Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa
File:                     34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa (raw, json)
Hash identifier:          gcRbu4OhFmlDlXA8y5jpHRAOlA0BGLoF/aoKX/5d83o=
Subject key identifier:   63:DE:D3:58:79:14:E3:6F:76:60:CB:BF:1E:F7:ED:36:A4:C4:6C:4E
Certificate issuer:       /CN=11AD60D31D43E2F14DBD88DECA03E01781A79688
Certificate serial:       271EA32F4C75DF5B213F3837EE364850C87DAF10
Authority key identifier: 11:AD:60:D3:1D:43:E2:F1:4D:BD:88:DE:CA:03:E0:17:81:A7:96:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11AD60D31D43E2F14DBD88DECA03E01781A79688.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa
Signing time:             Wed 07 May 2025 20:28:43 +0000
ROA not before:           Wed 07 May 2025 20:23:43 +0000
ROA not after:            Wed 06 May 2026 20:28:43 +0000
asID:                     273311
IP address blocks:        45.170.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/11AD60D31D43E2F14DBD88DECA03E01781A79688.crl
                          rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/11AD60D31D43E2F14DBD88DECA03E01781A79688.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11AD60D31D43E2F14DBD88DECA03E01781A79688.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 17:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1e:a3:2f:4c:75:df:5b:21:3f:38:37:ee:36:48:50:c8:7d:af:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11AD60D31D43E2F14DBD88DECA03E01781A79688
        Validity
            Not Before: May  7 20:23:43 2025 GMT
            Not After : May  6 20:28:43 2026 GMT
        Subject: CN=63DED3587914E36F7660CBBF1EF7ED36A4C46C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:94:cc:64:4c:fc:b7:14:be:29:f3:9d:6b:
                    10:b7:18:63:10:f9:8a:60:d2:34:a8:96:40:43:fd:
                    93:0f:f0:48:fe:ed:8b:49:23:4e:db:2a:3e:c5:bb:
                    12:dc:96:a7:ad:2b:41:31:e3:55:62:fb:20:55:95:
                    19:a7:d0:db:d9:b3:af:3f:10:70:87:6e:03:3a:97:
                    ca:9f:18:41:5b:05:54:24:17:ae:64:be:f9:47:83:
                    4c:0b:96:6c:38:f1:e7:69:98:d1:74:ba:ef:d5:96:
                    4b:2f:36:47:2f:c8:a0:94:8c:eb:74:cf:41:43:64:
                    49:92:a6:d4:7c:38:36:c0:cd:5d:af:26:05:e5:e5:
                    2a:3e:96:fa:54:f7:bc:cc:8e:6e:14:00:e0:86:2b:
                    60:db:c5:5e:d9:ba:b7:7c:e9:6e:68:71:fc:9c:e5:
                    c1:0f:9b:ba:e5:7f:28:11:d8:87:8b:15:6f:41:9b:
                    0c:71:15:84:bc:ae:26:a5:10:ea:b1:38:29:1d:ca:
                    fd:6f:29:ef:11:d5:82:43:da:dd:a2:84:23:d7:bf:
                    f8:e0:82:16:1c:e5:aa:f8:c6:1f:92:1a:e1:99:0b:
                    0b:2c:54:85:b0:a3:cb:74:e1:94:84:61:a9:93:1a:
                    30:43:81:b7:38:0a:b4:2d:02:f0:df:42:45:9c:94:
                    aa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DE:D3:58:79:14:E3:6F:76:60:CB:BF:1E:F7:ED:36:A4:C4:6C:4E
            X509v3 Authority Key Identifier:
                keyid:11:AD:60:D3:1D:43:E2:F1:4D:BD:88:DE:CA:03:E0:17:81:A7:96:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/11AD60D31D43E2F14DBD88DECA03E01781A79688.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11AD60D31D43E2F14DBD88DECA03E01781A79688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:b9:b5:20:9c:10:88:c8:eb:a2:79:5e:31:f3:b5:91:1b:2c:
         c0:34:01:d0:26:39:b5:b4:b7:24:a2:c5:48:b5:49:b5:3a:12:
         68:f6:aa:f0:5e:1d:7a:db:0d:3f:56:a7:d8:33:c7:b9:7d:1e:
         90:2a:1b:28:d6:80:95:0b:e3:77:9f:69:d9:b8:b3:e7:d8:cb:
         28:ef:33:c5:07:10:5d:7f:c5:95:60:e4:4d:0d:e4:2d:46:4c:
         24:8a:55:fe:bb:8e:2e:16:8c:78:e3:ce:fd:1c:d0:2e:49:8e:
         07:60:71:84:ba:e2:e5:c9:00:95:f8:44:21:4b:ef:9a:56:ec:
         1c:5e:77:33:54:31:7d:04:d9:6b:89:e2:36:c3:41:58:6d:c1:
         d3:79:4c:3a:b4:1d:49:e6:96:7a:71:ed:ae:c3:c0:78:56:94:
         ec:f7:3c:f0:e0:78:01:e6:f0:4e:2e:2c:7e:e7:8b:93:cf:4c:
         fd:57:a0:53:62:66:c8:a1:61:6d:63:6d:f3:01:55:9e:22:c3:
         33:2e:12:30:63:22:a1:03:00:ca:80:29:df:fd:4f:b9:7c:56:
         79:86:11:0a:3c:70:d7:c1:21:ed:ff:aa:09:f7:66:2a:59:bf:
         08:04:85:e6:7d:76:6f:f7:1b:51:da:ed:81:44:ea:62:67:99:
         62:43:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:24 2025 by rpki-client