Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35332e302f32342d3234203d3e20323639343131.roa
File:                     34352e3138362e35332e302f32342d3234203d3e20323639343131.roa (raw, json)
Hash identifier:          Rf6JTFKyLoZUhIJ2IJaSmiyvD28PWlomi9mCwUmQknc=
Subject key identifier:   7A:9D:65:93:EB:4D:CC:12:EF:96:B9:9A:AD:E1:F6:36:26:D5:46:24
Certificate issuer:       /CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
Certificate serial:       7969A7CE6AB20C837AE18078CCBE0CD3F4538BD4
Authority key identifier: 91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35332e302f32342d3234203d3e20323639343131.roa
Signing time:             Thu 19 Jun 2025 13:13:08 +0000
ROA not before:           Thu 19 Jun 2025 13:08:08 +0000
ROA not after:            Thu 18 Jun 2026 13:13:08 +0000
asID:                     269411
IP address blocks:        45.186.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 22:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:69:a7:ce:6a:b2:0c:83:7a:e1:80:78:cc:be:0c:d3:f4:53:8b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
        Validity
            Not Before: Jun 19 13:08:08 2025 GMT
            Not After : Jun 18 13:13:08 2026 GMT
        Subject: CN=7A9D6593EB4DCC12EF96B99AADE1F63626D54624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:fd:40:a9:1b:15:fe:17:ab:7d:f2:65:53:
                    24:35:17:ef:43:08:d8:0f:51:7f:2f:f0:4b:34:76:
                    f0:10:31:29:ff:16:07:84:ca:5d:cd:0f:57:78:4f:
                    b0:ff:87:09:18:aa:d3:7b:9e:55:3b:ef:38:7e:7c:
                    31:ec:db:35:41:50:ad:97:f1:4b:c7:99:d8:9c:08:
                    85:28:f8:b8:c8:ac:79:eb:c5:b1:28:8c:30:f9:e4:
                    70:5f:91:d8:c5:8a:99:8a:d9:7f:d3:59:97:27:b2:
                    a0:39:76:9e:e4:6e:7a:32:32:35:61:1e:1c:ff:86:
                    9b:4f:ef:cf:a8:da:2f:f8:d3:c3:c3:5b:1e:1d:0c:
                    4d:43:98:b6:aa:42:7b:3a:93:3f:4d:d4:43:ec:f7:
                    8a:26:8d:b5:62:0e:e3:94:42:61:08:1e:15:ae:8f:
                    33:a0:90:26:07:9a:2c:f1:41:08:38:01:f9:52:39:
                    99:e7:01:09:3c:25:9b:7c:d1:2a:c3:5b:64:fc:41:
                    36:f9:6b:4e:b3:2d:82:b5:01:b5:99:39:c6:4e:bc:
                    ab:4a:1b:c6:af:c1:af:1e:da:ba:08:da:c3:43:64:
                    9e:1f:6c:c4:fb:77:9c:9d:3c:96:0e:db:58:91:01:
                    50:83:18:ec:c4:4d:43:5f:d2:d1:a5:28:fc:3b:b8:
                    b7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9D:65:93:EB:4D:CC:12:EF:96:B9:9A:AD:E1:F6:36:26:D5:46:24
            X509v3 Authority Key Identifier:
                keyid:91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35332e302f32342d3234203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:c1:ea:e0:56:eb:15:ca:09:9e:30:c2:91:20:98:98:4d:28:
         34:14:d3:61:b7:8e:3a:bd:90:71:fd:e8:e8:fb:9b:68:13:e0:
         16:a3:df:91:cf:94:54:70:93:09:02:bf:31:66:b1:1c:4f:90:
         28:b1:2c:83:a0:72:4c:b7:c2:2c:f9:bd:02:8c:d9:25:d0:dc:
         39:0a:96:95:88:08:ce:da:35:b5:96:2e:05:91:02:c5:36:a5:
         e9:2b:50:24:8f:3b:09:4f:bf:23:13:5e:f6:b0:ac:d7:e5:6c:
         f2:d8:d6:44:ab:f5:05:37:da:2e:7a:5b:d9:1f:fc:c9:47:0c:
         c2:58:2d:8e:fd:e2:7e:78:cd:45:41:9c:17:a4:a5:9d:cc:63:
         4d:94:45:7c:c7:b8:80:70:eb:fb:7f:01:58:8c:d9:bf:8b:3d:
         8a:1a:03:fa:2b:87:0a:5c:cc:33:17:21:f5:af:01:6f:57:fc:
         6e:ee:6f:43:41:82:5b:af:e1:12:04:3a:32:c0:5e:89:4e:9b:
         de:9d:f3:ef:38:d5:a6:46:af:f0:69:bb:77:0e:b7:af:8c:4d:
         70:b4:37:30:e2:22:37:7e:94:a9:37:f1:97:9c:87:71:d7:ab:
         ca:d4:45:a5:e6:ea:e2:40:2b:00:33:e1:aa:b6:f1:8f:40:16:
         c6:3e:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:20:46 2025 by rpki-client