Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/34352e3233362e35322e302f32322d3234203d3e20323638323231.roa
File:                     34352e3233362e35322e302f32322d3234203d3e20323638323231.roa (raw, json)
Hash identifier:          p4cStahjzanX1Fh2b6m7xOpr0igEiG+yub20WRyPgoE=
Subject key identifier:   01:ED:7D:05:C4:10:6E:F3:4E:41:41:E0:CB:BA:21:8E:C4:01:43:D7
Certificate issuer:       /CN=7FA9BF9F12750C277B09128D03E40ED5D7E48CEF
Certificate serial:       5F60922D812E5107D38FF636F2045133DECAB857
Authority key identifier: 7F:A9:BF:9F:12:75:0C:27:7B:09:12:8D:03:E4:0E:D5:D7:E4:8C:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/34352e3233362e35322e302f32322d3234203d3e20323638323231.roa
Signing time:             Mon 29 Sep 2025 17:37:16 +0000
ROA not before:           Mon 29 Sep 2025 17:32:16 +0000
ROA not after:            Mon 28 Sep 2026 17:37:16 +0000
asID:                     268221
IP address blocks:        45.236.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.crl
                          rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:60:92:2d:81:2e:51:07:d3:8f:f6:36:f2:04:51:33:de:ca:b8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA9BF9F12750C277B09128D03E40ED5D7E48CEF
        Validity
            Not Before: Sep 29 17:32:16 2025 GMT
            Not After : Sep 28 17:37:16 2026 GMT
        Subject: CN=01ED7D05C4106EF34E4141E0CBBA218EC40143D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:94:35:82:fe:87:cb:46:17:b6:e9:d1:17:f2:
                    6b:f4:ae:c6:dd:82:3c:61:27:eb:6f:fb:a5:32:21:
                    15:68:0b:a2:f1:d2:3e:bc:c0:37:71:8f:f5:d5:2a:
                    8f:7c:aa:7c:31:1b:74:7b:64:3c:e3:b3:99:36:73:
                    8a:83:11:a7:76:de:6c:28:26:29:8f:0f:58:41:2a:
                    43:df:74:29:fd:98:2e:f3:d6:da:83:75:ad:35:ea:
                    38:e1:15:57:08:ed:eb:2b:4c:8f:9d:60:01:42:c2:
                    ef:9f:00:9b:63:cb:61:ce:3a:8f:95:da:fa:6d:eb:
                    8e:93:dc:35:27:fd:ef:32:32:2c:f3:59:69:38:7d:
                    2f:55:03:b4:df:e2:9c:2a:d3:67:95:fe:22:41:29:
                    01:20:43:fe:8a:fb:b5:e8:24:08:1c:3a:e5:87:08:
                    98:1b:cc:88:9a:77:e8:0c:a0:9b:09:bd:5d:fb:28:
                    cd:d3:c8:ea:a4:4b:c7:9f:d2:2b:7e:2e:08:eb:20:
                    87:83:39:39:fe:5f:ce:b9:85:d2:c9:5f:ad:f8:3b:
                    61:17:fc:8b:9f:56:32:32:1b:7e:f7:32:5b:13:2c:
                    20:e1:24:40:71:23:d2:21:5e:3d:45:f5:a2:1b:fd:
                    fc:20:35:bb:83:62:2b:24:6f:cf:9d:22:1e:43:64:
                    98:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:ED:7D:05:C4:10:6E:F3:4E:41:41:E0:CB:BA:21:8E:C4:01:43:D7
            X509v3 Authority Key Identifier:
                keyid:7F:A9:BF:9F:12:75:0C:27:7B:09:12:8D:03:E4:0E:D5:D7:E4:8C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/34352e3233362e35322e302f32322d3234203d3e20323638323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:df:1a:31:cc:d3:1a:ee:d5:24:26:93:63:67:8f:2e:06:84:
         9d:ff:a4:3a:73:b0:2f:1a:d1:41:b7:25:20:33:aa:a5:9b:47:
         7b:64:c6:ce:9c:03:a7:0e:6a:04:1c:61:2d:a9:34:6c:23:91:
         da:fc:da:4f:1c:0a:08:e4:68:12:5a:27:a3:2e:75:ca:29:14:
         da:3f:e6:4e:46:44:46:01:da:fa:73:3e:de:d5:4c:28:44:f8:
         af:23:b9:9d:5e:a0:f0:ef:ee:0e:02:6e:7e:3e:47:f4:8c:24:
         96:dc:e3:3c:3e:06:32:85:3b:36:80:bc:a4:65:20:37:87:cd:
         88:8f:fa:e5:79:91:e5:cb:32:ac:3b:b3:9a:ec:84:d4:24:b2:
         69:b1:b4:8e:92:19:2b:fb:e8:39:54:01:f1:f7:4f:31:ee:75:
         10:f6:47:41:a4:36:c6:64:ad:92:8e:9d:d7:15:a0:fc:bb:35:
         9c:90:3e:e3:0d:11:0d:79:f8:a3:ec:56:f6:2a:13:76:e1:a4:
         1e:91:47:61:e8:23:97:2d:2e:2e:36:98:9a:24:79:70:ab:66:
         d0:c2:bb:e9:9f:36:f2:c9:29:22:9d:d7:a7:dd:4b:05:c4:9c:
         0c:fd:20:c5:f3:1a:66:3e:4c:ac:5e:0e:5a:e5:9d:f4:45:1a:
         47:82:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:18:03 2025 by rpki-client