Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/34352e3138342e36352e302f32342d3234203d3e20323639333230.roa
File:                     34352e3138342e36352e302f32342d3234203d3e20323639333230.roa (raw, json)
Hash identifier:          IW+2aNRxVEOI9InSzFnLJEL7K5OYFMJhlE5yXsQ7fUQ=
Subject key identifier:   52:15:63:A8:68:0C:E2:05:2D:0E:08:86:0E:AB:EF:26:A3:23:69:CA
Certificate issuer:       /CN=F196A9AF2ABCCD8F3406AD535AF560447E07E6E7
Certificate serial:       68B4A95E43FB11F0240D1A8523E47B9C0535F141
Authority key identifier: F1:96:A9:AF:2A:BC:CD:8F:34:06:AD:53:5A:F5:60:44:7E:07:E6:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/34352e3138342e36352e302f32342d3234203d3e20323639333230.roa
Signing time:             Wed 05 Mar 2025 20:56:08 +0000
ROA not before:           Wed 05 Mar 2025 20:51:08 +0000
ROA not after:            Wed 04 Mar 2026 20:56:08 +0000
asID:                     269320
IP address blocks:        45.184.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.crl
                          rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b4:a9:5e:43:fb:11:f0:24:0d:1a:85:23:e4:7b:9c:05:35:f1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F196A9AF2ABCCD8F3406AD535AF560447E07E6E7
        Validity
            Not Before: Mar  5 20:51:08 2025 GMT
            Not After : Mar  4 20:56:08 2026 GMT
        Subject: CN=521563A8680CE2052D0E08860EABEF26A32369CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c7:3c:c6:17:5a:df:07:14:ec:44:36:ca:db:
                    1c:b2:c0:d8:a0:5f:75:37:0c:d7:8b:b7:0a:fe:93:
                    86:ec:5a:0b:80:fd:aa:82:7e:48:e0:a5:f5:34:e8:
                    db:2a:89:e5:91:79:f2:c9:e7:5c:1c:f0:d7:3f:b3:
                    70:99:27:cb:ef:ab:4b:0f:2b:49:b4:60:20:b8:46:
                    a2:e1:02:1d:b1:3a:e0:ec:4f:a1:c9:d3:cb:e4:f8:
                    28:94:ba:5f:c9:86:e7:69:1b:d9:30:65:65:b0:1b:
                    29:c4:f2:9e:88:55:48:e8:8f:57:d2:52:d7:8c:6f:
                    97:e1:0b:55:b5:01:9e:8d:80:4d:b3:01:b2:67:4e:
                    ad:87:a0:57:82:e4:92:7c:5f:fa:ed:57:54:06:86:
                    0e:85:60:ad:aa:40:1b:b9:93:de:d1:ca:62:83:74:
                    29:96:df:ff:f8:8b:60:0d:dd:1e:a9:2c:63:b7:c3:
                    55:63:35:47:69:b5:26:dc:ac:1c:29:30:9a:98:c2:
                    e1:27:85:15:91:58:2a:3c:70:89:7c:0c:28:60:e4:
                    f9:53:38:f5:1f:59:99:04:2d:ce:f6:46:b0:d0:c4:
                    d3:16:ec:e5:e8:93:4f:46:9c:72:0c:02:8d:d4:bf:
                    10:5b:72:bb:9b:cc:64:55:b8:ec:fb:4d:32:92:81:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:63:A8:68:0C:E2:05:2D:0E:08:86:0E:AB:EF:26:A3:23:69:CA
            X509v3 Authority Key Identifier:
                keyid:F1:96:A9:AF:2A:BC:CD:8F:34:06:AD:53:5A:F5:60:44:7E:07:E6:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/34352e3138342e36352e302f32342d3234203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:78:24:de:3b:a4:a8:27:43:b8:f2:45:99:b2:8f:75:41:9f:
         af:1a:3d:54:0a:02:8d:9b:df:fe:98:96:33:c4:1f:1f:ea:48:
         89:e1:ae:d3:eb:16:af:f3:84:83:38:b5:d2:b2:97:67:8d:c1:
         39:46:b4:9e:cc:5f:cd:fb:f9:5a:62:18:87:46:8e:49:34:d9:
         99:f1:6d:25:07:36:70:a4:90:13:8d:53:5b:33:8b:6d:6b:8f:
         0b:1f:c6:3f:c8:65:c8:15:8a:c9:0d:a0:d4:59:18:ca:d7:94:
         10:9b:fc:1c:18:80:b8:28:ad:a5:f4:9a:7b:8b:86:6e:1a:11:
         0a:f3:86:2f:71:76:70:e3:f9:f3:5a:8f:bf:6b:39:eb:ca:f9:
         f3:ef:1b:8c:32:90:33:9a:2c:d0:74:f2:8f:b1:b9:33:95:64:
         29:82:cd:ba:c2:f9:f2:6a:87:ef:47:19:4c:41:85:67:66:5e:
         4a:32:d9:a8:a4:71:9b:d7:31:d4:4c:f5:b7:b3:83:a7:4d:37:
         e1:a2:9e:a0:22:7f:be:d9:bd:ff:fe:60:16:b8:a9:9e:86:ca:
         5b:32:d8:ae:90:dd:d4:14:f4:f9:4f:c7:0a:82:1c:4c:a3:8f:
         de:2f:5e:74:63:4d:84:b8:ca:1b:26:b0:85:55:ad:ad:69:94:
         c9:de:ab:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:50:14 2025 by rpki-client