Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e362e3232382e302f32322d3234203d3e203532353733.roa
File:                     34352e362e3232382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          YktmRFcB5C2biaUtODwDu8ddmCoLhRUEiAZoBNt9xsM=
Subject key identifier:   33:6E:A1:82:15:48:12:3E:EA:5F:75:80:C7:51:D9:D1:26:4B:35:D0
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       550431513D40C404E3AD345E77C6F01E44DC82D3
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e362e3232382e302f32322d3234203d3e203532353733.roa
Signing time:             Fri 27 Dec 2024 13:14:55 +0000
ROA not before:           Fri 27 Dec 2024 13:09:55 +0000
ROA not after:            Fri 26 Dec 2025 13:14:55 +0000
asID:                     52573
IP address blocks:        45.6.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:04:31:51:3d:40:c4:04:e3:ad:34:5e:77:c6:f0:1e:44:dc:82:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Dec 27 13:09:55 2024 GMT
            Not After : Dec 26 13:14:55 2025 GMT
        Subject: CN=336EA1821548123EEA5F7580C751D9D1264B35D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5c:fa:6f:db:cf:6a:38:94:11:3e:00:04:b7:
                    35:4a:19:c0:5b:18:7d:48:38:d2:a2:d4:d1:cc:d0:
                    26:06:19:65:ed:18:19:17:07:df:fe:3e:d4:b2:e1:
                    22:52:54:98:19:66:a5:34:ac:d2:fb:bb:98:85:71:
                    e0:40:eb:c6:4f:fb:af:3f:0e:1b:67:e5:15:5d:82:
                    9f:e2:45:21:03:7a:88:0c:18:95:d9:0e:05:94:86:
                    b2:18:b0:c1:08:58:eb:d8:b3:15:f3:8a:83:50:95:
                    f2:07:63:07:ac:c0:d9:9b:05:c3:f8:57:79:8f:a8:
                    9f:dc:03:6f:73:89:76:63:73:97:1d:05:09:bf:f1:
                    5c:14:22:bc:9c:75:62:7a:cb:cd:c8:73:2e:90:b6:
                    a7:a3:af:c5:a4:8a:27:34:46:d7:05:24:0b:63:21:
                    c8:ba:cc:52:2b:96:1d:46:d3:d5:28:92:ee:67:61:
                    62:60:d9:c7:b0:c7:3c:1d:ad:d9:65:ec:20:af:9f:
                    4d:a5:41:e3:62:2c:5a:77:35:3b:f5:74:d8:e9:3d:
                    df:3a:74:8b:af:28:66:da:22:fb:6b:61:70:e0:6c:
                    b2:f4:98:db:44:6d:40:10:f1:f0:b7:a9:46:e3:83:
                    f3:f6:d8:9e:6a:00:d6:69:0d:d6:ec:6e:f2:c3:65:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:A1:82:15:48:12:3E:EA:5F:75:80:C7:51:D9:D1:26:4B:35:D0
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e362e3232382e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c5:0a:04:21:65:c6:d3:a7:ff:51:2d:22:c7:95:37:49:51:
         71:6e:f4:ef:f3:03:3c:8e:73:61:ca:e5:c3:ae:b6:3e:0a:f4:
         e8:5f:b1:05:12:00:4f:dd:fb:14:dc:16:8d:fd:e6:5c:49:e6:
         04:b3:ca:71:d0:0b:7c:19:ac:37:cb:ca:de:d6:64:ed:96:a2:
         d9:a9:38:c3:7a:57:02:1d:f7:e2:16:6a:af:49:66:4e:17:41:
         62:1a:f3:ff:e8:1a:a7:7d:fd:66:c1:c3:3f:59:f7:13:87:dd:
         16:97:96:9d:3b:17:bb:f6:a3:6c:4a:1f:c2:6c:e9:f5:7b:12:
         92:cb:65:08:9b:7d:a1:89:36:59:a7:c0:99:fe:90:ef:e9:a1:
         90:47:ce:50:76:c1:3e:76:f6:ae:2b:fb:51:ff:c5:ec:e2:41:
         4d:53:64:bd:ce:c5:00:dc:ac:ef:ea:50:25:50:a8:54:59:fe:
         c1:5c:54:2d:90:68:0b:c2:b8:5d:18:bc:4f:7c:8c:b0:9d:96:
         93:46:ff:77:30:ec:b0:0e:4b:d1:01:da:db:6c:f1:8a:4e:8b:
         36:c7:ab:ec:5e:5c:96:4b:60:c1:1b:4a:97:d6:ec:4d:22:f4:
         99:d4:3a:3a:92:c1:2f:77:0b:1a:36:56:0c:14:b4:d8:4b:25:
         39:6c:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:36:49 2025 by rpki-client