Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/34352e3139302e36302e302f32322d3234203d3e20323639363230.roa
File:                     34352e3139302e36302e302f32322d3234203d3e20323639363230.roa (raw, json)
Hash identifier:          3aDx5UZaj+G6Hj4U7BqRJhhXqMlJ5AieeStZgv6QJ24=
Subject key identifier:   E1:50:9B:5F:90:B3:AC:44:49:3D:AA:5F:0E:E1:83:4A:80:E6:BB:0B
Certificate issuer:       /CN=594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D
Certificate serial:       63695C6815744C1250621569CF2BCDB6E8972AEF
Authority key identifier: 59:4C:6F:1C:FD:DD:89:3E:BE:5B:4B:CD:19:CF:53:B6:0A:96:D4:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/34352e3139302e36302e302f32322d3234203d3e20323639363230.roa
Signing time:             Tue 14 Oct 2025 01:09:33 +0000
ROA not before:           Tue 14 Oct 2025 01:04:33 +0000
ROA not after:            Tue 13 Oct 2026 01:09:33 +0000
asID:                     269620
IP address blocks:        45.190.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.crl
                          rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 02:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:69:5c:68:15:74:4c:12:50:62:15:69:cf:2b:cd:b6:e8:97:2a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D
        Validity
            Not Before: Oct 14 01:04:33 2025 GMT
            Not After : Oct 13 01:09:33 2026 GMT
        Subject: CN=E1509B5F90B3AC44493DAA5F0EE1834A80E6BB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:16:0c:55:e2:00:6a:4e:c5:de:eb:4f:8e:
                    bd:5a:26:fb:8c:6c:26:ac:2d:1c:38:be:cd:97:39:
                    e7:e1:21:7f:df:5a:01:28:3a:52:89:17:7a:c1:9e:
                    e5:e0:f9:96:c0:ba:66:68:84:c3:0c:81:1a:90:25:
                    30:09:bd:03:e6:46:21:78:fa:6a:e0:a6:3f:09:2f:
                    70:80:c7:d0:d6:9e:52:b1:d4:c6:2a:fd:53:e6:95:
                    7f:d5:34:a7:98:c3:39:99:03:da:2d:91:13:88:e4:
                    90:e9:af:bf:49:b1:bb:09:e0:c6:a0:df:e3:e0:da:
                    80:d1:7e:a3:54:24:d8:ab:99:51:b2:98:1b:87:75:
                    35:ed:52:81:90:e6:59:b5:1f:3a:05:0f:35:c3:4c:
                    c9:e4:01:b6:43:48:c2:a3:c4:9b:dc:fe:38:3a:97:
                    3b:d5:ef:87:4c:7c:f0:4b:91:f1:30:83:99:65:6e:
                    6b:01:1a:1d:2a:fe:97:43:e6:45:be:af:1a:50:bc:
                    61:99:59:53:e0:04:cf:32:fe:79:f4:de:03:88:35:
                    0f:d9:ab:4c:cc:fc:40:aa:c0:ac:f1:ad:eb:ba:3e:
                    d4:df:30:29:40:7b:c8:9f:79:18:81:76:d4:22:52:
                    fc:c7:d7:56:a4:35:10:ec:3c:89:ca:42:b1:86:3f:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:50:9B:5F:90:B3:AC:44:49:3D:AA:5F:0E:E1:83:4A:80:E6:BB:0B
            X509v3 Authority Key Identifier:
                keyid:59:4C:6F:1C:FD:DD:89:3E:BE:5B:4B:CD:19:CF:53:B6:0A:96:D4:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/34352e3139302e36302e302f32322d3234203d3e20323639363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:f8:5b:eb:92:7a:72:15:3e:9f:b4:a0:60:20:5b:f7:c0:df:
         7a:a5:81:a7:9d:2a:8c:5a:d8:e8:bf:6e:1a:e3:39:ef:43:0e:
         33:c3:a6:3e:5c:a1:c9:40:22:22:8e:a6:f4:26:5e:1e:b3:c0:
         a9:84:d7:1b:cf:f5:3b:34:51:25:76:d5:0e:42:7b:c7:ae:1d:
         ed:6a:c6:4e:5c:77:96:e2:39:c7:c0:bc:dc:05:2b:c4:bd:bb:
         a3:8b:50:7a:76:3f:b6:04:28:3f:a2:87:48:3b:dd:c2:04:bc:
         b7:02:f8:7d:b6:41:a2:1f:de:72:e2:8c:36:ae:86:fa:e6:2d:
         be:d9:3e:15:80:7c:18:c7:51:70:79:87:f3:b5:9a:ea:28:55:
         85:59:3e:8a:5d:a4:7d:a4:4f:91:54:e2:2b:67:e0:3a:ed:aa:
         b7:18:ba:f8:32:dc:62:25:f6:ee:78:3b:58:f2:93:d3:84:14:
         28:73:6f:41:45:ec:3a:e9:bf:6e:ff:d5:5a:68:a1:7c:bd:55:
         01:ae:cc:5f:51:e9:90:25:a7:ac:24:f9:85:f0:04:82:45:8c:
         7d:38:dc:78:4f:ce:2f:ca:c8:5c:9c:20:8e:bd:0b:1d:f7:a0:
         4b:15:ac:39:24:b2:4f:18:2c:df:5f:a7:e8:51:22:9e:b7:7c:
         da:8b:22:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:29:36 2025 by rpki-client