Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134302e302f32332d3233203d3e20323636393137.roa
File:                     34352e37312e3134302e302f32332d3233203d3e20323636393137.roa (raw, json)
Hash identifier:          I2jezxXSQCJhZqj4fG725F+EqJo+UPChkZeQlenVyvA=
Subject key identifier:   52:5B:BB:0C:CC:3A:43:C8:C0:11:EB:E9:48:E2:7A:BC:39:3B:1F:33
Certificate issuer:       /CN=0B8669C70E9ED5741CBEC40B6864B185977F0A18
Certificate serial:       30417CA9FBC40DA1665FE09B0299F391A68D7BDC
Authority key identifier: 0B:86:69:C7:0E:9E:D5:74:1C:BE:C4:0B:68:64:B1:85:97:7F:0A:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B8669C70E9ED5741CBEC40B6864B185977F0A18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134302e302f32332d3233203d3e20323636393137.roa
Signing time:             Wed 02 Oct 2024 19:33:04 +0000
ROA not before:           Wed 02 Oct 2024 19:28:04 +0000
ROA not after:            Wed 01 Oct 2025 19:33:04 +0000
asID:                     266917
IP address blocks:        45.71.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/0B8669C70E9ED5741CBEC40B6864B185977F0A18.crl
                          rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/0B8669C70E9ED5741CBEC40B6864B185977F0A18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B8669C70E9ED5741CBEC40B6864B185977F0A18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:41:7c:a9:fb:c4:0d:a1:66:5f:e0:9b:02:99:f3:91:a6:8d:7b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B8669C70E9ED5741CBEC40B6864B185977F0A18
        Validity
            Not Before: Oct  2 19:28:04 2024 GMT
            Not After : Oct  1 19:33:04 2025 GMT
        Subject: CN=525BBB0CCC3A43C8C011EBE948E27ABC393B1F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:c6:43:c8:5b:b9:72:35:0c:cf:5d:74:28:
                    39:67:00:30:21:0c:de:98:4c:32:66:b8:6e:b7:1e:
                    51:3e:93:ba:53:d1:d3:66:71:2f:f9:04:0a:a6:31:
                    28:f0:65:71:b2:fc:fd:40:79:91:c9:91:b6:fd:2c:
                    a8:3a:e7:97:4b:ce:7d:b5:90:47:64:c7:9d:6a:2b:
                    9a:52:eb:d0:e3:41:22:ee:cc:23:f2:6e:bf:a4:0f:
                    0e:13:32:c7:bd:76:b2:32:78:88:4b:d5:37:32:ca:
                    c2:f5:b8:07:a1:8b:31:a1:98:eb:5b:23:8c:94:00:
                    e8:66:b8:fe:06:8d:3d:db:1d:b2:61:28:60:f2:42:
                    37:5c:85:7c:4a:c9:cc:6d:38:bf:98:82:3f:a9:ee:
                    aa:d1:3e:1b:ab:57:fe:1c:88:84:d2:f4:26:86:54:
                    a7:d8:ab:0a:67:e3:06:98:f4:4a:fa:b9:4b:3b:12:
                    22:fc:41:58:0b:a7:59:53:75:ed:9e:af:b6:ec:db:
                    0f:93:40:5e:9e:b3:b3:2b:01:f2:ab:1c:4b:b8:b0:
                    f0:21:2b:e0:8e:47:a8:0b:0c:8b:41:ea:d5:b0:cc:
                    41:88:85:f9:52:3b:04:7d:b0:07:8a:71:92:2b:df:
                    86:96:0c:55:86:c7:f5:53:ba:07:7c:96:d1:b1:f8:
                    7e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5B:BB:0C:CC:3A:43:C8:C0:11:EB:E9:48:E2:7A:BC:39:3B:1F:33
            X509v3 Authority Key Identifier:
                keyid:0B:86:69:C7:0E:9E:D5:74:1C:BE:C4:0B:68:64:B1:85:97:7F:0A:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/0B8669C70E9ED5741CBEC40B6864B185977F0A18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B8669C70E9ED5741CBEC40B6864B185977F0A18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134302e302f32332d3233203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:fe:17:e4:d4:a5:3c:1f:68:25:2a:8b:80:b9:bd:10:4b:
         60:74:36:1a:3f:4b:e8:d7:3d:b4:04:e0:f3:04:9f:21:4d:38:
         0d:a5:b7:14:ad:15:cb:4f:f8:5d:60:29:25:f7:c6:9e:74:d7:
         42:fb:df:20:7d:32:45:ce:3f:6e:be:65:9b:bb:42:7f:c8:b7:
         2b:e9:dd:db:f8:29:34:fd:0d:0b:4a:f8:f2:4a:c4:11:58:eb:
         e1:e6:f3:c3:a9:4d:13:76:54:cb:16:99:f9:b5:4b:ca:0d:68:
         54:c8:a7:a6:cf:80:17:0b:61:06:d9:d2:f5:89:13:14:f7:7e:
         2a:d6:7b:68:04:61:2c:5c:ba:d0:3d:85:9c:9e:1f:af:fd:34:
         7f:64:06:36:e6:c9:d6:4e:c1:47:b6:94:74:5c:2e:c8:d6:7e:
         5e:f8:01:37:df:83:1d:5a:f8:08:92:6a:c9:98:ab:80:fc:06:
         1b:96:fc:b3:76:75:f2:6d:79:02:e7:63:e0:36:7c:92:aa:47:
         26:54:b0:20:be:e4:6c:11:1d:ed:0a:64:9d:f0:3e:48:ed:5c:
         6d:49:62:81:18:53:63:9c:69:1a:1f:d8:35:b9:a5:f4:92:49:
         fd:26:b6:db:01:ac:72:d8:eb:f4:1d:c7:41:b4:d0:5f:1d:fa:
         0a:cf:a7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:23 2025 by rpki-client