Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232342e302f32342d3234203d3e20323639343035.roa
File:                     34352e3138352e3232342e302f32342d3234203d3e20323639343035.roa (raw, json)
Hash identifier:          IzUodAAgb3Za2ovtjCw1i7hFGIxOTGi9rO9P+mpTY9Q=
Subject key identifier:   54:2E:2B:28:C3:23:C7:53:7F:57:51:FE:27:EB:1B:33:CA:E4:39:A0
Certificate issuer:       /CN=748041F88BBB1083E96FEC5DCF73AE0E40DA21EE
Certificate serial:       2C681AEB7FCF3DDB1C2679EFF49ECFC6EA079EBA
Authority key identifier: 74:80:41:F8:8B:BB:10:83:E9:6F:EC:5D:CF:73:AE:0E:40:DA:21:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232342e302f32342d3234203d3e20323639343035.roa
Signing time:             Thu 12 Jun 2025 13:02:52 +0000
ROA not before:           Thu 12 Jun 2025 12:57:52 +0000
ROA not after:            Thu 11 Jun 2026 13:02:52 +0000
asID:                     269405
IP address blocks:        45.185.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.crl
                          rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 23:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:68:1a:eb:7f:cf:3d:db:1c:26:79:ef:f4:9e:cf:c6:ea:07:9e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748041F88BBB1083E96FEC5DCF73AE0E40DA21EE
        Validity
            Not Before: Jun 12 12:57:52 2025 GMT
            Not After : Jun 11 13:02:52 2026 GMT
        Subject: CN=542E2B28C323C7537F5751FE27EB1B33CAE439A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:93:ce:e7:27:47:76:79:73:97:e6:21:01:67:
                    48:3f:23:52:4d:c3:2e:37:7c:87:5d:5c:b7:3d:e9:
                    74:a6:94:ed:11:59:3d:ae:2c:8d:7a:ec:dd:44:db:
                    57:2a:ce:42:c6:09:c5:5e:86:cb:ba:5b:5e:f6:51:
                    41:0c:07:5c:14:2c:38:e3:a8:e1:ed:e4:e3:7d:38:
                    35:c6:07:2c:d2:d8:a5:89:56:e9:9f:a5:30:7b:5f:
                    97:41:96:dc:68:be:df:43:14:ab:9d:a8:da:55:5d:
                    62:7c:97:3f:35:73:c8:50:6e:87:d0:78:de:68:e8:
                    5f:eb:bf:1c:8b:92:af:07:0c:5f:cf:1a:1b:c7:94:
                    b8:61:8e:b0:84:91:b9:22:d4:e5:36:ad:b5:02:e0:
                    99:c7:48:48:46:1b:ab:d8:e4:4f:df:c0:30:04:03:
                    96:d7:49:4b:c1:f1:5e:a8:24:3f:11:19:ec:c1:de:
                    39:43:6b:fe:30:19:02:37:24:52:2e:7e:3d:10:02:
                    40:fc:09:e5:7e:af:e5:5a:e0:0a:f5:75:4e:2b:89:
                    b1:e2:e5:2e:26:af:f4:d2:04:b5:c2:64:61:64:74:
                    57:63:8e:9d:80:b8:cb:8d:6a:c9:18:f3:fb:d1:28:
                    4d:60:c0:df:ca:d9:6f:2b:23:09:0e:c2:bd:36:a4:
                    42:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2E:2B:28:C3:23:C7:53:7F:57:51:FE:27:EB:1B:33:CA:E4:39:A0
            X509v3 Authority Key Identifier:
                keyid:74:80:41:F8:8B:BB:10:83:E9:6F:EC:5D:CF:73:AE:0E:40:DA:21:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232342e302f32342d3234203d3e20323639343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:b5:9d:b1:b3:13:9f:7d:83:15:cb:6c:84:3e:6b:9b:eb:9d:
         06:6a:73:44:bd:52:cd:c5:be:2b:80:7b:b3:33:a4:64:95:48:
         63:c8:49:e1:b5:07:16:72:25:9b:e1:65:01:9a:35:46:b1:5f:
         27:02:0f:c9:e5:2f:78:c0:18:d7:76:b5:52:8a:de:23:10:d7:
         e7:be:52:b9:9b:52:0c:b3:97:8f:f1:ca:bc:15:43:56:f1:2a:
         37:4e:4a:a4:92:08:ca:a9:91:b1:e8:5c:f4:21:b9:97:cb:c3:
         35:2b:c0:b0:7a:be:90:44:89:a1:7c:ec:0d:5a:81:c7:2c:83:
         a0:ae:ec:57:a7:d9:14:eb:3e:e1:9d:1c:4b:54:f3:d2:53:bf:
         75:f0:bf:82:06:37:b8:7f:67:8c:29:d9:72:09:86:f9:ca:02:
         c8:03:4c:22:f0:20:ae:6e:68:a2:ba:81:72:fb:fc:33:ed:1a:
         04:7d:2e:21:e6:a7:e1:ec:a1:f6:a8:94:1f:10:be:c9:2b:75:
         b5:f9:60:91:79:00:a8:60:e1:d4:07:ce:d4:39:ac:53:03:0c:
         f8:3b:db:34:32:5b:ce:44:8a:73:3f:c1:f2:1b:e1:8b:68:4c:
         bc:66:04:b5:6d:86:0f:c4:90:bb:25:73:f4:58:0a:88:99:14:
         ac:51:8b:4e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULGga63/PPdscJnnv9J7PxuoHnrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ4MDQxRjg4QkJCMTA4M0U5NkZFQzVEQ0Y3M0FFMEU0
MERBMjFFRTAeFw0yNTA2MTIxMjU3NTJaFw0yNjA2MTExMzAyNTJaMDMxMTAvBgNV
BAMTKDU0MkUyQjI4QzMyM0M3NTM3RjU3NTFGRTI3RUIxQjMzQ0FFNDM5QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAk87nJ0d2eXOX5iEBZ0g/I1JN
wy43fIddXLc96XSmlO0RWT2uLI167N1E21cqzkLGCcVehsu6W172UUEMB1wULDjj
qOHt5ON9ODXGByzS2KWJVumfpTB7X5dBltxovt9DFKudqNpVXWJ8lz81c8hQbofQ
eN5o6F/rvxyLkq8HDF/PGhvHlLhhjrCEkbki1OU2rbUC4JnHSEhGG6vY5E/fwDAE
A5bXSUvB8V6oJD8RGezB3jlDa/4wGQI3JFIufj0QAkD8CeV+r+Va4Ar1dU4ribHi
5S4mr/TSBLXCZGFkdFdjjp2AuMuNaskY8/vRKE1gwN/K2W8rIwkOwr02pEJRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVC4rKMMjx1N/V1H+J+sbM8rkOaAwHwYDVR0j
BBgwFoAUdIBB+Iu7EIPpb+xdz3OuDkDaIe4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmlteGVybUJtOGhVTUNEZ3hzZWJodVZDcE52NWk4bXVTWndHcmhoa290
eTkvMC83NDgwNDFGODhCQkIxMDgzRTk2RkVDNURDRjczQUUwRTQwREEyMUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0ODA0MUY4OEJCQjEwODNF
OTZGRUM1RENGNzNBRTBFNDBEQTIxRUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JpbXhlcm1CbThoVU1DRGd4c2ViaHVWQ3BOdjVpOG11U1p3R3JoaGtvdHk5LzAv
MzQzNTJlMzEzODM1MmUzMjMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtueAwDQYJKoZIhvcNAQELBQADggEBABm1nbGz
E599gxXLbIQ+a5vrnQZqc0S9Us3FviuAe7MzpGSVSGPISeG1BxZyJZvhZQGaNUax
XycCD8nlL3jAGNd2tVKK3iMQ1+e+UrmbUgyzl4/xyrwVQ1bxKjdOSqSSCMqpkbHo
XPQhuZfLwzUrwLB6vpBEiaF87A1agccsg6Cu7Fen2RTrPuGdHEtU89JTv3Xwv4IG
N7h/Z4wp2XIJhvnKAsgDTCLwIK5uaKK6gXL7/DPtGgR9LiHmp+HsofaolB8Qvskr
dbX5YJF5AKhg4dQHztQ5rFMDDPg72zQyW85EinM/wfIb4YtoTLxmBLVthg/EkLsl
c/RYCoiZFKxRi04=
-----END CERTIFICATE-----
Generated at Mon Jun 30 10:44:04 2025 by rpki-client