Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa
File:                     34352e3138372e33322e302f32322d3234203d3e20323639353234.roa (raw, json)
Hash identifier:          howQKS0OzpLigGMgEr0ZRFoC1I2DAgEs2WKJqF5Als4=
Subject key identifier:   E1:4F:A2:DF:45:36:9D:92:E8:A9:0F:F0:0B:57:66:FA:7B:74:1E:A2
Certificate issuer:       /CN=BC6184C5FCD673F65B0D49766B9FBE7FE20551B9
Certificate serial:       51DD62C7CFF682380384EE4D97E5588C57AD11E6
Authority key identifier: BC:61:84:C5:FC:D6:73:F6:5B:0D:49:76:6B:9F:BE:7F:E2:05:51:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa
Signing time:             Tue 14 Oct 2025 13:55:02 +0000
ROA not before:           Tue 14 Oct 2025 13:50:02 +0000
ROA not after:            Tue 13 Oct 2026 13:55:02 +0000
asID:                     269524
IP address blocks:        45.187.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.crl
                          rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:dd:62:c7:cf:f6:82:38:03:84:ee:4d:97:e5:58:8c:57:ad:11:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6184C5FCD673F65B0D49766B9FBE7FE20551B9
        Validity
            Not Before: Oct 14 13:50:02 2025 GMT
            Not After : Oct 13 13:55:02 2026 GMT
        Subject: CN=E14FA2DF45369D92E8A90FF00B5766FA7B741EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:9b:6f:d8:5f:90:91:e4:c6:a4:b2:17:a0:
                    c5:e2:a3:08:ae:26:4a:79:de:fc:9b:2a:cf:91:9a:
                    36:4a:b9:e4:1f:b3:ff:60:fc:8e:1e:83:a4:73:e9:
                    33:64:21:83:bd:ad:6c:5b:0a:14:7e:40:50:1e:fa:
                    d4:59:1e:b3:9d:62:d4:2a:96:32:09:21:b2:45:98:
                    b5:76:9e:2b:55:2f:ed:48:8c:4d:1d:d6:c0:b0:8b:
                    e1:25:eb:14:e3:5d:ab:23:b5:13:7b:a4:17:88:39:
                    9a:66:3c:3b:df:76:8e:52:db:af:59:e8:52:45:77:
                    67:31:92:8b:e4:9f:ea:67:09:2c:38:27:72:5f:95:
                    8d:01:72:61:ed:13:d6:23:06:f0:27:78:50:8b:5d:
                    a4:d9:93:85:a2:4b:13:02:41:79:01:83:78:f0:b4:
                    47:30:e3:fb:8c:e0:e9:e7:b2:d0:b3:c7:72:41:a4:
                    d7:c0:d5:6d:dd:17:85:a7:e7:be:bb:4b:aa:92:90:
                    95:ad:eb:34:63:8f:c5:e2:98:79:08:0e:28:e4:80:
                    49:4a:1f:12:4d:e2:e4:b4:d8:ba:e5:48:d6:3a:15:
                    f9:92:09:d0:3c:f2:9d:31:53:0a:4e:32:3f:3b:6f:
                    f5:a9:82:c4:81:c0:d6:0f:7a:9c:23:c5:a3:b3:0a:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4F:A2:DF:45:36:9D:92:E8:A9:0F:F0:0B:57:66:FA:7B:74:1E:A2
            X509v3 Authority Key Identifier:
                keyid:BC:61:84:C5:FC:D6:73:F6:5B:0D:49:76:6B:9F:BE:7F:E2:05:51:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:63:3f:1a:e9:ce:4a:73:6e:c8:9f:36:12:1a:ce:ee:af:95:
         6d:63:f1:df:43:53:90:27:39:51:6a:90:e2:44:59:ae:91:9f:
         b5:7f:2a:e7:51:6a:44:60:cb:09:ff:4e:9a:c9:9d:86:77:cf:
         b4:94:38:85:fc:89:5d:16:f1:be:cc:1f:7a:02:97:77:c0:81:
         b9:83:55:16:7b:6f:5f:c0:ad:66:c2:56:4a:25:d2:f5:28:dd:
         55:06:62:3d:47:d9:79:0d:9a:24:42:e5:50:6d:e8:14:56:e2:
         85:d0:7d:c3:63:38:cd:26:60:22:55:cb:bb:86:5d:e9:f2:ca:
         44:9d:ab:da:9d:18:de:d2:c7:7f:62:33:d1:42:f6:36:69:2b:
         a7:f0:e4:7d:50:ed:62:5e:fd:cf:1e:3e:ac:73:77:44:eb:be:
         9b:11:77:80:10:f4:06:49:74:d3:60:b9:e1:62:64:14:64:aa:
         5d:65:c2:2c:27:3f:f3:7b:ed:94:08:b8:75:43:2c:f4:96:e2:
         52:fa:db:67:e6:44:5e:bc:cd:8c:97:98:75:98:fd:3d:05:07:
         ae:ca:c9:4f:12:9f:e4:92:3d:65:c6:8f:68:5b:5e:76:8d:2e:
         d7:a2:f5:c2:73:54:7a:8f:82:6e:08:48:7c:5c:76:ab:16:f7:
         4f:ae:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:10 2025 by rpki-client