Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137352e302f32342d3234203d3e20323638353536.roa
File:                     34352e3136332e3137352e302f32342d3234203d3e20323638353536.roa (raw, json)
Hash identifier:          ypzqCsgDHJw4O0UoSLDejaEIjeP0DwC8Kx9HH124tik=
Subject key identifier:   27:6C:B0:7C:9B:C0:5B:CA:3D:71:96:28:A8:E4:1C:88:27:4E:14:CB
Certificate issuer:       /CN=78FAEDBB051194630540EEEFB7EB5EDD6D083EE5
Certificate serial:       6E298B2CA26E2D636EAD4D8A93D02FAE1150D217
Authority key identifier: 78:FA:ED:BB:05:11:94:63:05:40:EE:EF:B7:EB:5E:DD:6D:08:3E:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137352e302f32342d3234203d3e20323638353536.roa
Signing time:             Mon 30 Jun 2025 12:55:32 +0000
ROA not before:           Mon 30 Jun 2025 12:50:32 +0000
ROA not after:            Mon 29 Jun 2026 12:55:32 +0000
asID:                     268556
IP address blocks:        45.163.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.crl
                          rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 04:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:29:8b:2c:a2:6e:2d:63:6e:ad:4d:8a:93:d0:2f:ae:11:50:d2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78FAEDBB051194630540EEEFB7EB5EDD6D083EE5
        Validity
            Not Before: Jun 30 12:50:32 2025 GMT
            Not After : Jun 29 12:55:32 2026 GMT
        Subject: CN=276CB07C9BC05BCA3D719628A8E41C88274E14CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:6e:f0:0c:db:83:fd:52:f0:67:40:80:3b:
                    68:01:d8:7a:d9:85:c6:7e:81:b5:a4:3c:fd:8a:29:
                    b5:5a:f0:b5:1f:3c:e7:ef:4d:e6:46:9b:8a:6e:76:
                    2c:cf:a9:54:70:71:47:06:6e:56:95:2e:a1:13:bc:
                    d7:a1:8a:59:80:20:36:08:dd:32:e5:da:ab:2f:7b:
                    b3:87:36:80:45:c2:4d:e5:79:33:e3:6e:a1:03:e3:
                    aa:63:b4:b8:85:ca:fb:2f:b7:39:0d:7f:c3:ee:71:
                    cf:e3:c3:d4:6a:9c:04:76:98:d6:1a:bc:1c:80:ed:
                    e5:0a:d5:b5:b2:88:42:57:d2:f2:e6:58:c4:98:9b:
                    16:45:5b:41:0e:60:87:5e:59:ae:03:34:4e:91:3f:
                    3e:cc:dd:70:34:2f:b2:43:f6:53:9d:b6:00:e2:0f:
                    b7:8c:b4:59:d5:80:0a:4e:c7:09:3a:36:30:c7:a7:
                    a1:91:d7:30:a5:fd:3f:77:bc:6a:1c:85:ed:ff:7d:
                    1c:c7:ef:cf:ab:8c:1a:bd:0b:c6:ed:e4:9d:2a:c0:
                    63:39:7c:87:89:e8:23:1a:50:89:1d:30:75:6e:6b:
                    31:e9:1e:7a:9a:c1:2e:23:0a:2b:e0:f9:2f:81:34:
                    54:89:61:35:36:8e:83:06:0f:03:87:d1:e1:63:7d:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6C:B0:7C:9B:C0:5B:CA:3D:71:96:28:A8:E4:1C:88:27:4E:14:CB
            X509v3 Authority Key Identifier:
                keyid:78:FA:ED:BB:05:11:94:63:05:40:EE:EF:B7:EB:5E:DD:6D:08:3E:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137352e302f32342d3234203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:29:5c:bf:85:f9:74:8d:b3:23:fb:4b:62:eb:aa:f5:ef:ed:
         78:9b:da:70:8a:0d:32:a9:c6:16:0b:f1:2b:0d:bc:06:0b:43:
         47:90:c2:c4:cf:10:7a:01:99:be:4e:8c:b9:8b:9b:68:e8:e7:
         4e:33:46:fe:06:88:9b:16:ef:59:bd:7f:f9:c3:4d:4e:fa:8b:
         d0:d1:36:21:3a:c9:1e:c1:d9:ec:5f:ea:80:d0:5e:40:72:2b:
         3c:86:3d:d7:09:d8:b1:e7:3d:57:bf:5b:91:09:81:e9:40:14:
         fa:79:b0:56:ba:17:a7:ba:52:cb:76:4c:db:f2:a3:bc:38:21:
         67:9c:63:76:a9:aa:5c:f1:15:51:2f:38:f6:25:3e:45:4d:a3:
         db:01:60:16:a9:25:94:61:2f:33:98:c5:63:5f:53:ec:f4:dc:
         26:ea:97:6a:e6:2e:81:87:5d:02:38:a9:50:ff:51:46:5d:76:
         77:30:99:d3:99:48:63:fa:6b:d6:b4:c7:f8:c0:4e:b1:d7:e6:
         ad:de:d0:28:79:cc:0c:35:0f:bf:07:36:a6:f5:c2:ac:3d:46:
         6c:86:5f:1c:dd:71:b1:fa:ff:0c:64:ff:07:d6:78:4e:a3:79:
         67:3a:d8:ea:95:5c:05:c0:0d:44:82:48:2b:cb:07:83:62:08:
         00:69:21:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 18:42:58 2025 by rpki-client