Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa
File:                     34352e3136372e35342e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier:          wfKcP07VpZsQphkTt/txJi4vz+qGZfE7Y7puXLgwU5g=
Subject key identifier:   82:51:DE:50:83:B0:BA:6B:2A:F2:AA:98:6A:93:45:79:03:52:7E:19
Certificate issuer:       /CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
Certificate serial:       41BE16D4DA69FE17A644E8FD87E90E4437646322
Authority key identifier: 18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa
Signing time:             Tue 03 Jun 2025 16:01:49 +0000
ROA not before:           Tue 03 Jun 2025 15:56:49 +0000
ROA not after:            Tue 02 Jun 2026 16:01:49 +0000
asID:                     267991
IP address blocks:        45.167.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:be:16:d4:da:69:fe:17:a6:44:e8:fd:87:e9:0e:44:37:64:63:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
        Validity
            Not Before: Jun  3 15:56:49 2025 GMT
            Not After : Jun  2 16:01:49 2026 GMT
        Subject: CN=8251DE5083B0BA6B2AF2AA986A93457903527E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:74:b4:22:35:15:7b:10:6e:84:b4:0d:dd:17:
                    92:c4:56:c8:23:6c:dd:3e:36:74:db:f8:94:aa:69:
                    13:07:70:c1:42:f8:e2:09:05:79:31:64:04:8a:fd:
                    6d:00:34:44:f8:a2:3b:3b:66:3e:06:7e:ff:77:9b:
                    db:d7:59:1f:80:58:25:87:1d:84:02:d0:b6:96:22:
                    b2:d2:88:88:2b:e5:01:b1:f7:48:94:17:8c:e3:8f:
                    cb:f8:9e:ce:7a:1a:77:57:7f:6e:b1:5e:1a:a1:9b:
                    00:3a:52:00:6e:97:51:38:f1:de:79:4e:b2:fd:6b:
                    75:d8:af:25:2f:48:c9:bd:b7:34:c4:f4:53:6c:35:
                    5a:6c:15:e7:20:bf:11:f3:07:5a:09:46:da:c9:1e:
                    c8:df:73:76:5b:40:34:1f:ed:88:36:28:af:81:08:
                    76:48:8d:94:43:c1:2d:cd:3c:3b:71:d7:06:a9:4a:
                    63:5e:9e:fd:b4:05:40:80:71:17:3d:96:59:5e:d6:
                    e0:0a:db:03:38:bc:f7:d2:13:32:95:92:d2:ba:a4:
                    93:3e:f2:d5:f4:95:1a:6e:30:10:8b:ce:3c:34:28:
                    be:76:32:28:23:e2:93:88:40:4a:04:af:f3:cf:24:
                    c2:fb:f6:34:3e:c5:aa:27:94:3c:19:62:76:c0:ef:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:51:DE:50:83:B0:BA:6B:2A:F2:AA:98:6A:93:45:79:03:52:7E:19
            X509v3 Authority Key Identifier:
                keyid:18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:87:32:37:2e:ad:fd:b8:68:d6:7b:87:1f:55:53:a5:41:21:
         db:47:2c:62:b2:c5:ce:2e:d2:98:66:a4:82:e6:c8:d0:d1:9a:
         70:94:02:90:fa:b6:43:be:63:bd:3a:3b:ec:f4:f0:e4:91:43:
         be:7c:58:ba:44:b0:5b:ee:1d:f5:d2:05:3a:32:fd:ea:46:b4:
         95:4b:d6:0c:55:af:d3:4d:f7:24:4f:50:a9:3c:f6:45:fd:3a:
         6e:ec:eb:00:d8:0e:83:4d:ea:ac:45:6d:9b:4d:af:31:1d:b5:
         91:16:c2:ae:6d:59:0f:8e:c6:5e:6f:e9:37:5f:9c:c4:a7:19:
         65:97:d9:98:fe:bc:b2:ff:f4:9b:bb:2d:c0:4c:37:84:ad:4d:
         0c:e3:87:44:a8:52:a9:27:07:c9:b9:90:da:fb:49:43:2b:37:
         a2:f4:03:81:f0:8e:ae:38:bd:25:94:0e:55:04:04:ce:72:97:
         d0:f7:aa:fe:eb:26:04:d2:59:ef:b2:85:d1:6d:9c:86:3b:13:
         06:04:a4:30:eb:49:d4:39:4e:da:29:42:11:d7:d3:bf:81:39:
         8a:16:28:0c:5c:6a:50:49:3e:25:b6:f4:f9:63:57:0a:c0:f8:
         71:ae:2c:f5:83:0f:ef:6b:27:80:b4:cb:e5:6a:c5:21:3f:60:
         f9:06:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:43:36 2025 by rpki-client