Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/34352e362e3139322e302f32322d3234203d3e20323636353435.roa
File:                     34352e362e3139322e302f32322d3234203d3e20323636353435.roa (raw, json)
Hash identifier:          LAcAFhsi9sMCFXBDdvSUGBePjYXiFUWf0jWEd4ccmvE=
Subject key identifier:   7E:33:91:C8:12:77:75:66:88:F8:C9:8A:16:7C:FF:89:8D:AB:E2:AC
Certificate issuer:       /CN=DF9F0E9D70A2EBC37F949FBDB3E7097997581127
Certificate serial:       30BDA99801AC93835FE57F18E65C7CA95C8F9109
Authority key identifier: DF:9F:0E:9D:70:A2:EB:C3:7F:94:9F:BD:B3:E7:09:79:97:58:11:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/34352e362e3139322e302f32322d3234203d3e20323636353435.roa
Signing time:             Fri 07 Mar 2025 04:02:52 +0000
ROA not before:           Fri 07 Mar 2025 03:57:52 +0000
ROA not after:            Fri 06 Mar 2026 04:02:52 +0000
asID:                     266545
IP address blocks:        45.6.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.crl
                          rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 08:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bd:a9:98:01:ac:93:83:5f:e5:7f:18:e6:5c:7c:a9:5c:8f:91:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF9F0E9D70A2EBC37F949FBDB3E7097997581127
        Validity
            Not Before: Mar  7 03:57:52 2025 GMT
            Not After : Mar  6 04:02:52 2026 GMT
        Subject: CN=7E3391C81277756688F8C98A167CFF898DABE2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:57:cb:10:95:d2:25:1d:6a:57:1d:00:39:
                    3d:05:76:a4:5f:c1:80:9c:9c:3a:10:d0:f7:58:b6:
                    44:4e:5f:a7:2c:b3:a9:d3:99:23:9b:e3:1e:4e:fe:
                    a0:01:1d:7e:99:8a:b4:c3:3d:df:14:ea:6b:52:67:
                    60:fd:2a:ac:60:e3:7f:2a:94:1b:73:5f:ee:56:83:
                    9e:51:4c:fa:d9:da:b6:a4:66:2b:53:a8:47:f4:f2:
                    15:3e:4c:64:bf:3b:85:59:de:e4:77:f9:71:b1:ab:
                    e9:a9:95:58:e2:2e:10:07:f9:0d:eb:85:8c:78:01:
                    e3:99:0c:34:cf:e4:24:8e:57:13:76:c3:15:5c:70:
                    a0:b9:2e:29:3e:c2:04:c6:e7:2c:5f:26:f2:0d:cb:
                    8a:74:ec:3e:78:ce:6a:53:24:36:47:0c:f8:d7:7c:
                    a7:be:1d:a6:79:d6:b0:60:d7:7e:d1:15:73:81:a1:
                    5e:7a:7a:63:59:99:9e:36:82:97:bf:1c:2e:cc:79:
                    57:db:c3:74:9e:e1:2b:c3:8e:ce:f8:c3:6b:da:41:
                    71:78:30:dc:f6:99:38:ed:ce:b7:a8:6e:8f:11:44:
                    b2:a7:f4:ef:f2:03:69:b7:f1:ad:eb:3a:f9:11:60:
                    5b:a3:40:e9:ff:a3:c3:f1:1e:1a:de:6f:fc:0e:74:
                    b6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:33:91:C8:12:77:75:66:88:F8:C9:8A:16:7C:FF:89:8D:AB:E2:AC
            X509v3 Authority Key Identifier:
                keyid:DF:9F:0E:9D:70:A2:EB:C3:7F:94:9F:BD:B3:E7:09:79:97:58:11:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9F0E9D70A2EBC37F949FBDB3E7097997581127.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/1/34352e362e3139322e302f32322d3234203d3e20323636353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:fc:29:67:4c:8f:bd:05:66:8b:75:73:e7:b8:dd:ac:97:a5:
         24:64:4a:6a:69:ed:34:72:f7:e3:95:b6:b0:98:d3:52:b5:2c:
         6f:0e:4d:1d:60:f5:d5:37:50:fe:86:77:98:a6:01:db:73:93:
         44:9a:60:52:27:0a:f9:d6:7a:5a:e5:98:d7:d5:5c:34:d9:9d:
         44:29:91:09:71:e8:ca:09:95:6c:5b:6b:cf:70:85:e5:77:0e:
         1d:46:e6:08:1b:52:5c:b2:fc:70:f1:b6:ee:3b:fd:c5:dd:e5:
         09:51:b4:d9:a2:ef:9a:d8:a6:7d:1e:8b:e3:2e:42:2f:58:39:
         3f:2b:84:c5:ae:08:79:c3:c5:9c:ac:21:6c:d8:f7:f5:a8:4d:
         25:28:64:1c:0e:a6:59:21:10:f1:e5:65:0c:92:ea:e0:32:eb:
         6b:b7:f3:48:8e:ad:bc:e0:bc:9d:91:10:d0:74:72:72:e6:ec:
         77:9f:b4:06:b7:6e:31:25:43:35:c9:8d:c5:ca:61:fd:4b:83:
         48:92:f2:01:95:e9:11:9a:5f:43:2c:d6:11:36:1c:65:36:63:
         52:96:74:55:d8:bb:5d:c9:40:18:ba:67:fb:71:d9:39:15:2d:
         45:b3:65:a4:52:aa:44:47:4d:f3:61:40:88:8b:ff:7e:6e:ba:
         81:c5:22:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:49:03 2025 by rpki-client