Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/34352e3137392e39362e302f32322d3234203d3e20323639303734.roa
File:                     34352e3137392e39362e302f32322d3234203d3e20323639303734.roa (raw, json)
Hash identifier:          OeJofXtB49MOx7VNN7aPo9KK94mRSPjm+XP9DqBkZS4=
Subject key identifier:   B3:4D:F6:18:D3:10:A6:66:32:B3:8B:22:87:54:29:0E:62:4C:7F:30
Certificate issuer:       /CN=DEB3E64BDD427B030E2E130619A5C32699317FA8
Certificate serial:       6E2F6B78FA35FD72EBCAC742D3091A59978F8464
Authority key identifier: DE:B3:E6:4B:DD:42:7B:03:0E:2E:13:06:19:A5:C3:26:99:31:7F:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/34352e3137392e39362e302f32322d3234203d3e20323639303734.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     269074
IP address blocks:        45.179.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.crl
                          rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2f:6b:78:fa:35:fd:72:eb:ca:c7:42:d3:09:1a:59:97:8f:84:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEB3E64BDD427B030E2E130619A5C32699317FA8
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:bf:bf:f7:1c:1a:61:e0:6c:7d:60:f4:d3:
                    4f:33:4f:bb:db:5d:21:c6:c3:47:b2:4b:07:01:5a:
                    e4:f3:00:b1:43:76:03:86:e5:71:71:f4:5b:71:90:
                    7c:84:a2:7d:f7:ae:8d:37:99:91:16:3b:59:9b:10:
                    93:5a:82:46:a9:c5:38:bc:87:ec:c4:f1:5a:d8:fa:
                    ad:af:42:73:73:33:f8:67:9d:92:9d:37:da:2a:52:
                    5a:28:54:24:0c:67:cb:6d:7a:6c:95:fc:40:3b:8b:
                    a7:8a:d3:06:ca:f2:68:44:c4:b4:5c:7f:9c:60:5f:
                    fe:0d:7c:dd:f5:b5:18:51:f9:c7:52:25:58:ac:7e:
                    ab:70:b1:e4:54:a8:da:87:cf:a8:03:f9:a1:84:ff:
                    9d:96:4f:d3:48:ee:6e:25:32:8d:d8:da:c2:12:a5:
                    ff:4c:8f:99:8f:10:b0:f6:bb:4c:19:f3:9f:b1:58:
                    77:e5:65:2f:12:aa:5f:45:59:ed:4a:3c:68:d5:36:
                    e2:2f:b3:59:af:b5:f2:1c:bf:91:1d:10:15:6a:ff:
                    b7:6d:24:17:b4:c7:c3:84:7a:86:24:73:70:ea:a6:
                    a1:ab:3d:13:1f:4b:c8:95:5c:f5:ab:dd:33:47:42:
                    b4:5f:9a:54:b2:ab:26:ca:ce:18:28:02:a7:75:3d:
                    3e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4D:F6:18:D3:10:A6:66:32:B3:8B:22:87:54:29:0E:62:4C:7F:30
            X509v3 Authority Key Identifier:
                keyid:DE:B3:E6:4B:DD:42:7B:03:0E:2E:13:06:19:A5:C3:26:99:31:7F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/34352e3137392e39362e302f32322d3234203d3e20323639303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:16:87:a2:5c:a7:00:13:71:81:ef:27:65:84:91:45:17:fc:
         5c:7f:d6:d6:96:1a:77:04:fd:1e:2b:99:fc:32:20:b7:63:67:
         61:9d:00:5e:f4:0d:6b:62:5a:20:c0:da:d4:27:e6:58:1e:82:
         02:4c:cf:d3:77:6d:ee:17:95:0a:bc:6f:60:d3:86:f0:fe:1a:
         9c:39:82:ac:e3:9b:c3:fe:35:d8:e6:cb:dc:21:47:56:70:58:
         40:5c:c4:f4:ec:02:83:fb:16:25:e7:92:a2:7d:c5:b9:77:b7:
         d0:20:e8:7f:6f:82:2d:04:c7:55:68:7d:65:8b:c9:05:e3:6d:
         a5:ad:5b:f4:3e:8c:fc:c5:ee:b0:fd:a7:50:9e:89:fe:01:58:
         05:3a:05:fa:05:1f:1a:19:2a:00:f8:60:49:d6:b5:40:3b:10:
         a2:9f:9b:1a:bc:c8:92:d8:aa:14:1e:16:40:67:e1:20:2a:d4:
         fb:bc:33:6b:16:92:f7:6a:f0:25:19:01:a7:7c:ef:50:06:47:
         8d:26:32:c1:10:c8:dd:19:ae:e5:ac:06:26:3b:ef:5b:b5:fb:
         9b:91:37:15:db:fd:a1:2c:38:d0:f4:18:b2:a0:a0:b5:47:81:
         0d:7d:76:2b:fd:9d:9c:f6:e3:64:d4:95:4a:6a:86:b3:b5:ff:
         fc:02:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:34:01 2025 by rpki-client