Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231332e302f32342d3234203d3e20323635383939.roa
File:                     34352e3136332e3231332e302f32342d3234203d3e20323635383939.roa (raw, json)
Hash identifier:          uVAGwSSLB5QlXERrCVjqVsUxtVHOY7QsZ2dxhju+rSc=
Subject key identifier:   ED:D9:9B:DB:F2:E1:74:CA:6C:84:62:0D:CF:1A:BF:56:46:CD:AF:F1
Certificate issuer:       /CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
Certificate serial:       6E49C64B808F3A2073D5AA07F947AAC89DD2AAD8
Authority key identifier: 50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231332e302f32342d3234203d3e20323635383939.roa
Signing time:             Tue 31 Dec 2024 18:17:41 +0000
ROA not before:           Tue 31 Dec 2024 18:12:41 +0000
ROA not after:            Tue 30 Dec 2025 18:17:41 +0000
asID:                     265899
IP address blocks:        45.163.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl
                          rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 04:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:49:c6:4b:80:8f:3a:20:73:d5:aa:07:f9:47:aa:c8:9d:d2:aa:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5096373658543AD02A3562D6EBE37A8A75AF47A3
        Validity
            Not Before: Dec 31 18:12:41 2024 GMT
            Not After : Dec 30 18:17:41 2025 GMT
        Subject: CN=EDD99BDBF2E174CA6C84620DCF1ABF5646CDAFF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:b3:7e:90:ae:ef:83:fb:c8:a3:6c:6b:f4:
                    36:45:3b:64:a1:df:fb:5f:25:d6:18:b3:0a:60:13:
                    ab:a0:7b:6e:1e:31:21:de:e2:7d:b0:76:32:b8:db:
                    e5:91:ec:ac:de:e3:7d:6d:53:09:c9:af:ef:04:c4:
                    2a:e8:d7:82:e7:cf:82:0c:a0:69:c5:90:a8:12:a2:
                    f2:3a:67:41:77:86:56:e9:57:76:06:0d:85:7b:3e:
                    c6:30:a6:51:40:ba:c3:4c:29:43:e3:e0:58:af:82:
                    e7:3b:ac:90:93:00:d9:5f:35:40:d4:b0:cb:0e:a4:
                    01:8d:1f:62:1f:44:a4:93:26:22:64:11:2b:b2:d6:
                    98:d5:71:34:7a:33:7b:ac:ab:6e:5a:71:a4:a5:99:
                    8a:74:41:03:f6:a8:b9:a6:85:77:74:2b:97:c1:bf:
                    2a:ef:25:8c:e4:55:aa:43:2a:50:8a:53:ad:47:43:
                    77:b8:0c:b7:9d:4a:e0:a3:01:d9:29:ae:5e:d2:79:
                    0c:e2:a1:ce:67:c7:bb:bc:f7:b4:d2:01:4d:07:44:
                    7e:1b:7f:9d:07:4a:27:c9:b0:c5:28:46:fb:c8:ee:
                    1a:33:a2:51:b5:72:0c:af:02:94:b5:d5:69:af:f6:
                    01:c7:4f:90:fd:ad:ff:c5:e8:99:da:8e:88:92:a1:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D9:9B:DB:F2:E1:74:CA:6C:84:62:0D:CF:1A:BF:56:46:CD:AF:F1
            X509v3 Authority Key Identifier:
                keyid:50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/34352e3136332e3231332e302f32342d3234203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:8e:29:38:79:15:5a:ce:a6:55:1a:3c:1d:a0:e1:60:a9:44:
         71:e1:b6:cf:3e:24:fe:89:ae:84:2e:b9:3c:16:27:b8:f3:2d:
         10:c0:65:30:3c:15:40:62:6d:27:bb:e3:8e:e1:40:2c:1c:18:
         78:a5:ff:08:57:71:2e:c4:82:cf:c1:40:fd:b5:c0:30:40:21:
         07:d8:86:c8:a5:c5:77:02:c9:15:6d:df:14:57:de:ee:86:91:
         e2:33:cb:3e:b2:ab:64:68:a8:e2:4c:fd:9f:0b:5a:22:01:dd:
         44:33:21:d9:4a:ba:92:ae:fc:62:c0:81:6f:4c:e8:41:c2:54:
         c5:10:09:2c:c1:49:d2:5c:09:58:e4:f9:ca:76:f7:df:35:dc:
         30:5f:92:83:22:00:af:1e:57:f0:d4:58:e2:eb:f7:99:78:e2:
         60:53:20:56:d1:d7:98:68:e8:59:b6:e6:b0:32:71:1a:13:33:
         a1:b8:e0:05:ca:59:85:36:96:b6:e2:5a:de:09:99:25:94:ce:
         73:96:32:d5:8e:af:3d:54:82:28:f8:c3:62:d1:8a:7b:18:48:
         14:09:b4:50:b5:4d:a2:01:0c:48:26:20:e5:c8:4d:29:1a:3a:
         25:8b:b2:c5:82:c1:86:85:a5:19:26:71:73:e1:52:b3:b3:f3:
         37:fd:df:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:54 2025 by rpki-client