Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/34352e3233322e3130382e302f32322d3234203d3e20323637323538.roa
File:                     34352e3233322e3130382e302f32322d3234203d3e20323637323538.roa (raw, json)
Hash identifier:          MSL3m7eC+i2Y0r+c2SG0t8YrwmhiV9v37ucaCQ26EzI=
Subject key identifier:   D0:BB:42:4C:42:5E:40:5B:1D:64:7F:CD:0E:94:BF:9B:E0:97:D8:CB
Certificate issuer:       /CN=57C950BD274ED8EA04B2AF337313BFE612E66E95
Certificate serial:       3F184CC1E1C1903BB8C02FE839C6D88466B0D7DC
Authority key identifier: 57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/34352e3233322e3130382e302f32322d3234203d3e20323637323538.roa
Signing time:             Thu 06 Mar 2025 04:01:07 +0000
ROA not before:           Thu 06 Mar 2025 03:56:07 +0000
ROA not after:            Thu 05 Mar 2026 04:01:07 +0000
asID:                     267258
IP address blocks:        45.232.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl
                          rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:18:4c:c1:e1:c1:90:3b:b8:c0:2f:e8:39:c6:d8:84:66:b0:d7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C950BD274ED8EA04B2AF337313BFE612E66E95
        Validity
            Not Before: Mar  6 03:56:07 2025 GMT
            Not After : Mar  5 04:01:07 2026 GMT
        Subject: CN=D0BB424C425E405B1D647FCD0E94BF9BE097D8CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:01:e7:11:01:68:5c:09:f3:8e:3c:bc:8a:
                    1a:f7:b3:0f:94:42:35:ca:a8:51:a2:db:13:45:ca:
                    d9:b8:48:b8:64:d5:e1:28:d3:95:5e:18:a7:0a:70:
                    0d:6e:d5:57:de:44:d8:29:4c:b4:f1:e1:34:dc:80:
                    0e:04:5d:85:9b:d8:79:79:a2:63:31:7f:9f:46:5c:
                    d9:3f:17:b2:77:20:3c:d4:5b:40:5d:dc:c5:78:8c:
                    eb:da:81:bf:6f:0d:51:6a:76:20:43:cf:6c:e5:4e:
                    53:21:87:6c:f3:8a:09:08:c3:4c:20:91:d7:b7:53:
                    a5:63:95:db:de:f3:6b:37:66:9c:5b:33:32:a0:8b:
                    32:64:dc:69:a7:8a:38:55:2c:05:a1:74:5a:93:3d:
                    b5:66:85:65:3a:75:2e:40:8e:82:20:61:30:d8:30:
                    b5:e9:f5:2a:e9:91:9e:55:88:12:e7:8e:60:7d:ed:
                    27:e8:4c:3f:77:d9:a6:46:75:55:dd:a5:e0:f8:ac:
                    a4:a8:96:f0:09:a3:ae:e0:80:a0:e5:e6:07:9e:c7:
                    88:8e:7f:e4:4e:79:3d:5c:a7:4f:0e:5f:ed:78:0e:
                    e9:e8:fd:81:bf:a4:46:4d:20:4b:2e:d7:21:03:e2:
                    9a:32:e3:b2:b1:63:82:21:e6:f8:70:69:48:97:e1:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BB:42:4C:42:5E:40:5B:1D:64:7F:CD:0E:94:BF:9B:E0:97:D8:CB
            X509v3 Authority Key Identifier:
                keyid:57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/34352e3233322e3130382e302f32322d3234203d3e20323637323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:20:80:3e:67:4b:a5:1a:43:1c:56:76:f3:32:89:c0:d7:17:
         59:67:7f:a5:8c:ca:77:e7:b9:17:44:e0:46:bd:4c:23:b9:5d:
         0d:86:73:e6:67:ed:6c:7f:fb:de:76:ea:d6:a3:66:2a:e7:44:
         ca:c1:cf:42:2a:39:08:0f:80:ab:b5:9b:20:40:22:f5:63:72:
         cd:f5:4e:db:f7:c4:1d:6c:11:59:20:2a:e8:fd:3e:83:d5:7c:
         93:74:83:86:5d:ee:36:21:21:93:c6:39:7e:a9:58:b2:b4:ab:
         d1:cd:86:6c:fe:14:64:5d:86:04:fb:18:52:07:25:2f:b2:8f:
         83:b3:33:f5:62:3d:dd:36:0b:a4:8e:02:d6:cf:87:3b:f5:34:
         56:e4:ec:0e:ec:0a:26:c6:2b:8a:ae:e2:09:aa:0e:a9:ce:d0:
         ef:40:de:7a:72:43:39:46:ac:16:aa:68:7e:4d:bf:e1:71:ea:
         0f:5f:5c:ef:8a:9e:bb:a7:26:33:ea:20:9b:bb:d5:79:42:32:
         14:13:db:ab:f8:d0:04:dc:fe:99:17:bc:d1:87:3a:6d:fb:e5:
         49:de:bd:d8:8f:f7:5b:7a:a0:ff:cd:1b:2e:99:23:8f:bc:03:
         19:44:7f:25:e1:f8:48:8e:75:f0:ff:25:59:14:a0:e4:f0:f6:
         56:44:cf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:25:13 2025 by rpki-client