Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32322d3332203d3e20323638383538.roa
File:                     34352e3137342e3136302e302f32322d3332203d3e20323638383538.roa (raw, json)
Hash identifier:          5/jG8HLN1W+nkoWh3ZfVCI84kr9p7tBy0V9EiDSk+5M=
Subject key identifier:   23:BA:A8:3B:BA:30:2D:F9:A3:C7:78:FF:B9:FA:A8:F4:33:43:49:BE
Certificate issuer:       /CN=75F0A578EF73000E0BC94C22C498C2A32C2A6F61
Certificate serial:       566FB5BDDA4F1ED6FACBE318EC7049B27D54E7AF
Authority key identifier: 75:F0:A5:78:EF:73:00:0E:0B:C9:4C:22:C4:98:C2:A3:2C:2A:6F:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75F0A578EF73000E0BC94C22C498C2A32C2A6F61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32322d3332203d3e20323638383538.roa
Signing time:             Fri 27 Jun 2025 11:15:01 +0000
ROA not before:           Fri 27 Jun 2025 11:10:01 +0000
ROA not after:            Fri 26 Jun 2026 11:15:01 +0000
asID:                     268858
IP address blocks:        45.174.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/75F0A578EF73000E0BC94C22C498C2A32C2A6F61.crl
                          rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/75F0A578EF73000E0BC94C22C498C2A32C2A6F61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75F0A578EF73000E0BC94C22C498C2A32C2A6F61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 11:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6f:b5:bd:da:4f:1e:d6:fa:cb:e3:18:ec:70:49:b2:7d:54:e7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75F0A578EF73000E0BC94C22C498C2A32C2A6F61
        Validity
            Not Before: Jun 27 11:10:01 2025 GMT
            Not After : Jun 26 11:15:01 2026 GMT
        Subject: CN=23BAA83BBA302DF9A3C778FFB9FAA8F4334349BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:87:29:2b:c7:00:11:d4:1c:aa:ce:75:cd:c9:
                    e3:4c:e0:b3:a4:63:83:12:ab:ff:f8:96:d4:76:41:
                    61:d3:e1:3c:de:40:92:f7:ca:6f:38:9d:86:02:b7:
                    2f:7a:82:c2:fa:06:ed:f2:e1:20:b2:bb:ce:82:98:
                    a7:57:aa:b3:a8:0b:7f:ce:6c:36:7c:9f:0e:3e:ab:
                    21:5b:d2:5f:35:c2:32:66:ff:e7:ed:4d:f3:d3:de:
                    13:54:01:ff:33:26:35:1d:ff:78:f2:b6:80:88:e3:
                    81:f3:f3:3a:77:21:31:d6:43:db:f2:cb:9a:7e:8e:
                    35:74:96:ed:6f:5f:d4:65:54:68:f8:7f:88:44:eb:
                    a4:48:4c:3a:b1:c8:c2:c9:72:eb:d1:14:5c:0a:3e:
                    78:b6:2f:9a:c8:c2:ef:99:66:3e:08:4b:d9:0d:76:
                    ee:0f:fa:11:99:18:fb:bd:24:85:e0:de:8a:a3:8d:
                    9e:60:92:98:f1:1b:bc:09:bf:97:9d:18:9a:4b:df:
                    90:dd:78:23:c5:88:7d:00:71:da:32:99:c0:e3:ba:
                    3b:94:89:52:18:ee:c7:f5:d5:e8:e0:9d:9e:89:6f:
                    c4:7f:6a:4c:0d:fe:43:0a:57:f6:97:b2:6b:23:84:
                    bb:c8:7c:a5:62:a7:f4:8a:01:cf:37:65:52:86:74:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BA:A8:3B:BA:30:2D:F9:A3:C7:78:FF:B9:FA:A8:F4:33:43:49:BE
            X509v3 Authority Key Identifier:
                keyid:75:F0:A5:78:EF:73:00:0E:0B:C9:4C:22:C4:98:C2:A3:2C:2A:6F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/75F0A578EF73000E0BC94C22C498C2A32C2A6F61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75F0A578EF73000E0BC94C22C498C2A32C2A6F61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32322d3332203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:ba:e1:6d:fa:28:77:72:9f:17:b0:ad:8b:1b:9a:cc:b3:10:
         bb:67:b2:22:58:40:3f:c3:9e:cd:cf:10:9b:55:a8:8a:d5:f8:
         00:39:e0:bc:ca:f9:23:8e:74:13:be:43:e4:d0:76:e9:14:06:
         bd:db:18:cd:ee:32:73:f2:21:64:cb:d4:7e:38:87:6b:0c:ea:
         37:14:bb:aa:f5:ee:be:a0:37:28:75:0d:1c:c5:83:23:d9:ce:
         1e:85:26:68:e4:6b:54:31:c7:4c:95:7f:fb:33:c8:6c:e9:e7:
         be:e5:34:40:86:fb:d9:d4:48:02:c1:69:4c:a2:c6:af:1c:d6:
         71:f2:df:60:ce:d8:b4:21:68:e3:3c:b0:cb:8b:1d:a8:55:dd:
         f4:b6:2b:f7:6a:cd:26:07:2c:78:88:05:e9:44:9c:19:06:cd:
         e9:47:83:ec:96:c2:3c:6f:83:29:e1:4a:30:14:1f:99:f0:87:
         e4:4b:9f:6e:41:55:ac:1b:1a:9a:a3:cb:68:b5:08:66:54:ca:
         3f:d0:ad:41:ba:35:dd:12:cc:06:5c:fb:68:38:8c:89:ed:5e:
         af:f4:cd:60:d6:a6:31:26:35:31:2f:a1:cf:78:73:78:f9:8f:
         90:89:e7:9a:fe:f0:cd:fa:c2:0e:c8:39:71:b2:6d:75:36:14:
         fc:3b:96:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:14:40 2025 by rpki-client