Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32332d3233203d3e20323636313239.roa
File:                     34352e362e39342e302f32332d3233203d3e20323636313239.roa (raw, json)
Hash identifier:          ZcHdsQavahWyvlAhZlRhOGe90aKrsw6HCQ9q9IERsvk=
Subject key identifier:   BA:FE:71:E2:87:B0:47:C1:96:EE:EA:43:D5:8C:36:CA:20:DD:59:1D
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       226D7EB5ED3E3393C9242B801B4BE4C95F928D8D
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32332d3233203d3e20323636313239.roa
Signing time:             Wed 05 Mar 2025 19:00:16 +0000
ROA not before:           Wed 05 Mar 2025 18:55:16 +0000
ROA not after:            Wed 04 Mar 2026 19:00:16 +0000
asID:                     266129
IP address blocks:        45.6.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6d:7e:b5:ed:3e:33:93:c9:24:2b:80:1b:4b:e4:c9:5f:92:8d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Mar  5 18:55:16 2025 GMT
            Not After : Mar  4 19:00:16 2026 GMT
        Subject: CN=BAFE71E287B047C196EEEA43D58C36CA20DD591D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:46:bc:1d:86:47:dd:20:ca:86:7e:bf:6b:fd:
                    8b:4a:97:22:39:42:bd:7d:b5:dc:1b:fd:d0:ba:d6:
                    53:f6:4b:f7:af:cd:98:fe:6d:f0:e6:ac:e3:2d:d3:
                    c0:56:73:49:9d:09:62:2f:a3:58:a4:3f:3b:7a:88:
                    9b:f8:28:28:42:2b:cf:91:b4:21:76:d8:97:26:d6:
                    a4:5d:79:a2:82:b7:05:a4:1e:b3:4e:58:1c:7d:40:
                    91:3c:88:07:28:88:bf:97:a0:ba:82:5f:02:ca:08:
                    dc:47:b1:af:18:da:d6:6d:a3:3d:fb:ea:fe:60:9b:
                    c8:1e:e9:5d:e1:92:63:f9:0a:d7:7a:76:a5:e4:0d:
                    f0:89:65:ca:d0:f1:48:ef:46:92:49:b8:49:53:86:
                    59:0e:76:a8:bd:b0:79:5c:3d:ca:de:64:8b:9e:29:
                    c6:b9:a0:e5:9f:c3:41:8d:ef:cd:bc:46:59:4b:79:
                    e6:00:77:65:5b:af:dd:33:bc:a3:bb:e0:2a:82:b6:
                    10:49:37:bb:5e:47:9f:db:7d:24:e7:71:bd:19:24:
                    20:43:4d:7d:9a:88:29:bd:f0:23:e6:fa:8c:b0:2f:
                    fc:10:68:97:4a:8b:48:ed:7c:07:21:7e:62:7b:18:
                    82:2a:dd:86:f6:ba:e6:4a:6e:83:38:17:c5:de:b2:
                    5c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FE:71:E2:87:B0:47:C1:96:EE:EA:43:D5:8C:36:CA:20:DD:59:1D
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32332d3233203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:bc:dd:2d:8b:8b:fb:7e:63:63:05:ed:92:ac:e3:20:d8:0c:
         fb:2e:c3:23:02:46:27:ae:44:ec:77:2c:cd:44:e3:5a:5e:3f:
         4a:96:a6:ac:a3:f4:87:48:06:30:5b:67:d6:c7:53:5b:19:43:
         50:cb:14:38:23:c1:81:0a:7e:f7:f4:cc:df:89:05:3a:cc:d7:
         c2:6d:3d:db:83:45:75:cd:81:87:1a:10:e2:38:91:d7:ac:43:
         f3:d9:21:8c:aa:b7:73:5b:ae:84:39:93:15:cf:c5:cd:cd:35:
         c4:1a:3f:87:46:a4:b9:06:5d:ff:56:1a:ac:91:1f:50:92:43:
         05:a6:bc:9e:78:64:ea:1d:a3:68:f2:4e:db:6d:2b:5d:9e:d9:
         38:a6:87:bc:76:18:21:56:aa:af:cf:e7:df:83:f9:c0:93:4f:
         ca:11:d4:58:93:ef:9b:fc:c6:91:b8:03:02:8d:fb:b7:43:ee:
         ab:c0:6b:8c:3a:4e:8e:96:40:16:87:7f:f5:b7:0a:b5:10:1f:
         dd:4f:b3:b6:a1:95:32:9f:fd:1a:23:38:ef:70:a7:bb:89:ed:
         31:d6:55:62:b1:26:40:43:9f:96:46:11:ea:4b:0f:1f:b2:6a:
         08:e2:42:a3:e1:45:64:1c:34:32:9f:54:12:dc:d0:64:3b:af:
         d7:c2:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:30:29 2025 by rpki-client