Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234302e302f32342d3234203d3e20323639313434.roa
File:                     34352e3137392e3234302e302f32342d3234203d3e20323639313434.roa (raw, json)
Hash identifier:          aYYF6p60XYcZXBC4If38JNW2cQJvC9ikzCJX8HTuei0=
Subject key identifier:   16:AA:08:62:B6:F8:B4:7C:82:85:82:54:FD:D9:53:92:77:FA:E7:EA
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       1F374EF5EC3F1060D2FEFA7774409A9981B0AFEA
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234302e302f32342d3234203d3e20323639313434.roa
Signing time:             Mon 30 Jun 2025 17:40:30 +0000
ROA not before:           Mon 30 Jun 2025 17:35:30 +0000
ROA not after:            Mon 29 Jun 2026 17:40:30 +0000
asID:                     269144
IP address blocks:        45.179.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 19:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:37:4e:f5:ec:3f:10:60:d2:fe:fa:77:74:40:9a:99:81:b0:af:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Jun 30 17:35:30 2025 GMT
            Not After : Jun 29 17:40:30 2026 GMT
        Subject: CN=16AA0862B6F8B47C82858254FDD9539277FAE7EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:db:91:48:63:b2:db:79:62:bc:9d:7c:84:35:
                    ed:c5:d3:0a:86:68:04:bb:51:b8:05:b1:58:a9:25:
                    56:79:a7:13:4f:43:f9:ba:f7:b0:13:a4:df:df:6e:
                    79:ef:10:de:eb:b6:90:84:19:0c:76:e6:25:aa:d7:
                    dc:ae:21:f4:c6:b1:bd:27:d8:58:63:ca:40:80:09:
                    ad:1f:ae:0b:ff:be:c4:55:ca:bb:64:d7:2f:f4:7b:
                    c7:99:c3:a5:77:92:9d:b1:62:89:54:81:e2:44:9d:
                    3b:1d:fb:dd:8d:d0:10:7d:01:f2:b8:b7:56:fb:e1:
                    79:e5:f8:6e:7e:0b:53:81:10:6d:23:bb:0a:f5:f6:
                    21:3d:5a:34:ab:00:52:dd:b4:83:03:93:3f:86:35:
                    07:22:da:98:30:16:0b:df:39:b4:63:14:a8:56:fb:
                    52:e3:f8:bc:19:04:98:ab:1e:11:ea:cb:74:95:ff:
                    09:c9:5c:83:b1:bc:57:ac:2d:f8:68:4e:e6:9c:39:
                    8c:b6:39:74:d0:3b:83:fc:48:25:d3:20:59:d3:58:
                    d0:08:c4:da:94:db:1a:da:6e:c2:a2:5a:dc:fb:19:
                    98:10:de:36:71:69:c4:ae:31:3a:68:cb:50:31:eb:
                    48:98:0d:df:be:47:89:6a:19:67:34:f9:f5:c0:bb:
                    b0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AA:08:62:B6:F8:B4:7C:82:85:82:54:FD:D9:53:92:77:FA:E7:EA
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/34352e3137392e3234302e302f32342d3234203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:c3:dc:0a:ad:36:5b:1d:f6:7e:0d:1f:32:d4:c1:9a:3a:dc:
         92:38:bc:4d:ca:d2:b0:16:be:ab:49:cd:c7:60:d3:7b:23:d7:
         e7:24:d1:20:d5:d6:68:fa:78:fd:49:3d:7a:e3:61:fd:6a:cd:
         f6:e9:0a:10:76:93:bc:e4:3a:1f:c5:84:d1:c7:b4:cd:c5:9d:
         f8:0f:35:c2:f6:7d:d4:bd:47:8c:6a:15:58:f1:83:e3:16:fb:
         3f:16:42:9e:1e:89:f4:2f:cc:21:00:37:4a:5a:e9:22:32:79:
         67:c5:12:82:3c:d3:71:c4:64:b7:f7:b4:9f:80:d9:2b:ac:ba:
         a4:c2:3f:9f:52:96:ab:63:b0:09:88:cd:54:c0:ed:6e:03:94:
         93:f8:07:4e:b4:84:e9:23:dd:e2:e4:ad:4f:ee:d2:df:dd:36:
         f5:ce:5e:30:ef:a0:28:84:cf:22:ec:f5:f6:62:48:f2:63:2f:
         c6:75:ae:50:a8:4f:be:e0:db:b1:fe:c9:75:06:54:36:bd:e7:
         58:2c:38:bc:7c:04:fc:18:77:03:a2:02:ef:ce:bf:4e:74:41:
         94:b0:cf:f3:d9:a9:93:c4:35:c0:f3:7b:ad:94:40:6a:77:5f:
         38:1d:ff:c4:50:19:a6:da:51:f9:1a:7d:5b:c8:61:88:4a:c7:
         86:89:15:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:09:45 2025 by rpki-client