Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38302e302f32322d3234203d3e20323634353235.roa
File:                     34352e37312e38302e302f32322d3234203d3e20323634353235.roa (raw, json)
Hash identifier:          WzBRHjXq6dJ94scyJGlUwS6f7NoyD1wIwkHLjGIZWEw=
Subject key identifier:   10:BE:4A:34:88:51:71:DF:95:D6:E6:87:E2:3B:38:1D:60:76:46:A0
Certificate issuer:       /CN=4766F3CA43125EDED2BA274155576386D9101EDC
Certificate serial:       019CC8B43B3FDBF81162D9AFC6F533350F00E6DB
Authority key identifier: 47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38302e302f32322d3234203d3e20323634353235.roa
Signing time:             Mon 03 Feb 2025 20:34:19 +0000
ROA not before:           Mon 03 Feb 2025 20:29:19 +0000
ROA not after:            Mon 02 Feb 2026 20:34:19 +0000
asID:                     264525
IP address blocks:        45.71.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 03:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c8:b4:3b:3f:db:f8:11:62:d9:af:c6:f5:33:35:0f:00:e6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766F3CA43125EDED2BA274155576386D9101EDC
        Validity
            Not Before: Feb  3 20:29:19 2025 GMT
            Not After : Feb  2 20:34:19 2026 GMT
        Subject: CN=10BE4A34885171DF95D6E687E23B381D607646A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:04:46:1f:f1:1f:f2:77:b7:1b:95:37:02:
                    b6:5d:2b:8d:5d:4a:87:c7:86:6f:75:ae:1f:f8:d8:
                    bd:90:98:bd:1b:cc:c3:7c:a7:f0:a8:c7:9f:97:30:
                    f0:f1:3f:78:3a:8a:8a:4d:2a:e7:3d:b9:43:09:e1:
                    68:20:89:5a:59:cd:e1:bd:ca:d9:1d:9d:4d:dd:b8:
                    45:86:ab:3e:c0:66:53:7e:9a:57:c0:5e:30:b7:7c:
                    0f:5c:21:4c:0b:92:25:0f:22:5f:c8:cc:de:a3:d0:
                    0a:c1:92:8e:77:44:73:7e:b5:57:e4:27:52:eb:71:
                    a6:cf:e1:b8:5e:ed:ed:b3:90:d1:06:80:37:96:ec:
                    d7:4e:6c:f4:43:9d:4f:c6:1e:56:85:50:31:66:f4:
                    64:32:b0:e8:10:3e:05:3c:f6:a3:6b:f1:d9:24:ff:
                    70:28:d2:f9:5c:4e:9a:d9:3c:c3:6d:07:e6:09:76:
                    2e:fd:6c:57:a7:e8:50:b2:fe:74:13:79:47:79:63:
                    75:5a:a0:8e:56:8c:ee:9f:f7:a4:52:40:7c:22:11:
                    56:75:2f:18:85:76:24:38:88:58:c6:cb:2d:10:28:
                    fd:72:cc:b1:8f:e3:84:d6:8d:25:a2:01:77:7c:03:
                    a3:57:f1:b3:97:13:66:80:7d:b1:58:2f:7c:dd:9a:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BE:4A:34:88:51:71:DF:95:D6:E6:87:E2:3B:38:1D:60:76:46:A0
            X509v3 Authority Key Identifier:
                keyid:47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38302e302f32322d3234203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:1f:cc:2b:c7:2d:dc:80:53:95:6c:1f:c9:ae:9d:a3:8e:86:
         78:3a:68:0c:dc:6b:b2:ab:79:6a:b3:37:ae:c9:6c:09:07:77:
         28:fb:49:d2:ec:a8:5f:d9:2d:56:b9:8a:36:fe:8c:2c:05:41:
         9f:b1:d3:01:3b:42:38:43:1b:26:30:c7:e0:da:40:bc:f4:c6:
         91:6e:83:2e:e0:d6:45:13:29:5b:0d:0d:b0:e4:80:80:9f:bb:
         f5:cf:4f:27:c3:b5:d8:5f:44:29:8f:43:a0:84:4e:9a:d5:da:
         57:41:14:de:b2:66:62:10:14:1d:b1:22:b1:be:3f:c0:b1:a2:
         1d:9a:88:28:3d:8b:fe:c0:46:98:26:8e:dc:1f:40:37:f7:d2:
         99:75:ea:9c:1e:ab:e0:a6:dc:0e:37:4c:dd:db:0a:02:03:52:
         04:45:5d:e5:63:3f:74:7c:f3:b7:2c:e7:b5:98:64:ec:cf:d5:
         f5:e2:d3:a6:0f:c3:b5:38:0e:5e:6b:92:fe:32:5d:b2:35:9b:
         5b:dc:89:3e:d5:4e:fd:4d:c9:4a:a5:50:d3:7e:94:ed:fc:eb:
         b5:8b:64:dd:57:dd:5a:57:f1:ff:3b:d0:42:90:7f:7d:9f:c5:
         d1:2e:3d:6e:b6:b3:bc:de:b3:50:fe:c7:72:b2:62:a9:57:8b:
         be:e9:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:07:42 2025 by rpki-client