                    93:01:ec:f0:f0:b2:a3:39:cc:ba:1f:54:e9:50:88:
                    02:39:7e:f7:a6:0a:f0:c8:58:17:ea:84:e0:8b:fe:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DD:A7:E5:BC:BF:2B:C8:2C:62:94:59:52:B4:50:39:97:4C:8B:5A
            X509v3 Authority Key Identifier:
                keyid:78:FA:ED:BB:05:11:94:63:05:40:EE:EF:B7:EB:5E:DD:6D:08:3E:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137342e302f32342d3234203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:90:ac:de:77:97:97:37:0b:6c:35:76:94:5b:36:18:b8:0e:
         84:11:d9:36:2f:a3:24:f7:1e:c2:74:1f:71:d2:b3:be:cb:f9:
         57:e5:ca:46:29:fd:d9:08:02:59:cd:da:75:52:88:b6:53:6d:
         65:72:ec:6f:9c:19:7c:70:5f:b3:30:26:bb:8c:f0:92:0e:41:
         90:93:a3:cd:be:43:8a:26:ed:29:9a:e9:14:0b:79:e7:d6:d4:
         88:9d:60:ff:e5:d1:3f:62:25:13:9b:8d:e2:9e:56:95:bb:26:
         e1:86:a6:98:2a:f7:1e:91:c3:2e:7a:89:1d:0c:b4:a9:f6:7e:
         a1:4e:d9:be:01:1b:c1:9f:74:a7:b6:ad:6d:12:2b:86:e4:7d:
         52:97:b1:ea:d0:bb:d9:46:56:1c:b8:37:47:eb:14:74:27:10:
         20:b4:70:5d:64:44:ad:73:26:2a:1f:92:b1:5a:b3:79:a1:bc:
         a5:95:d2:2b:80:60:5d:78:ef:d9:0f:b2:e6:b0:11:c7:2a:1a:
         2f:a6:57:27:55:18:08:12:11:66:2b:6e:ad:ee:0a:54:63:49:
         cd:d0:93:f5:d3:11:6e:43:52:53:a9:b1:f0:91:60:34:e8:ee:
         45:3d:90:ca:b3:aa:ba:b5:82:24:74:d6:f6:f6:02:dd:1f:b8:
         0c:5b:74:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:22:58 2025 by rpki-client