Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e372e3231322e302f32322d3234203d3e203238323031.roa
File:                     34352e372e3231322e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          MEzItdwX28lTBELdfTDe/+bFXYva7CxPtbyzjRnR2jg=
Subject key identifier:   15:B2:E4:AD:5C:A2:93:FE:01:2E:59:1A:A3:D1:B4:4D:65:A2:1F:94
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       783D0BBF73A773E9B271F0956BA95C0296B33EF3
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e372e3231322e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:25 +0000
ROA not before:           Sat 02 Aug 2025 12:53:25 +0000
ROA not after:            Sat 01 Aug 2026 12:58:25 +0000
asID:                     28201
IP address blocks:        45.7.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3d:0b:bf:73:a7:73:e9:b2:71:f0:95:6b:a9:5c:02:96:b3:3e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:25 2025 GMT
            Not After : Aug  1 12:58:25 2026 GMT
        Subject: CN=15B2E4AD5CA293FE012E591AA3D1B44D65A21F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:65:5e:14:29:1a:41:be:39:ef:21:15:be:
                    1e:0e:74:46:39:d3:a8:e7:4f:30:5c:90:3a:95:3a:
                    99:24:6f:5e:52:38:a3:9b:6c:a4:ae:86:3d:3d:61:
                    77:a6:ac:80:48:3b:94:85:1f:37:94:db:66:57:dd:
                    c4:fe:f3:33:a9:4e:4f:89:56:2a:76:c0:b6:c9:3e:
                    75:51:7f:89:f1:13:b2:90:ed:78:8b:9a:10:3d:ac:
                    0c:d0:13:a5:67:67:09:8e:da:f3:8e:b8:16:a5:7b:
                    5f:6e:ca:99:11:01:00:a6:09:93:58:7c:a2:a4:72:
                    ff:20:2d:ce:56:1d:e0:f9:71:b8:5e:94:f5:fb:81:
                    3d:f3:b2:2a:64:28:12:c6:27:3d:ca:af:8e:59:77:
                    12:bf:68:9a:35:5d:40:13:1b:16:c7:40:16:0f:10:
                    ce:bd:93:b2:43:0e:5a:a7:37:e6:b4:49:07:e3:14:
                    99:82:fb:9e:bb:03:76:4f:b1:04:fc:bc:20:ed:3b:
                    b8:33:33:82:ec:05:4e:e4:e1:9a:2d:9a:71:49:de:
                    bb:91:30:4c:b9:5c:8f:9d:95:bf:8c:e8:43:be:75:
                    cc:7e:26:c3:fd:20:4b:b2:c8:6e:e7:32:69:20:f9:
                    04:7c:7a:b5:f9:48:a3:84:dc:94:3e:6a:c0:50:1e:
                    5d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B2:E4:AD:5C:A2:93:FE:01:2E:59:1A:A3:D1:B4:4D:65:A2:1F:94
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e372e3231322e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:9d:6a:a4:75:15:11:bb:7f:3d:06:80:db:ad:6b:db:76:db:
         bb:c1:df:2a:ae:48:42:bc:dd:a8:be:72:bd:02:41:51:95:d2:
         e3:20:e2:87:aa:b0:5a:0c:9d:cd:f3:4d:2a:59:11:ff:78:aa:
         21:75:3e:6c:2f:22:c0:f2:b7:1f:21:34:11:8a:49:55:8f:d3:
         22:3b:4f:a5:49:f9:da:07:f8:d5:ae:d8:3a:76:1a:fc:34:fd:
         c1:3b:f3:56:00:12:e0:0d:40:18:8b:bf:e8:04:fb:0e:3c:6e:
         2b:7f:64:99:5e:64:14:c2:6e:1d:a4:e3:a3:65:d3:41:25:72:
         5a:64:47:a4:9e:9e:92:3b:bd:e8:39:f6:56:8c:14:23:a3:c4:
         a1:95:33:d0:32:fe:79:ac:99:0f:30:a6:52:b1:98:5a:b2:dc:
         6b:eb:42:8c:e0:b2:27:04:3b:26:4b:48:4e:25:a2:71:97:7e:
         8e:90:f8:9a:ea:fd:d4:98:7f:eb:33:67:f3:dd:b6:48:d9:58:
         2e:8b:e4:ea:a7:fb:5f:46:ee:d2:45:35:d0:12:d1:ef:2a:c4:
         4f:24:ca:c9:c4:52:50:6d:a4:f5:51:67:e1:76:81:2d:a6:66:
         a1:b0:a4:73:6c:3e:06:d3:9a:fd:95:f6:f4:00:be:4e:36:0a:
         60:5b:c4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:58:39 2025 by rpki-client