Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa
File:                     34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa (raw, json)
Hash identifier:          c9pmOSd5YgM4yOIr8wl2MJW/OxqiWWAnV/YQNyWCK1Q=
Subject key identifier:   9C:FB:52:6D:83:1C:9B:1A:19:C4:38:D9:E2:1A:56:80:0F:2E:EC:22
Certificate issuer:       /CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
Certificate serial:       66A09C68C7C8833208EB0FA480CB4B668DDBAE50
Authority key identifier: 14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa
Signing time:             Sat 07 Dec 2024 15:41:42 +0000
ROA not before:           Sat 07 Dec 2024 15:36:42 +0000
ROA not after:            Sat 06 Dec 2025 15:41:42 +0000
asID:                     269495
IP address blocks:        45.187.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl
                          rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 09:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a0:9c:68:c7:c8:83:32:08:eb:0f:a4:80:cb:4b:66:8d:db:ae:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
        Validity
            Not Before: Dec  7 15:36:42 2024 GMT
            Not After : Dec  6 15:41:42 2025 GMT
        Subject: CN=9CFB526D831C9B1A19C438D9E21A56800F2EEC22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:22:73:ba:84:fc:d8:7b:d1:a8:4f:79:0c:
                    68:0d:00:b9:bd:c1:e3:34:1e:e7:7a:d5:08:34:3e:
                    c7:03:2b:83:91:92:5a:83:79:bb:52:07:fa:e3:79:
                    45:a9:57:d0:8a:ab:81:e1:70:38:16:7a:09:95:c6:
                    a5:75:e7:9c:af:1c:73:b7:4e:60:5c:ff:d7:0d:ee:
                    4b:b5:f3:5d:48:03:29:fb:0a:52:2f:55:2a:d4:7b:
                    a0:b6:ca:c7:46:2f:b7:8d:69:2e:d7:b2:2d:66:f8:
                    57:f7:2a:76:a8:3d:74:e2:6b:da:ae:19:7a:22:79:
                    90:ea:da:c9:f3:83:db:98:ce:6e:05:c3:3f:99:c8:
                    5a:3c:bd:20:e2:70:fa:b7:8d:23:c3:d8:da:84:c7:
                    c4:d9:c9:2e:3c:06:2e:35:99:c6:d3:3b:d2:af:f1:
                    a3:f0:21:fa:ed:35:6b:8b:f7:1a:dc:f5:41:b2:35:
                    38:dc:3a:98:4a:d7:d6:a5:81:b6:cd:b5:23:ef:de:
                    1d:2e:e8:49:cc:cf:c4:70:55:4d:89:7c:73:fa:fc:
                    48:ad:ab:cf:16:eb:a5:14:0b:e7:e0:0b:60:9b:59:
                    32:88:5a:7c:e8:03:d4:7d:fd:e4:c6:2a:02:ba:b2:
                    64:8d:3d:77:4e:54:d4:0e:74:89:d7:2b:e3:f9:48:
                    47:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FB:52:6D:83:1C:9B:1A:19:C4:38:D9:E2:1A:56:80:0F:2E:EC:22
            X509v3 Authority Key Identifier:
                keyid:14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:d9:27:3a:f5:4a:8b:19:3e:c1:bb:1b:00:40:0a:90:86:0e:
         65:07:9a:d3:49:51:15:f7:86:d7:91:66:53:02:07:a7:1f:05:
         68:58:25:5c:ca:ca:b3:1b:60:b2:04:f9:83:2a:c4:bd:5e:78:
         51:18:d9:a5:cf:72:a5:0b:10:07:32:11:19:45:c0:5d:7e:14:
         dd:4e:a6:63:ef:cc:2c:b5:cd:25:82:54:6f:84:05:43:63:ef:
         58:cd:4a:e2:6d:af:3f:9a:ea:5b:53:15:20:50:5a:d7:5c:83:
         26:f0:db:cf:60:49:78:ab:05:7e:3e:4f:1f:f9:a9:61:7d:da:
         a5:18:b8:95:c0:f9:08:b5:af:80:b2:dc:f2:53:73:e2:50:af:
         e7:98:10:37:d2:b9:cc:fc:52:f4:44:ef:f1:e6:e2:17:87:4b:
         5e:5c:ae:62:82:ce:a7:21:6b:b1:b0:5f:b8:8f:c4:06:97:91:
         68:e5:2f:df:61:95:cc:fc:40:1e:05:82:cb:af:de:d5:a4:1f:
         0b:3b:c2:63:c0:af:2b:3b:d4:a9:ed:ac:37:d6:69:15:b3:33:
         62:e9:b0:f7:3e:53:84:43:47:3d:ae:c5:e0:ea:36:30:ce:5b:
         89:08:3b:46:3c:2d:c1:99:18:8a:f1:ba:a9:cf:b5:6e:64:44:
         fc:e1:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:16:13 2025 by rpki-client