Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35352e302f32342d3234203d3e20323639343131.roa
File:                     34352e3138362e35352e302f32342d3234203d3e20323639343131.roa (raw, json)
Hash identifier:          YewQLpGVtKfuNXkWOoCQdBK+8lwUnd8GvZJvb8DB5Gk=
Subject key identifier:   62:1E:75:34:C1:E0:0A:FD:FC:87:F9:30:BF:46:7D:67:C0:CD:B2:95
Certificate issuer:       /CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
Certificate serial:       2C35833A1217103E55C36084BF9DA167736B66B7
Authority key identifier: 91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35352e302f32342d3234203d3e20323639343131.roa
Signing time:             Thu 19 Jun 2025 13:13:08 +0000
ROA not before:           Thu 19 Jun 2025 13:08:08 +0000
ROA not after:            Thu 18 Jun 2026 13:13:08 +0000
asID:                     269411
IP address blocks:        45.186.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 22:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:35:83:3a:12:17:10:3e:55:c3:60:84:bf:9d:a1:67:73:6b:66:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
        Validity
            Not Before: Jun 19 13:08:08 2025 GMT
            Not After : Jun 18 13:13:08 2026 GMT
        Subject: CN=621E7534C1E00AFDFC87F930BF467D67C0CDB295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:2f:ce:35:99:72:e6:8c:69:2c:b3:2c:0b:
                    8b:90:7f:34:ce:f0:38:9c:87:a5:54:5f:87:fd:31:
                    00:74:38:09:4e:8e:55:93:9b:eb:44:d6:79:0b:ac:
                    20:27:dd:9b:81:34:d1:1a:ff:eb:46:3a:d1:31:6d:
                    b1:4c:f3:cd:f7:52:f3:4c:b4:41:d9:ea:a5:b5:be:
                    a6:9a:1c:4c:29:ca:9c:55:97:10:a3:6c:de:37:bd:
                    59:1a:a0:c5:90:2c:a0:91:05:6d:98:95:09:12:58:
                    05:8c:02:0f:41:cd:fa:b3:ff:d0:f5:3b:a4:b7:26:
                    dd:71:3c:a0:46:c5:63:6e:1f:b6:eb:38:70:87:96:
                    70:19:5d:9d:6c:05:15:d6:8f:1d:e5:fe:5c:8c:94:
                    1d:45:68:75:01:f1:e9:72:d0:5b:32:22:7c:81:00:
                    e6:1a:2c:35:c9:74:fb:8a:9b:65:6d:b0:86:04:34:
                    72:0b:9f:db:a4:f8:22:67:91:64:92:87:ea:98:0c:
                    86:cc:60:56:0e:69:f2:01:e3:c4:4b:43:55:1d:ce:
                    aa:73:12:a3:13:04:79:71:3a:59:86:ed:54:7b:7b:
                    7e:4a:93:8c:10:9a:d5:3a:6b:5c:e8:4b:ba:5f:1b:
                    76:30:93:03:ef:23:b4:79:87:56:26:9e:3b:ba:f5:
                    78:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1E:75:34:C1:E0:0A:FD:FC:87:F9:30:BF:46:7D:67:C0:CD:B2:95
            X509v3 Authority Key Identifier:
                keyid:91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35352e302f32342d3234203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:84:e4:2b:e3:38:59:99:84:be:73:c9:67:53:ce:e9:3e:
         c3:4a:dd:db:89:68:ad:9a:fe:5d:bc:d3:63:05:d6:a0:9a:82:
         4b:d8:c4:5b:f3:ef:04:c2:a0:b2:45:6e:82:38:c6:4a:cd:8c:
         93:80:81:35:2a:e2:aa:31:4f:a5:83:7a:ca:ca:1e:f7:15:19:
         9f:e4:07:68:40:aa:f1:e8:08:30:39:fc:4b:84:c1:31:78:87:
         3e:75:33:95:92:a3:07:8f:2d:01:3e:b2:f1:b7:98:0c:61:e2:
         12:3f:a8:cd:b8:dd:cc:3c:64:c9:dd:86:10:72:7e:fb:9c:59:
         a9:07:d2:89:e5:3a:b2:e0:70:6c:33:21:df:e8:24:94:15:0e:
         ab:aa:e4:72:37:24:0e:22:8b:78:a0:e9:51:64:8b:ea:6e:76:
         ee:c7:28:02:fb:4a:ce:33:3d:a8:b4:ab:a1:f8:7d:4d:2c:70:
         d1:0b:44:8e:46:06:2b:85:c4:ab:3d:1f:e7:dc:c3:d8:a0:4c:
         ff:83:40:a9:91:e9:1f:ab:68:b7:53:85:b7:42:cd:2a:f7:0c:
         97:d3:21:8a:de:09:d6:af:ec:3d:4b:64:9e:3a:10:8f:8c:7f:
         05:9c:21:fa:ab:1f:20:7e:30:30:f6:09:50:af:8a:7a:36:81:
         74:4e:75:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:19:49 2025 by rpki-client