Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3331203d3e20323638313531.roa
File:                     34352e3137302e37362e302f32322d3331203d3e20323638313531.roa (raw, json)
Hash identifier:          uec0xoqZSRRguGHLXhKbOzpM/8EOQ0HDs9J4vnyFaa0=
Subject key identifier:   D6:76:B7:84:34:AF:33:23:A7:8E:B8:FA:B9:8D:D7:B0:31:EA:F9:26
Certificate issuer:       /CN=E11E6683597C8BDD4CA32F5407D91168F5C3A87C
Certificate serial:       A451A6EF705AB772E81C58DCC781B19492C2E2
Authority key identifier: E1:1E:66:83:59:7C:8B:DD:4C:A3:2F:54:07:D9:11:68:F5:C3:A8:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3331203d3e20323638313531.roa
Signing time:             Tue 12 Aug 2025 20:24:51 +0000
ROA not before:           Tue 12 Aug 2025 20:19:51 +0000
ROA not after:            Tue 11 Aug 2026 20:24:51 +0000
asID:                     268151
IP address blocks:        45.170.76.0/22 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.crl
                          rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 20:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a4:51:a6:ef:70:5a:b7:72:e8:1c:58:dc:c7:81:b1:94:92:c2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E11E6683597C8BDD4CA32F5407D91168F5C3A87C
        Validity
            Not Before: Aug 12 20:19:51 2025 GMT
            Not After : Aug 11 20:24:51 2026 GMT
        Subject: CN=D676B78434AF3323A78EB8FAB98DD7B031EAF926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:49:fa:b9:0d:9e:6c:a7:d8:fb:a3:c8:35:0f:
                    a7:93:75:d3:4d:df:bc:41:8a:97:40:16:6e:26:0e:
                    02:43:9a:86:9b:1e:84:a7:92:4b:dd:a6:7a:25:bc:
                    dd:14:67:ab:ac:47:14:83:45:42:35:63:92:ce:0f:
                    40:a2:df:ef:94:90:99:8e:75:93:0c:73:48:32:72:
                    3a:81:52:f4:c0:4b:e7:1e:21:b7:07:aa:73:10:92:
                    d0:42:00:07:30:a8:56:f4:4a:34:24:61:84:94:90:
                    14:74:90:e4:2d:56:b3:a1:2e:0b:03:88:d1:a8:5e:
                    e8:9f:59:1f:29:a6:f4:7f:89:8d:16:3c:78:46:d2:
                    ab:1e:f9:0a:27:e1:33:53:88:8b:f1:ab:83:77:b2:
                    7a:7b:21:62:e6:95:de:a9:ba:65:80:6d:c4:9f:fe:
                    71:c7:24:1b:f2:4b:1f:8e:24:b9:c3:5f:cb:e5:8f:
                    11:ea:71:39:9d:cc:20:7b:54:77:92:66:ee:e6:3e:
                    29:ac:0f:57:12:29:92:96:4f:1b:8a:2d:ba:42:d7:
                    52:31:fc:1d:52:d7:e8:88:6d:b5:3c:82:5b:8c:31:
                    78:31:da:72:4d:58:e3:6f:7d:a3:5d:03:0a:06:c5:
                    33:d0:8d:3b:f7:30:bb:be:de:47:98:68:5b:94:03:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:76:B7:84:34:AF:33:23:A7:8E:B8:FA:B9:8D:D7:B0:31:EA:F9:26
            X509v3 Authority Key Identifier:
                keyid:E1:1E:66:83:59:7C:8B:DD:4C:A3:2F:54:07:D9:11:68:F5:C3:A8:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11E6683597C8BDD4CA32F5407D91168F5C3A87C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3331203d3e20323638313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:d9:f6:ea:61:da:11:a7:56:ee:b9:67:6d:a6:3c:7f:29:a0:
         64:a0:f7:40:cb:ce:b6:79:19:92:10:8b:c3:a6:f4:c4:90:6a:
         42:6a:2e:54:2b:bf:76:81:9c:3c:a1:1e:fa:71:3f:bc:dc:5e:
         6e:97:db:fb:e8:e3:9b:cd:fa:cc:d0:8b:b4:59:85:d1:e0:13:
         db:22:59:f8:e9:f2:c6:3f:42:a1:29:0c:31:d6:1d:ba:a0:8b:
         b1:0b:3a:2b:33:c7:ed:79:f7:24:ef:a4:77:a3:a8:60:1b:8d:
         1e:35:d8:dd:ea:6a:d4:6d:17:61:73:21:d5:13:d4:7a:07:bc:
         9e:dd:ac:1f:d7:76:c1:81:53:cf:7a:74:b8:0b:a8:ed:ba:10:
         f5:21:28:b8:85:38:24:a4:fa:59:6c:87:75:06:ba:a2:b7:34:
         99:64:79:a4:3f:3b:82:56:77:66:29:ed:fc:06:82:fa:fb:8c:
         32:09:d6:df:be:13:7e:50:0d:f1:58:83:e2:21:50:58:38:cc:
         93:32:53:fb:a4:da:a3:85:e1:3e:c0:33:5b:62:52:a5:6a:86:
         a8:31:01:63:3a:13:9f:89:f3:e9:c3:5c:85:dd:ea:af:84:18:
         bf:d2:18:5e:fb:ea:cf:4e:dd:25:60:fa:b0:3b:c5:6b:a2:37:
         71:57:e1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:35:30 2025 by rpki-client