Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/34352e3232342e302e302f32332d3234203d3e20323733333132.roa
File:                     34352e3232342e302e302f32332d3234203d3e20323733333132.roa (raw, json)
Hash identifier:          /dJMJ8bdkCwIACN66BkQnW8cCpuLwENWH/J1DCHSmyE=
Subject key identifier:   AC:F1:C7:E6:3D:C8:A0:52:07:1B:68:C8:32:A4:19:05:52:CD:CB:08
Certificate issuer:       /CN=19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF
Certificate serial:       6FE7176950CF0EB79AE9375E3FBEDF64749EACB7
Authority key identifier: 19:B3:6D:8A:4C:D1:CC:FD:D6:E2:CC:4D:FC:B2:5E:56:07:6E:11:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/34352e3232342e302e302f32332d3234203d3e20323733333132.roa
Signing time:             Wed 12 Mar 2025 12:36:13 +0000
ROA not before:           Wed 12 Mar 2025 12:31:13 +0000
ROA not after:            Wed 11 Mar 2026 12:36:13 +0000
asID:                     273312
IP address blocks:        45.224.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.crl
                          rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 21:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e7:17:69:50:cf:0e:b7:9a:e9:37:5e:3f:be:df:64:74:9e:ac:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF
        Validity
            Not Before: Mar 12 12:31:13 2025 GMT
            Not After : Mar 11 12:36:13 2026 GMT
        Subject: CN=ACF1C7E63DC8A052071B68C832A4190552CDCB08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:98:59:42:7c:63:10:61:d9:3e:ea:fb:2e:
                    35:57:56:4b:49:81:3e:94:3b:05:a1:21:4a:36:02:
                    a4:f6:8e:08:bc:39:af:04:3c:28:dd:62:46:a2:34:
                    2d:eb:55:d2:83:0a:be:b7:56:c9:f2:50:7e:68:08:
                    fe:39:27:bb:66:ef:9c:e6:32:04:9d:70:41:5c:f1:
                    c9:20:43:e2:10:92:e3:aa:50:0c:7f:1c:80:0e:03:
                    a5:53:45:0d:4f:e2:2f:f2:b6:ab:3b:3e:1d:c9:75:
                    71:32:09:74:9f:59:72:2c:e2:7d:61:07:dd:d3:c7:
                    35:4a:61:5f:e7:95:73:66:f0:e6:92:cf:30:db:9a:
                    5c:58:6e:e0:79:29:a4:42:88:09:67:0e:84:03:f5:
                    01:d3:98:a5:66:4c:9c:cd:d0:0a:eb:8b:c1:1f:39:
                    9e:43:19:58:32:84:d8:1c:fb:94:83:c8:c3:37:05:
                    9d:2e:89:cf:d9:21:45:50:05:80:1f:de:1a:5b:70:
                    d9:45:a3:49:01:62:a9:27:8d:73:af:f8:af:f0:4f:
                    6b:7e:ba:be:6c:6c:be:60:20:a1:10:b3:27:e6:0a:
                    1d:2e:64:b0:c0:b4:1d:dc:f8:7b:d5:27:da:e7:2c:
                    68:ab:9d:9f:ee:60:45:95:25:82:33:09:ae:9a:f6:
                    63:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F1:C7:E6:3D:C8:A0:52:07:1B:68:C8:32:A4:19:05:52:CD:CB:08
            X509v3 Authority Key Identifier:
                keyid:19:B3:6D:8A:4C:D1:CC:FD:D6:E2:CC:4D:FC:B2:5E:56:07:6E:11:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/34352e3232342e302e302f32332d3234203d3e20323733333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:ad:74:c8:aa:b6:e4:5e:40:e8:93:bf:0d:e2:f1:3e:50:5e:
         00:e4:af:e5:b5:61:49:b1:ce:10:79:40:05:9c:dc:17:7b:22:
         ed:51:7f:42:81:b2:41:5d:0c:32:a9:87:dd:86:8c:87:92:5d:
         c3:2e:37:5c:f9:b9:90:bc:b0:30:96:4b:0b:04:35:20:31:35:
         d5:cb:cc:a1:52:dd:3a:73:60:83:bd:da:08:fc:d2:ce:fe:79:
         df:59:31:ad:6d:4c:11:08:f1:1d:72:6a:f7:ad:c4:89:2f:d2:
         a7:9b:16:10:2c:30:79:ae:9e:8d:89:50:cc:b3:25:9b:03:56:
         d4:68:55:2a:09:b2:9e:a0:62:aa:27:3f:60:4f:ea:d8:81:d5:
         72:f1:a6:6d:10:95:e8:e4:6f:0c:09:d5:e9:c4:b0:85:57:74:
         2e:b3:5f:26:52:1b:08:ed:57:0c:ef:2c:95:1f:f6:10:10:bc:
         20:d2:81:1f:5e:92:5c:cd:0b:74:30:cc:ab:06:ba:e8:fe:1f:
         e5:b1:20:dd:3e:fc:6e:99:97:b0:9b:6d:8f:44:83:77:ed:cb:
         3f:6d:b0:51:5e:68:76:39:81:df:35:e5:30:36:74:ec:b6:4c:
         9b:40:22:8a:2c:89:c2:50:43:44:42:40:80:ee:15:92:f6:dd:
         da:07:bc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:01:47 2025 by rpki-client