Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3139312e3136382e302f32322d3234203d3e203238323031.roa
File:                     34352e3139312e3136382e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          prrJadkIoZm+5cwaPuPiG9MrNBANTx6k3aVZWSlLWw4=
Subject key identifier:   7F:42:BA:C1:9B:D5:8C:1D:2E:E6:0C:CD:6F:94:97:66:CC:B0:10:0B
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       1FD398FEEAC9BA4A24FA61A47D23E2EAC822DF3E
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3139312e3136382e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:26 +0000
ROA not before:           Sat 02 Aug 2025 12:53:26 +0000
ROA not after:            Sat 01 Aug 2026 12:58:26 +0000
asID:                     28201
IP address blocks:        45.191.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d3:98:fe:ea:c9:ba:4a:24:fa:61:a4:7d:23:e2:ea:c8:22:df:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:26 2025 GMT
            Not After : Aug  1 12:58:26 2026 GMT
        Subject: CN=7F42BAC19BD58C1D2EE60CCD6F949766CCB0100B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:df:95:a1:0d:d2:06:19:63:37:d9:47:01:bc:
                    11:35:6b:c7:f7:b4:52:b4:2f:9a:ea:26:04:f9:c3:
                    98:e9:ac:4e:02:ae:17:75:f8:80:c4:5c:8f:25:96:
                    b5:be:83:26:61:1d:d6:33:94:b5:c6:c8:b6:5c:eb:
                    e8:77:5c:76:6b:f3:c6:82:93:22:cb:1a:59:50:84:
                    29:bc:1f:79:1e:97:f6:83:7c:03:2f:c2:bc:4f:9f:
                    4e:0b:98:4f:52:25:93:87:3c:92:0a:2c:7f:5f:e2:
                    43:65:5f:47:00:6a:a7:25:b8:fd:65:f8:21:5d:76:
                    de:c5:2e:04:e0:e3:2d:8a:45:23:16:3b:69:ba:68:
                    40:70:a2:88:eb:de:01:ff:29:e6:fe:f8:38:81:39:
                    c3:78:ea:ce:a1:41:a3:a2:27:07:d1:17:20:61:4e:
                    75:e9:37:74:96:95:63:ac:31:d0:30:7c:57:1b:66:
                    ed:1b:bb:a8:e1:d1:02:89:af:09:86:c9:93:0c:60:
                    3f:22:39:6b:41:47:d1:ef:b0:87:2a:85:d8:e1:9c:
                    ab:70:55:b6:1d:7e:a3:c4:db:a6:52:3d:e3:78:95:
                    27:fe:f5:dd:aa:42:80:d0:48:d5:f1:67:24:32:78:
                    ca:ba:58:83:dc:af:48:23:b9:9a:fb:a8:21:8b:dd:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:42:BA:C1:9B:D5:8C:1D:2E:E6:0C:CD:6F:94:97:66:CC:B0:10:0B
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3139312e3136382e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:75:ca:9d:2f:b9:ec:e5:ec:64:12:69:ec:5c:b2:af:4c:
         90:9d:e7:51:07:fc:fc:02:dd:a3:cd:8b:2f:28:7b:26:62:a7:
         73:b7:8d:6b:c1:9b:aa:02:42:85:e3:26:9b:de:ec:c1:99:ea:
         6f:86:f5:3d:c0:e5:ed:26:2c:47:35:23:89:79:fb:f5:30:6d:
         5e:b4:5f:87:f8:53:77:e7:6d:28:9b:c6:93:64:4b:d4:48:38:
         e8:6d:bb:96:7a:cc:6c:b6:85:d4:5b:36:31:31:ed:ba:54:1f:
         86:fc:f0:f1:29:dc:d7:5b:eb:bf:3b:15:61:17:58:ea:6b:c9:
         39:6e:2a:f9:66:83:d2:46:75:73:1e:30:5d:29:a7:30:47:d8:
         e4:eb:c4:b3:55:7e:69:f1:cc:3f:30:46:28:8b:87:20:72:b9:
         da:e9:09:02:f2:4e:33:9f:de:ff:75:70:05:0a:52:59:e0:ff:
         f1:d1:a8:0f:84:56:be:e4:5c:5f:fc:ea:ed:d1:41:bc:bb:ae:
         d7:38:50:3c:df:ab:5d:40:bd:ca:d4:25:fc:02:a8:e4:f7:31:
         c9:7c:e7:5b:f7:39:9c:c2:b7:de:1c:97:79:d9:70:78:ea:fe:
         a6:68:93:95:46:72:e3:82:b0:6f:34:ea:c5:6b:bb:f0:b8:e1:
         23:21:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:13:09 2025 by rpki-client