Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa
File:                     34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (raw, json)
Hash identifier:          uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=
Subject key identifier:   00:CE:13:48:D2:14:81:18:8E:5B:DB:CE:5D:D5:21:59:93:B5:BD:D1
Certificate issuer:       /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial:       48CBB5A554CFBFD3775FD15714D6CBF36119930A
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa
Signing time:             Thu 26 Dec 2024 17:38:45 +0000
ROA not before:           Thu 26 Dec 2024 17:33:45 +0000
ROA not after:            Thu 25 Dec 2025 17:38:45 +0000
asID:                     267366
IP address blocks:        45.234.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl
                          rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 06:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cb:b5:a5:54:cf:bf:d3:77:5f:d1:57:14:d6:cb:f3:61:19:93:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
        Validity
            Not Before: Dec 26 17:33:45 2024 GMT
            Not After : Dec 25 17:38:45 2025 GMT
        Subject: CN=00CE1348D21481188E5BDBCE5DD5215993B5BDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:33:8d:3d:3b:10:a8:2f:1c:b8:d9:e9:50:
                    a2:63:7f:7b:26:d8:89:9a:73:0b:31:86:66:57:da:
                    de:1d:8b:e8:6c:4c:ff:a7:ac:8d:20:f7:4e:f3:a0:
                    11:21:89:2d:14:70:82:1f:8c:75:7e:53:3e:27:34:
                    14:6c:09:37:23:43:e8:48:ad:5f:4f:98:9a:41:db:
                    ab:be:fe:32:71:03:33:c2:40:28:6c:05:67:75:7a:
                    06:41:5e:26:d3:7f:b3:12:43:54:9b:d7:8a:5d:25:
                    73:96:be:a7:f1:8b:3a:f7:97:ba:d9:06:11:af:12:
                    92:6e:02:52:d0:37:7d:c0:f3:28:b7:39:9d:81:09:
                    76:5b:3c:b3:69:95:52:ab:f9:00:b6:eb:06:a2:07:
                    a4:e5:76:76:b5:cb:5b:46:b1:98:27:99:37:e0:59:
                    be:ad:10:e7:9c:29:84:0f:61:61:26:c5:7a:90:e5:
                    59:33:69:0c:67:48:3f:9c:a0:34:26:1a:1f:62:a5:
                    c7:e8:27:5c:57:83:ce:e2:87:c1:c1:ee:0c:8c:23:
                    92:21:fe:32:10:19:48:29:16:d7:01:27:5f:ae:80:
                    70:91:3a:3a:0d:a1:a8:06:2d:cf:5a:fb:f5:03:19:
                    fb:e9:c6:f3:e0:d8:2c:e5:a4:94:9c:96:f1:50:20:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CE:13:48:D2:14:81:18:8E:5B:DB:CE:5D:D5:21:59:93:B5:BD:D1
            X509v3 Authority Key Identifier:
                keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:af:99:90:72:e4:23:57:5b:35:c1:06:3b:a4:a1:c4:e1:e6:
         88:7c:a6:64:6e:bb:ac:3e:29:ee:f5:c6:1a:ac:0f:56:18:30:
         04:9b:d1:a0:e3:6b:05:3d:02:1c:53:b2:c0:16:ce:9b:89:30:
         cc:1d:fd:a4:8b:5b:2d:ca:cb:10:ee:42:b6:6b:82:2b:82:0d:
         19:e2:6b:4b:5c:6c:8d:a0:1c:43:3f:9f:07:b7:98:98:61:b5:
         1a:45:8a:31:d2:85:11:30:c3:dc:26:f2:60:3e:bb:c1:f2:a4:
         f5:4b:1c:86:8c:c6:c8:6f:23:cb:5e:fd:98:d5:d6:26:44:e1:
         bf:01:c2:ca:a6:1f:d5:9d:fd:f0:a0:08:a6:e2:4c:5d:4e:a4:
         4a:6e:45:f2:97:7f:23:c1:5f:ac:5c:03:fb:e9:cd:3b:83:23:
         3e:a9:2c:09:26:f2:b0:6c:0b:7e:74:e9:b5:b2:15:77:ba:b8:
         c6:4a:8b:5a:be:18:fe:be:0f:59:43:1e:1b:7f:cd:e0:dc:95:
         55:9b:4b:69:15:63:1f:97:68:cb:1b:db:fa:61:1e:b6:9a:ce:
         3d:14:e8:47:99:6b:77:d9:d1:8a:c7:68:69:9c:4f:e2:f7:65:
         53:6b:77:69:f2:5f:74:5d:b9:60:cf:39:ce:63:a3:5c:2b:c4:
         6e:a9:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:57:40 2025 by rpki-client