Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32322d3332203d3e20323638353738.roa
File:                     34352e3136332e3137362e302f32322d3332203d3e20323638353738.roa (raw, json)
Hash identifier:          gnntwG26jgFqUQsWWg5GeY6h2MJCY108gK0ydNlpcls=
Subject key identifier:   A7:4C:DC:81:D9:6E:16:F5:ED:86:C7:D9:9D:80:00:B5:CC:6F:48:59
Certificate issuer:       /CN=AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624
Certificate serial:       4F57F252ACBD3273546B1A3FC5CF5ED60DB5DAE7
Authority key identifier: AC:5B:09:55:2A:68:EA:DD:67:DD:35:DE:88:EC:BD:0C:5D:B9:D6:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32322d3332203d3e20323638353738.roa
Signing time:             Tue 10 Jun 2025 20:41:57 +0000
ROA not before:           Tue 10 Jun 2025 20:36:57 +0000
ROA not after:            Tue 09 Jun 2026 20:41:57 +0000
asID:                     268578
IP address blocks:        45.163.176.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 07:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:57:f2:52:ac:bd:32:73:54:6b:1a:3f:c5:cf:5e:d6:0d:b5:da:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624
        Validity
            Not Before: Jun 10 20:36:57 2025 GMT
            Not After : Jun  9 20:41:57 2026 GMT
        Subject: CN=A74CDC81D96E16F5ED86C7D99D8000B5CC6F4859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:a4:b3:3a:fb:ee:76:1e:a4:bf:02:9b:52:
                    65:62:09:26:8e:6e:2a:df:69:66:3b:c4:8e:1e:b4:
                    02:ee:eb:ce:6f:a2:10:28:3b:b6:be:95:f3:3b:cf:
                    1c:83:25:a4:3a:ae:a6:9c:e7:a1:12:0d:85:8f:8b:
                    ff:31:07:ed:1b:dc:de:49:0e:ea:6f:b2:de:ae:9f:
                    03:b7:05:b8:c3:3c:ba:c3:fc:b7:bc:4a:2e:e4:da:
                    12:bf:4d:a5:a7:36:55:50:87:70:7a:42:64:5d:cc:
                    9d:4e:e8:4f:f7:a1:43:d4:a4:d9:9a:01:01:66:38:
                    e4:e0:d2:e7:e4:42:97:b8:f3:4d:75:9f:59:0b:ba:
                    49:04:05:c4:23:d0:87:7b:4e:d2:4b:d7:6c:48:9b:
                    39:d5:97:80:66:fb:b9:6b:ab:fc:99:3e:03:6b:73:
                    e0:06:cd:17:03:ea:39:16:32:4e:01:1d:46:93:1e:
                    26:d7:94:4c:a7:db:13:b0:e7:f8:0a:85:e9:d2:73:
                    21:c0:a2:47:78:23:a2:89:e5:f7:05:42:1a:6b:01:
                    71:24:2b:a1:1e:d9:fd:07:57:fa:3f:72:4b:ac:64:
                    59:42:94:8c:24:1a:59:59:1b:f6:91:43:c7:a0:11:
                    36:ed:87:a6:3f:1b:ec:81:24:ca:53:50:28:9d:20:
                    39:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4C:DC:81:D9:6E:16:F5:ED:86:C7:D9:9D:80:00:B5:CC:6F:48:59
            X509v3 Authority Key Identifier:
                keyid:AC:5B:09:55:2A:68:EA:DD:67:DD:35:DE:88:EC:BD:0C:5D:B9:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32322d3332203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:a2:13:be:63:bd:e7:21:7b:12:ac:75:3c:ba:89:ae:e8:1d:
         7b:da:f7:ff:97:60:31:87:9e:c2:94:ee:00:7e:ba:10:32:c4:
         2e:95:6a:93:0f:c5:a6:01:8d:97:58:c1:1c:9f:5d:a6:cd:93:
         6b:96:8f:88:f8:29:83:3f:72:b1:75:7f:24:b0:92:54:04:3d:
         ea:49:ae:ec:b9:87:06:cf:22:89:9b:4f:db:ff:96:ac:56:93:
         11:d6:cb:12:ef:69:ac:63:d4:8e:bf:c1:cd:f3:ee:8b:0f:1f:
         ff:b5:be:04:1c:ab:de:0f:1e:3f:4b:7d:60:b7:50:64:8e:5b:
         6f:b0:0d:c0:db:05:e1:43:48:d2:d5:e9:47:8f:7a:e3:eb:da:
         7b:b6:84:f8:66:02:87:1d:b2:56:a1:8b:11:55:35:88:b7:96:
         5e:70:ee:30:04:71:77:1f:ea:71:41:0c:b5:1e:29:83:a2:d5:
         4c:e7:b5:a4:ee:fc:0b:f7:4d:35:03:5a:8c:85:62:26:3d:59:
         e9:84:79:86:68:b8:e9:d8:2d:55:e0:94:7c:13:bd:62:4b:ec:
         4d:20:95:01:0e:c3:a9:07:01:44:94:b1:0e:67:f8:6d:29:86:
         01:e4:26:d6:67:48:b8:45:31:26:fc:8e:f5:53:dc:53:50:12:
         5f:6f:33:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:21:13 2025 by rpki-client