Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36372e302f32342d3234203d3e20323637393436.roa
File:                     34352e3136362e36372e302f32342d3234203d3e20323637393436.roa (raw, json)
Hash identifier:          maS4nmFcdiHhy+ZX4S8/5wsNL5C7y3k1hxmjUU8OI0Q=
Subject key identifier:   91:B3:3E:0F:87:7F:9C:1D:9E:37:9B:4E:83:F8:BC:D2:3D:83:F0:CB
Certificate issuer:       /CN=C164F89CAD164E696F5070A43F5B84BA8C3F610A
Certificate serial:       4C80CE2FE7E770F9B00C547520681C6F5B277BC0
Authority key identifier: C1:64:F8:9C:AD:16:4E:69:6F:50:70:A4:3F:5B:84:BA:8C:3F:61:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36372e302f32342d3234203d3e20323637393436.roa
Signing time:             Thu 22 May 2025 18:17:26 +0000
ROA not before:           Thu 22 May 2025 18:12:26 +0000
ROA not after:            Thu 21 May 2026 18:17:26 +0000
asID:                     267946
IP address blocks:        45.166.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl
                          rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 18:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:80:ce:2f:e7:e7:70:f9:b0:0c:54:75:20:68:1c:6f:5b:27:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C164F89CAD164E696F5070A43F5B84BA8C3F610A
        Validity
            Not Before: May 22 18:12:26 2025 GMT
            Not After : May 21 18:17:26 2026 GMT
        Subject: CN=91B33E0F877F9C1D9E379B4E83F8BCD23D83F0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:c5:b0:41:97:37:e4:f3:80:27:0c:68:a7:
                    29:e3:98:fd:cd:19:8d:a6:b6:2e:a0:db:91:c0:37:
                    e0:53:8a:f2:d8:26:46:96:72:8e:91:e8:ab:34:c5:
                    f6:f5:71:68:09:98:55:51:e6:2b:64:69:df:c8:e3:
                    9f:7e:83:27:ec:26:08:11:4f:d3:ba:18:ad:ac:4d:
                    0e:65:80:c4:cc:5e:59:c9:e6:97:27:a4:40:4f:e7:
                    97:2c:d4:d4:e4:41:ba:60:57:ee:22:63:99:fc:f3:
                    6c:6d:d6:e8:bb:ea:f1:5e:38:a0:4d:74:55:0c:72:
                    46:06:f9:33:84:aa:75:d8:bd:c8:ba:ae:c8:2c:c9:
                    5e:5b:3e:6b:49:ce:89:10:77:e6:d1:48:2b:41:29:
                    0f:77:5e:e2:a0:22:22:bd:97:2b:18:da:60:61:68:
                    42:14:94:c9:5d:db:75:81:c2:79:86:20:ed:53:d4:
                    25:db:a2:dd:8b:a2:a6:16:ec:1e:cf:38:cc:9e:6e:
                    5e:d0:ab:96:9d:23:e2:21:2b:7d:5a:62:c9:82:6f:
                    d1:0a:8d:59:58:9f:0f:83:a2:9c:12:26:c4:d7:80:
                    d3:98:3c:31:74:b5:e3:e5:36:de:0c:60:12:8c:00:
                    43:4a:11:3f:88:18:29:d4:5e:87:52:42:c1:cc:c0:
                    1d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B3:3E:0F:87:7F:9C:1D:9E:37:9B:4E:83:F8:BC:D2:3D:83:F0:CB
            X509v3 Authority Key Identifier:
                keyid:C1:64:F8:9C:AD:16:4E:69:6F:50:70:A4:3F:5B:84:BA:8C:3F:61:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36372e302f32342d3234203d3e20323637393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:16:12:7b:3f:39:a8:56:82:f0:2a:20:4b:c5:7e:26:8e:5b:
         37:c3:5b:5f:67:a0:a4:8a:a1:28:da:ae:32:12:eb:fb:8d:b7:
         5e:bf:f9:03:11:90:5b:0e:0e:c6:12:0b:b3:a2:ce:b1:0c:8b:
         1e:73:b0:d2:6c:5c:d7:72:c1:b9:7a:10:b8:5e:8f:3e:3a:27:
         b8:8a:56:e2:2e:35:b9:18:49:c3:e2:d9:a3:3e:5a:4a:e3:cb:
         57:bc:44:b2:a5:f2:3f:d0:77:90:f5:03:1e:83:06:a6:76:95:
         a0:02:54:79:7e:43:bb:a8:65:05:79:5f:1a:00:c4:39:d4:54:
         1c:17:d3:e9:58:2f:7b:ea:0e:19:17:6a:f3:97:4e:e8:0e:e2:
         c7:69:25:cc:ea:99:ec:f5:cb:38:e3:ac:62:99:d4:db:ea:68:
         80:c6:8a:84:d6:b3:ac:62:30:e9:63:07:e8:ca:aa:94:11:bf:
         fd:38:ae:1e:62:75:74:9e:f5:23:98:f5:28:99:9a:c7:b7:28:
         1a:5e:82:25:aa:6a:53:fb:28:da:60:72:df:3d:5f:44:b8:94:
         90:31:0a:8e:40:ab:c2:85:f6:de:c0:15:cc:d2:61:ef:1f:38:
         80:ea:7e:15:ec:4b:81:34:8a:49:2c:c1:ec:2c:7a:09:03:ca:
         94:d2:4c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:14:43 2025 by rpki-client