Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa
File:                     34352e3138352e37362e302f32322d3332203d3e20323639333637.roa (raw, json)
Hash identifier:          ATq5lNIH1e9pXLXaSoPycHOAqsFgc322zAIe9l6F0D8=
Subject key identifier:   43:61:07:57:47:CC:22:04:A4:61:E7:C9:90:7C:82:E1:6A:11:DC:76
Certificate issuer:       /CN=110BEE0AC24D6678F28E9522A64E0A2D9C666A15
Certificate serial:       191137D229342C848AC328F896203520896967E8
Authority key identifier: 11:0B:EE:0A:C2:4D:66:78:F2:8E:95:22:A6:4E:0A:2D:9C:66:6A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa
Signing time:             Thu 06 Mar 2025 00:21:22 +0000
ROA not before:           Thu 06 Mar 2025 00:16:22 +0000
ROA not after:            Thu 05 Mar 2026 00:21:22 +0000
asID:                     269367
IP address blocks:        45.185.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.crl
                          rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 16:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:11:37:d2:29:34:2c:84:8a:c3:28:f8:96:20:35:20:89:69:67:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110BEE0AC24D6678F28E9522A64E0A2D9C666A15
        Validity
            Not Before: Mar  6 00:16:22 2025 GMT
            Not After : Mar  5 00:21:22 2026 GMT
        Subject: CN=4361075747CC2204A461E7C9907C82E16A11DC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:89:9c:4b:36:bc:c5:85:a9:b4:19:ef:56:
                    03:23:79:f0:b1:6d:d9:92:4e:5a:72:e0:04:f2:26:
                    fc:e8:bd:c6:e0:4e:9e:a4:ce:ea:09:68:14:fa:e5:
                    07:82:88:a5:37:3e:7a:15:05:37:8a:ed:1f:21:a3:
                    65:ec:57:cd:74:13:86:11:9d:67:c8:f8:7a:35:00:
                    90:10:ee:d9:5d:80:1b:78:20:e3:85:95:6e:20:47:
                    81:79:d5:9c:64:a7:e5:e3:c1:ae:00:6d:e6:7b:e2:
                    02:70:e0:18:fd:b9:d4:94:a7:09:48:21:44:bf:72:
                    73:92:ca:7e:fd:5c:fa:37:bb:ed:28:8a:e6:31:85:
                    5c:aa:e4:17:7b:80:95:67:8f:94:8d:ee:13:35:25:
                    5e:ea:89:da:e8:c2:64:77:ca:f2:3f:c8:ed:12:d2:
                    39:c3:2f:d0:9f:e4:02:54:1c:92:79:d9:7e:74:13:
                    d6:dc:cb:50:60:1e:86:c1:34:64:0f:d3:fc:39:a6:
                    9c:90:1b:85:7e:59:c1:35:05:70:d3:68:14:42:4f:
                    14:3e:a1:67:73:59:09:a6:03:65:a9:62:c7:63:64:
                    9a:b9:d1:da:4d:36:04:44:2f:ed:cd:89:e6:bd:07:
                    04:5a:76:fd:df:dc:21:db:22:27:f3:be:b7:7e:d5:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:61:07:57:47:CC:22:04:A4:61:E7:C9:90:7C:82:E1:6A:11:DC:76
            X509v3 Authority Key Identifier:
                keyid:11:0B:EE:0A:C2:4D:66:78:F2:8E:95:22:A6:4E:0A:2D:9C:66:6A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:0b:4b:b5:f5:61:24:60:85:c9:9c:32:ec:71:cd:7f:e0:30:
         ad:27:64:fa:31:c1:46:7d:67:26:42:50:b6:2d:9d:5a:13:3e:
         75:10:db:68:35:f7:0f:e3:58:ec:51:bd:45:0b:80:38:3c:9a:
         3b:42:e2:5c:db:3b:98:bc:c0:ef:7e:51:e3:7a:2d:b9:aa:b2:
         86:e2:4f:7a:c6:71:78:9a:c6:49:1e:5d:31:39:77:50:1b:fd:
         44:69:56:2a:c7:52:34:54:6e:01:1c:b9:03:88:21:63:d8:be:
         63:34:e3:ca:be:7b:9f:3d:e5:b6:f5:de:52:89:9f:64:b9:3e:
         19:7e:5a:36:6e:e5:a0:9d:02:9b:ea:ec:a4:cb:b2:50:d6:c5:
         67:5d:69:27:91:98:84:3e:e7:6e:a5:5b:1a:55:aa:36:c8:06:
         0a:35:bb:b2:f4:2f:67:5e:4f:a5:cb:54:f8:34:52:17:36:8f:
         48:60:d2:42:30:98:82:3a:16:1b:f3:36:ad:23:1d:b9:08:24:
         bf:55:cb:e7:8b:ff:3c:3c:4d:b7:cc:92:64:66:6a:42:95:42:
         56:8b:a2:90:e8:d2:ac:02:6a:7e:ef:6d:af:fd:ef:b6:15:f2:
         24:8a:54:99:1e:f0:dd:12:30:16:93:42:99:29:21:d4:4a:ae:
         92:20:39:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:23:15 2025 by rpki-client