Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/34352e37312e3234342e302f32322d3234203d3e20323637363531.roa
File:                     34352e37312e3234342e302f32322d3234203d3e20323637363531.roa (raw, json)
Hash identifier:          4cX0URDJfWFyFZFWjO+qWEUpcWbC/Fn45chDKvUm4Tk=
Subject key identifier:   74:59:2E:90:05:2A:ED:30:EB:82:00:5B:56:0B:C8:43:56:4C:86:85
Certificate issuer:       /CN=B0CABD054E1BB6477F4EC5D7A434233DF6100BCB
Certificate serial:       1F839D76EEE09A2AE01C40F7D8CD448E68DD8FA1
Authority key identifier: B0:CA:BD:05:4E:1B:B6:47:7F:4E:C5:D7:A4:34:23:3D:F6:10:0B:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CABD054E1BB6477F4EC5D7A434233DF6100BCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/34352e37312e3234342e302f32322d3234203d3e20323637363531.roa
Signing time:             Fri 06 Jun 2025 14:00:44 +0000
ROA not before:           Fri 06 Jun 2025 13:55:44 +0000
ROA not after:            Fri 05 Jun 2026 14:00:44 +0000
asID:                     267651
IP address blocks:        45.71.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/B0CABD054E1BB6477F4EC5D7A434233DF6100BCB.crl
                          rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/B0CABD054E1BB6477F4EC5D7A434233DF6100BCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CABD054E1BB6477F4EC5D7A434233DF6100BCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 13:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:83:9d:76:ee:e0:9a:2a:e0:1c:40:f7:d8:cd:44:8e:68:dd:8f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CABD054E1BB6477F4EC5D7A434233DF6100BCB
        Validity
            Not Before: Jun  6 13:55:44 2025 GMT
            Not After : Jun  5 14:00:44 2026 GMT
        Subject: CN=74592E90052AED30EB82005B560BC843564C8685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:bf:29:22:56:a3:fa:0c:b2:e9:51:91:4c:
                    69:c2:22:33:b6:6b:e8:c2:2a:59:56:f6:9a:3b:16:
                    4b:62:f6:d2:bd:63:de:56:c2:12:84:d3:a3:45:19:
                    1d:fb:bf:00:a8:c0:56:bf:89:45:49:c9:49:4c:06:
                    88:60:89:6d:52:0b:1f:90:e6:46:5b:fa:93:82:70:
                    bd:f2:7c:c7:d5:f7:53:d7:2f:9b:5c:cf:0c:e7:40:
                    f2:7a:84:9e:12:9a:07:37:62:68:10:f8:d6:a2:7e:
                    71:dc:d4:6f:9e:8b:8e:7b:34:d6:aa:24:03:1e:d8:
                    3e:2f:a5:df:58:29:43:12:24:1a:3d:9b:21:ad:f1:
                    4c:2c:76:48:7a:79:20:08:54:5e:a3:24:ab:a4:eb:
                    a7:f2:8c:1d:ce:81:06:fa:95:99:a7:b5:9f:5d:a0:
                    d8:e5:76:e7:fa:4e:74:58:8c:cb:5e:c7:9d:cd:72:
                    da:b0:5c:49:fd:b1:4d:48:10:17:71:af:0c:60:e7:
                    99:8f:90:77:5d:93:b3:7f:66:40:af:30:97:84:e6:
                    ad:dd:73:33:3d:44:21:92:53:a7:31:ba:ac:a9:5f:
                    dd:d0:8b:48:1a:8d:17:0f:d4:e3:f2:57:a7:39:5a:
                    0a:26:f4:cb:45:9c:34:a7:a7:a4:ad:e0:84:46:c6:
                    aa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:59:2E:90:05:2A:ED:30:EB:82:00:5B:56:0B:C8:43:56:4C:86:85
            X509v3 Authority Key Identifier:
                keyid:B0:CA:BD:05:4E:1B:B6:47:7F:4E:C5:D7:A4:34:23:3D:F6:10:0B:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/B0CABD054E1BB6477F4EC5D7A434233DF6100BCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CABD054E1BB6477F4EC5D7A434233DF6100BCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/34352e37312e3234342e302f32322d3234203d3e20323637363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:64:ba:44:70:a6:50:61:84:67:9a:0b:97:cd:87:db:57:0e:
         f8:e2:d3:0f:dd:2e:14:e8:55:a8:c8:c3:ec:7b:c6:c5:bf:d4:
         e0:a4:f8:c0:9d:2d:aa:2d:62:1f:49:1b:9f:0e:c1:47:8a:ac:
         ba:07:b6:9a:92:01:5e:f6:d7:ad:1e:88:70:40:98:4f:f2:48:
         24:25:6a:79:83:c6:ba:66:41:0f:85:4c:ac:f9:cb:06:8f:e9:
         89:43:3a:7d:d5:f0:c8:6e:12:3a:3f:23:c8:52:20:5a:4f:fa:
         f0:ff:a5:49:11:e0:aa:7b:95:29:d6:6b:e6:0e:38:bd:fa:ee:
         43:e3:07:44:e3:dc:ef:db:7d:b9:f6:6d:95:0a:54:e4:bd:cc:
         d0:3e:83:3c:67:e3:22:b8:c2:c6:33:ff:9d:f2:82:bb:b0:e3:
         19:05:42:33:a9:6c:0f:bc:02:85:74:fc:06:13:84:92:11:21:
         fe:9e:de:67:4f:5c:a7:ea:0b:e2:57:57:f8:ca:47:c6:c1:c4:
         07:a5:7a:8e:7f:99:54:fc:3a:7d:fa:79:67:85:45:bc:3b:60:
         ba:14:99:22:1c:76:0a:78:85:73:94:92:6d:d0:8f:d2:60:8e:
         1e:23:e2:a2:a1:51:a1:3c:1a:10:9e:f5:b5:c2:ed:f7:1d:10:
         9b:08:ee:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUH4Oddu7gmirgHED32M1Ejmjdj6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDQUJEMDU0RTFCQjY0NzdGNEVDNUQ3QTQzNDIzM0RG
NjEwMEJDQjAeFw0yNTA2MDYxMzU1NDRaFw0yNjA2MDUxNDAwNDRaMDMxMTAvBgNV
BAMTKDc0NTkyRTkwMDUyQUVEMzBFQjgyMDA1QjU2MEJDODQzNTY0Qzg2ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9B78pIlaj+gyy6VGRTGnCIjO2
a+jCKllW9po7Fkti9tK9Y95WwhKE06NFGR37vwCowFa/iUVJyUlMBohgiW1SCx+Q
5kZb+pOCcL3yfMfV91PXL5tczwznQPJ6hJ4Smgc3YmgQ+NaifnHc1G+ei457NNaq
JAMe2D4vpd9YKUMSJBo9myGt8Uwsdkh6eSAIVF6jJKuk66fyjB3OgQb6lZmntZ9d
oNjlduf6TnRYjMtex53NctqwXEn9sU1IEBdxrwxg55mPkHddk7N/ZkCvMJeE5q3d
czM9RCGSU6cxuqypX93Qi0gajRcP1OPyV6c5Wgom9MtFnDSnp6St4IRGxqpjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdFkukAUq7TDrggBbVgvIQ1ZMhoUwHwYDVR0j
BBgwFoAUsMq9BU4btkd/TsXXpDQjPfYQC8swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFdpRnl1RlJOS2JicmtNYTRFZkFRWlNORTNXWUJLZDhmd3FLZkZBV21D
WHkvMC9CMENBQkQwNTRFMUJCNjQ3N0Y0RUM1RDdBNDM0MjMzREY2MTAwQkNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwQ0FCRDA1NEUxQkI2NDc3
RjRFQzVEN0E0MzQyMzNERjYxMDBCQ0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRXaUZ5dUZSTktiYnJrTWE0RWZBUVpTTkUzV1lCS2Q4ZndxS2ZGQVdtQ1h5LzAv
MzQzNTJlMzczMTJlMzIzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzYzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUf0MA0GCSqGSIb3DQEBCwUAA4IBAQBoZLpEcKZQ
YYRnmguXzYfbVw744tMP3S4U6FWoyMPse8bFv9TgpPjAnS2qLWIfSRufDsFHiqy6
B7aakgFe9tetHohwQJhP8kgkJWp5g8a6ZkEPhUys+csGj+mJQzp91fDIbhI6PyPI
UiBaT/rw/6VJEeCqe5Up1mvmDji9+u5D4wdE49zv23259m2VClTkvczQPoM8Z+Mi
uMLGM/+d8oK7sOMZBUIzqWwPvAKFdPwGE4SSESH+nt5nT1yn6gviV1f4ykfGwcQH
pXqOf5lU/Dp9+nlnhUW8O2C6FJkiHHYKeIVzlJJt0I/SYI4eI+KioVGhPBoQnvW1
wu33HRCbCO7Q
-----END CERTIFICATE-----
Generated at Mon Jun 9 15:19:32 2025 by rpki-client