Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/1/34352e36352e3136302e302f32322d3332203d3e20323731353031.roa
File:                     34352e36352e3136302e302f32322d3332203d3e20323731353031.roa (raw, json)
Hash identifier:          FXXOTydTvq6O3mBzHgUM5o+sWuzb9lcE9cocVGuUX30=
Subject key identifier:   3A:34:03:F6:F1:72:EF:A7:34:60:08:40:2D:2B:6A:F1:33:87:45:37
Certificate issuer:       /CN=9C78D45DE97763474A8EB18B0531E7702F07C642
Certificate serial:       27F26709B45E18D9B58ED1B24EAE11B1E09DF079
Authority key identifier: 9C:78:D4:5D:E9:77:63:47:4A:8E:B1:8B:05:31:E7:70:2F:07:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C78D45DE97763474A8EB18B0531E7702F07C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/1/34352e36352e3136302e302f32322d3332203d3e20323731353031.roa
Signing time:             Thu 06 Mar 2025 14:39:17 +0000
ROA not before:           Thu 06 Mar 2025 14:34:17 +0000
ROA not after:            Thu 05 Mar 2026 14:39:17 +0000
asID:                     271501
IP address blocks:        45.65.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/1/9C78D45DE97763474A8EB18B0531E7702F07C642.crl
                          rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/1/9C78D45DE97763474A8EB18B0531E7702F07C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C78D45DE97763474A8EB18B0531E7702F07C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 18:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f2:67:09:b4:5e:18:d9:b5:8e:d1:b2:4e:ae:11:b1:e0:9d:f0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C78D45DE97763474A8EB18B0531E7702F07C642
        Validity
            Not Before: Mar  6 14:34:17 2025 GMT
            Not After : Mar  5 14:39:17 2026 GMT
        Subject: CN=3A3403F6F172EFA7346008402D2B6AF133874537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:74:26:e0:86:da:52:fb:71:a1:dd:59:16:
                    05:2e:3b:98:72:1d:bc:d4:5d:18:1b:32:9c:7b:42:
                    aa:18:33:50:4a:45:8d:c3:f2:88:0a:ae:e8:f5:05:
                    d7:e1:fd:74:70:dc:88:dd:de:18:30:20:7c:ac:a2:
                    74:6e:b4:58:93:b6:50:1c:df:27:e2:1e:c2:43:94:
                    1e:79:de:f2:1b:73:8a:bd:1d:49:00:ca:61:47:d5:
                    21:2b:a1:9b:8c:0a:12:1d:eb:d0:a5:05:f4:6d:71:
                    c6:94:94:fd:f9:88:20:f6:ba:98:f6:71:54:48:16:
                    30:7d:e7:d9:06:9d:6f:f9:03:c4:8e:4b:de:b1:9a:
                    56:1f:70:99:20:97:d8:d7:1f:cf:25:bd:a8:86:87:
                    cf:da:36:15:57:ad:ed:d6:6d:11:62:b9:e8:3f:8f:
                    ca:5e:0c:0d:76:5e:cc:8f:08:a1:3a:bd:e3:90:e3:
                    f5:f7:4f:d6:3d:d3:70:dc:e7:36:50:7f:f1:ef:55:
                    a6:f8:42:ab:0b:66:36:8f:b2:92:7c:e6:bc:91:ff:
                    84:db:74:ef:78:d3:c8:da:1e:cb:1a:3f:30:f9:72:
                    cb:10:b2:44:0f:c0:15:55:71:1d:2c:c2:03:99:50:
                    7b:f4:b6:26:6f:3e:97:fa:a4:f4:02:48:be:9d:f2:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:34:03:F6:F1:72:EF:A7:34:60:08:40:2D:2B:6A:F1:33:87:45:37
            X509v3 Authority Key Identifier:
                keyid:9C:78:D4:5D:E9:77:63:47:4A:8E:B1:8B:05:31:E7:70:2F:07:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/1/9C78D45DE97763474A8EB18B0531E7702F07C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C78D45DE97763474A8EB18B0531E7702F07C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/1/34352e36352e3136302e302f32322d3332203d3e20323731353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:f8:59:bc:ac:cf:86:5e:00:59:7d:43:a9:27:1f:18:b3:41:
         8a:29:a4:33:06:e3:6c:ef:df:bb:98:54:fb:d1:fb:93:56:d7:
         75:43:12:35:0f:cd:37:60:f5:30:c6:26:a6:88:9f:fd:77:18:
         8e:f3:0b:d4:3f:bc:d1:a9:6d:4b:4f:98:e0:a9:4a:44:5b:d1:
         43:5b:be:f1:00:59:1d:ae:4e:ae:e2:e8:14:3a:3d:4f:e9:db:
         71:2c:d6:4a:f7:96:92:e5:62:10:6e:d1:d5:d6:ac:c2:f4:14:
         06:fe:f8:c7:95:5a:1d:98:f8:af:bf:62:43:bd:87:6f:97:f4:
         33:3a:29:da:d0:d2:34:e5:3b:1a:bb:cd:7d:bc:cd:ca:e3:a7:
         f9:b2:31:8b:51:dd:b4:01:f9:5a:be:02:f0:d0:59:33:b8:91:
         71:be:c8:cf:4c:95:6a:d5:b6:06:63:e4:24:2e:bd:62:20:3c:
         a2:0b:78:3f:61:d1:41:ad:04:dd:98:5a:fb:6d:72:fb:e7:31:
         03:b7:96:4f:58:44:3f:1c:f9:3f:e2:6e:aa:28:97:14:26:62:
         41:60:86:73:2a:b4:85:f9:3c:0d:e4:54:f0:11:d5:e9:91:87:
         3c:e3:7f:37:6e:8e:43:72:96:ff:6b:da:20:5f:c8:15:33:45:
         1d:fd:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:39:55 2025 by rpki-client