Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32332d3233203d3e20323636393234.roa
File:                     34352e3232342e33322e302f32332d3233203d3e20323636393234.roa (raw, json)
Hash identifier:          SQpPZBsBN3O1LpptuNmrD50V+6SEruwpO8dl+O1NH8A=
Subject key identifier:   D4:AF:4B:A6:28:79:80:91:2D:DA:59:18:B0:51:B7:0D:7A:05:CA:6E
Certificate issuer:       /CN=16149638FCC37EDB923C5F2AFF854155C7486481
Certificate serial:       6A1812A9CF8F5E61F36D0A06379D35B1A73FF7D9
Authority key identifier: 16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32332d3233203d3e20323636393234.roa
Signing time:             Sat 16 Aug 2025 03:25:15 +0000
ROA not before:           Sat 16 Aug 2025 03:20:15 +0000
ROA not after:            Sat 15 Aug 2026 03:25:15 +0000
asID:                     266924
IP address blocks:        45.224.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl
                          rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 22:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:18:12:a9:cf:8f:5e:61:f3:6d:0a:06:37:9d:35:b1:a7:3f:f7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16149638FCC37EDB923C5F2AFF854155C7486481
        Validity
            Not Before: Aug 16 03:20:15 2025 GMT
            Not After : Aug 15 03:25:15 2026 GMT
        Subject: CN=D4AF4BA6287980912DDA5918B051B70D7A05CA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:36:bd:e9:f7:a4:d7:45:ad:36:5d:c1:d1:99:
                    ec:e8:5b:9d:b8:78:bd:d7:ca:b1:f9:57:a0:9b:12:
                    56:7d:b7:4e:e5:46:61:18:5a:7f:2f:c1:e4:8d:58:
                    96:44:70:80:82:61:9e:e7:94:81:50:17:39:d0:4f:
                    18:21:85:66:bf:6d:be:f7:43:f0:60:43:e3:1b:97:
                    87:8f:e1:69:7c:74:b8:a5:52:af:5c:d2:3c:b5:b0:
                    84:2d:7e:03:25:b7:ab:60:bd:6a:af:9b:f6:fa:ab:
                    6d:88:61:04:47:53:53:67:79:50:4e:68:a5:0d:c8:
                    8b:90:d1:6d:68:22:1e:e0:25:7e:9c:53:07:c5:55:
                    20:9d:ae:32:fd:0d:38:94:0d:0a:0e:6e:f7:30:20:
                    6c:13:44:26:90:4a:2c:b3:87:b4:07:22:6b:27:f4:
                    e5:46:a3:21:28:c5:ee:94:82:18:01:38:1f:bb:33:
                    a3:c6:9b:12:0f:6a:15:ca:d3:81:58:df:12:c2:9c:
                    7b:62:a3:8b:b3:60:8d:5d:32:8c:36:ce:7f:de:67:
                    61:d1:5a:20:3c:5f:7f:ce:52:46:58:33:0f:14:61:
                    57:bd:d1:fc:19:06:ec:dc:b5:7c:e6:4f:f4:d7:9a:
                    98:39:45:9e:50:5e:68:46:b1:09:79:e3:54:96:0c:
                    6f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AF:4B:A6:28:79:80:91:2D:DA:59:18:B0:51:B7:0D:7A:05:CA:6E
            X509v3 Authority Key Identifier:
                keyid:16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32332d3233203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:2b:15:e9:29:7f:f7:62:ef:6e:96:c9:96:02:ff:38:0d:0e:
         76:42:2d:0b:90:75:4f:eb:f6:c6:d7:63:30:68:92:0d:63:95:
         04:fc:fd:71:0b:69:63:27:ae:88:fa:37:c9:90:21:01:9d:c4:
         31:4c:d5:c3:2e:78:d1:0f:67:7f:8e:81:5b:d7:a6:52:3d:39:
         57:13:79:c5:e1:a0:ab:0c:a8:bb:5b:6e:cb:4e:30:ce:08:9e:
         a6:3e:34:49:64:9b:91:71:d6:e2:96:c0:63:b6:2c:a2:b1:a7:
         8d:71:74:6c:17:8e:89:52:0b:a0:74:42:3a:dd:9b:a6:93:2b:
         9e:2d:b7:f7:60:d2:da:e1:5d:3f:b5:1b:3c:96:88:1a:8a:5b:
         e0:65:2a:a4:93:1e:f2:70:dd:ee:3e:7f:6d:01:66:00:4f:19:
         e5:62:46:77:69:95:c5:97:1e:19:a8:86:81:78:b3:00:23:3e:
         fd:44:01:53:54:ca:c1:e1:9b:58:d5:ce:b9:56:a8:e4:2a:57:
         7a:cc:b0:ee:d3:7d:54:fd:3c:09:e7:60:a5:14:e4:99:79:f2:
         42:cd:55:50:04:68:e4:99:69:e8:77:cc:0d:c0:c2:b7:31:30:
         4c:dc:f2:13:c8:e6:1d:06:e0:af:e4:ce:5d:ae:bf:7a:80:18:
         de:56:da:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUahgSqc+PXmHzbQoGN501sac/99kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYxNDk2MzhGQ0MzN0VEQjkyM0M1RjJBRkY4NTQxNTVD
NzQ4NjQ4MTAeFw0yNTA4MTYwMzIwMTVaFw0yNjA4MTUwMzI1MTVaMDMxMTAvBgNV
BAMTKEQ0QUY0QkE2Mjg3OTgwOTEyRERBNTkxOEIwNTFCNzBEN0EwNUNBNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcNr3p96TXRa02XcHRmezoW524
eL3XyrH5V6CbElZ9t07lRmEYWn8vweSNWJZEcICCYZ7nlIFQFznQTxghhWa/bb73
Q/BgQ+Mbl4eP4Wl8dLilUq9c0jy1sIQtfgMlt6tgvWqvm/b6q22IYQRHU1NneVBO
aKUNyIuQ0W1oIh7gJX6cUwfFVSCdrjL9DTiUDQoObvcwIGwTRCaQSiyzh7QHImsn
9OVGoyEoxe6UghgBOB+7M6PGmxIPahXK04FY3xLCnHtio4uzYI1dMow2zn/eZ2HR
WiA8X3/OUkZYMw8UYVe90fwZBuzctXzmT/TXmpg5RZ5QXmhGsQl541SWDG+pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1K9Lpih5gJEt2lkYsFG3DXoFym4wHwYDVR0j
BBgwFoAUFhSWOPzDftuSPF8q/4VBVcdIZIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9GYks4V2dZWEJBa0c4UEttZzRBY1Z1Q3VnQzRDd3k1eExHMmkzRVdT
RWMvMC8xNjE0OTYzOEZDQzM3RURCOTIzQzVGMkFGRjg1NDE1NUM3NDg2NDgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2MTQ5NjM4RkNDMzdFREI5
MjNDNUYyQUZGODU0MTU1Qzc0ODY0ODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvRmJLOFdnWVhCQWtHOFBLbWc0QWNWdUN1Z0M0Q3d5NXhMRzJpM0VXU0VjLzAv
MzQzNTJlMzIzMjM0MmUzMzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2
MzkzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLeAgMA0GCSqGSIb3DQEBCwUAA4IBAQAXKxXpKX/3
Yu9ulsmWAv84DQ52Qi0LkHVP6/bG12MwaJINY5UE/P1xC2ljJ66I+jfJkCEBncQx
TNXDLnjRD2d/joFb16ZSPTlXE3nF4aCrDKi7W27LTjDOCJ6mPjRJZJuRcdbilsBj
tiyisaeNcXRsF46JUgugdEI63ZumkyueLbf3YNLa4V0/tRs8logailvgZSqkkx7y
cN3uPn9tAWYATxnlYkZ3aZXFlx4ZqIaBeLMAIz79RAFTVMrB4ZtY1c65VqjkKld6
zLDu031U/TwJ52ClFOSZefJCzVVQBGjkmWnod8wNwMK3MTBM3PITyOYdBuCv5M5d
rr96gBjeVtrY
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:35:48 2025 by rpki-client