Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          K1tOXflEJib6YOTuVYZZJdmphTSoW/mMyIefRCgoEIM=
Subject key identifier:   A5:FC:31:29:30:99:1D:23:09:DF:99:D6:90:79:65:F4:D0:6C:93:A1
Certificate issuer:       /CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
Certificate serial:       3B68B451208532D45C7FAFE4EF409B1342297D06
Authority key identifier: 5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa
Signing time:             Tue 04 Feb 2025 02:38:10 +0000
ROA not before:           Tue 04 Feb 2025 02:33:10 +0000
ROA not after:            Tue 03 Feb 2026 02:38:10 +0000
asID:                     271599
IP address blocks:        45.174.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 00:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:68:b4:51:20:85:32:d4:5c:7f:af:e4:ef:40:9b:13:42:29:7d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
        Validity
            Not Before: Feb  4 02:33:10 2025 GMT
            Not After : Feb  3 02:38:10 2026 GMT
        Subject: CN=A5FC312930991D2309DF99D6907965F4D06C93A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:27:f7:28:9a:e4:fb:b5:76:d9:b8:90:73:52:
                    71:be:8e:92:09:b1:f0:92:a3:f4:df:11:53:de:eb:
                    2b:93:14:31:a0:88:a7:9b:48:7a:aa:12:b3:bb:88:
                    98:86:0f:23:8c:8d:54:12:7e:c1:de:20:9d:e9:bc:
                    4f:fa:25:23:3e:f1:0b:06:31:26:b9:d4:d3:4a:1c:
                    22:3d:f1:8c:0e:29:b2:23:31:d1:4a:70:d8:8e:dc:
                    4b:76:f7:62:d1:57:87:60:83:2b:13:68:79:d4:17:
                    c6:3e:0f:60:15:38:cf:41:af:bc:df:d7:6f:67:9d:
                    1f:ee:8e:e1:16:cb:29:c0:2e:98:75:13:90:57:2d:
                    ba:51:01:92:e9:26:b1:38:e7:2b:6f:66:de:45:2e:
                    f4:68:5e:fe:ef:ba:2a:03:d9:39:92:de:a2:9e:d7:
                    65:8b:91:8e:0f:fc:aa:a3:4a:7a:52:23:77:92:99:
                    c4:ec:32:bf:38:23:11:03:f7:89:63:76:45:2e:ad:
                    6c:4a:db:24:18:7a:7f:5f:86:32:d3:9b:fd:32:32:
                    04:14:8d:9f:7c:76:bd:9b:d6:d6:29:90:44:75:be:
                    bf:39:a5:4b:37:ea:7b:d9:c4:0a:d3:88:9b:f1:6e:
                    55:ef:aa:2b:0f:d0:08:05:0f:39:af:7d:79:e7:b6:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FC:31:29:30:99:1D:23:09:DF:99:D6:90:79:65:F4:D0:6C:93:A1
            X509v3 Authority Key Identifier:
                keyid:5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:8e:67:a0:10:3c:75:7e:60:29:37:47:62:7e:c0:e9:86:23:
         50:61:0e:ef:19:6e:be:de:62:fa:8a:3a:c8:e1:5a:cc:50:84:
         0d:31:18:5e:f4:29:38:96:ab:38:5e:8a:0a:77:04:30:ab:4a:
         d4:0d:ab:0d:5f:af:2f:b3:b5:0d:40:fe:8a:3a:bd:ae:44:4a:
         e2:fa:f8:e6:78:74:82:30:44:61:8a:24:7a:70:2a:85:18:c0:
         03:59:68:40:bf:ae:e5:e8:85:75:aa:b0:d3:53:bd:41:ff:68:
         9b:a7:11:f3:a8:00:bb:00:5f:ca:71:42:5e:cf:b3:9a:ca:49:
         c7:a4:18:d5:32:c9:1a:9d:fc:4d:1f:51:12:b4:4b:c2:7b:0d:
         bd:8e:35:99:ba:84:31:1e:36:1c:1c:e1:72:fd:c1:2f:99:7d:
         11:6b:c9:4a:be:b6:2d:06:1a:2b:d4:93:8f:4e:db:3e:ce:1e:
         b9:84:b3:5f:4f:fc:20:69:48:2c:53:06:1a:13:3e:09:ae:bb:
         a7:f3:54:ec:d7:b6:5a:e0:c1:0f:93:18:f8:99:17:91:89:12:
         20:8b:73:5b:8e:f3:c0:4b:b9:d3:4b:de:e0:8f:2e:b4:73:11:
         be:53:70:70:a8:6c:7b:09:ff:95:f1:77:0e:8f:e5:67:3a:af:
         33:9c:01:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:19:50 2025 by rpki-client