Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa
File:                     34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (raw, json)
Hash identifier:          mLL7psbKfiKaGnpbVWEJoTKcK/IxrSqWRS37Ju8bJQQ=
Subject key identifier:   64:BA:FA:55:D8:C9:8F:D3:28:F5:49:B2:EE:C2:7A:DB:05:B4:B4:73
Certificate issuer:       /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial:       7D558CF1AC1267A22C894B39299AA6D94386E560
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa
Signing time:             Thu 06 Mar 2025 15:09:42 +0000
ROA not before:           Thu 06 Mar 2025 15:04:42 +0000
ROA not after:            Thu 05 Mar 2026 15:09:42 +0000
asID:                     268913
IP address blocks:        45.175.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
                          rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:55:8c:f1:ac:12:67:a2:2c:89:4b:39:29:9a:a6:d9:43:86:e5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
        Validity
            Not Before: Mar  6 15:04:42 2025 GMT
            Not After : Mar  5 15:09:42 2026 GMT
        Subject: CN=64BAFA55D8C98FD328F549B2EEC27ADB05B4B473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6b:5b:ce:79:f8:75:19:82:d9:9e:60:f9:b5:
                    51:0b:15:d1:63:d0:8d:b9:56:1c:fd:2a:f3:26:93:
                    1b:f5:c8:56:86:54:b3:ae:32:a6:58:fa:e9:67:d1:
                    35:81:37:ce:a0:c0:e3:0a:1e:f1:e9:42:6f:e0:59:
                    fc:7e:83:63:65:bc:7e:54:53:de:a9:6d:ad:2e:01:
                    c1:b3:4a:55:75:f9:2d:ee:63:3f:71:4e:1d:71:65:
                    92:68:b1:d4:51:10:4a:27:01:f4:f7:b0:1f:36:ba:
                    56:d5:20:3b:a9:bc:a0:dc:8c:80:c4:30:3f:7f:c4:
                    fd:05:1c:9a:4a:c7:e3:95:77:fe:72:09:48:fa:e4:
                    61:e0:1d:1f:ff:fe:64:86:89:7a:8b:36:b4:e9:b0:
                    bb:e5:5f:6d:88:54:da:eb:67:75:34:85:7e:5e:ab:
                    44:12:7c:e7:ef:5b:6b:47:b2:11:84:cc:3b:02:81:
                    9c:56:6c:8a:a9:df:1b:4d:b8:bf:97:55:52:f8:45:
                    c5:78:3c:c6:c8:16:68:51:c9:d9:50:42:72:11:ab:
                    b0:d9:39:7a:f4:79:f4:69:f0:0b:f5:7a:42:fc:9e:
                    ab:1b:3c:a9:32:f7:2c:7f:d7:95:ed:66:12:1b:b1:
                    7a:3e:37:3a:c7:64:17:14:49:3f:73:6e:16:b7:cd:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BA:FA:55:D8:C9:8F:D3:28:F5:49:B2:EE:C2:7A:DB:05:B4:B4:73
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:16:a1:55:e7:e9:ce:03:50:ac:a7:5a:c1:7a:45:ef:63:41:
         32:9c:8a:23:d6:98:f9:cc:ed:a6:a7:9e:3f:71:8a:3d:c4:26:
         9b:7b:cf:30:6d:c9:2a:c5:aa:c1:67:bf:80:d7:5d:9b:8d:d5:
         1f:5c:c6:8c:80:36:47:6a:46:be:3a:66:8d:e5:1d:d0:eb:fb:
         53:45:c9:c6:1e:9c:94:73:b1:6e:28:46:be:dc:49:18:d6:8b:
         40:69:18:53:62:27:5a:83:81:6b:4a:a5:d8:f8:40:f4:cb:2a:
         7c:7f:18:97:e7:78:9c:29:b6:84:4f:ff:e0:5b:56:03:08:47:
         2b:2f:1e:8a:b1:6a:e8:83:0b:ec:a1:cf:af:5f:75:ed:10:6d:
         f7:9b:ed:67:1c:c2:b5:b8:1f:e0:a7:87:e0:67:97:c7:f0:6b:
         a1:79:0d:9c:8e:cc:ba:fa:66:b5:3d:07:32:e6:ba:de:60:d7:
         4f:87:25:56:8a:75:ad:d7:96:dc:cf:a9:ec:29:d6:ba:1b:9d:
         21:90:03:74:fe:45:35:36:a6:b1:66:f3:07:70:c3:7d:3e:47:
         fa:52:72:61:c1:9b:38:6c:a5:3f:b2:db:a0:ef:b2:7c:a8:e1:
         65:34:24:1d:21:62:f6:9c:f1:34:b1:99:66:02:53:a7:08:82:
         05:36:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:06:09 2025 by rpki-client