Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/34352e3137312e31322e302f32322d3332203d3e20323638313737.roa
File:                     34352e3137312e31322e302f32322d3332203d3e20323638313737.roa (raw, json)
Hash identifier:          /L3cKYY3bx57Hs+7rGKNswPzUiNvZCVuU89AKxhtcvU=
Subject key identifier:   C3:CD:02:EB:55:1C:AB:7A:00:22:8D:D7:96:3C:3E:83:C7:B1:E6:C4
Certificate issuer:       /CN=AA5A260F505713B62C4766443558AE922FFFC6F7
Certificate serial:       6834B61B648171616B7C52462B0B59E1CE701451
Authority key identifier: AA:5A:26:0F:50:57:13:B6:2C:47:66:44:35:58:AE:92:2F:FF:C6:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA5A260F505713B62C4766443558AE922FFFC6F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/34352e3137312e31322e302f32322d3332203d3e20323638313737.roa
Signing time:             Thu 06 Mar 2025 02:26:03 +0000
ROA not before:           Thu 06 Mar 2025 02:21:03 +0000
ROA not after:            Thu 05 Mar 2026 02:26:03 +0000
asID:                     268177
IP address blocks:        45.171.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.crl
                          rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA5A260F505713B62C4766443558AE922FFFC6F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 09:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:34:b6:1b:64:81:71:61:6b:7c:52:46:2b:0b:59:e1:ce:70:14:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5A260F505713B62C4766443558AE922FFFC6F7
        Validity
            Not Before: Mar  6 02:21:03 2025 GMT
            Not After : Mar  5 02:26:03 2026 GMT
        Subject: CN=C3CD02EB551CAB7A00228DD7963C3E83C7B1E6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:cc:4c:54:ae:0c:44:29:51:49:b4:a7:d0:
                    f3:9f:8f:7b:16:55:ae:0e:17:68:0a:79:ea:8b:13:
                    41:8b:5e:e7:8b:03:58:a0:44:66:91:20:ba:d5:37:
                    a7:94:cc:5d:42:d1:af:3f:0d:9a:d2:a3:cd:58:25:
                    2c:e2:b9:3a:58:41:70:58:32:2b:47:07:dc:b6:8c:
                    7a:f5:13:f9:7d:98:dd:42:26:01:99:71:a1:ae:ae:
                    d9:1f:3f:84:3e:40:c7:96:83:5c:71:cb:85:68:4e:
                    d8:cc:76:ef:69:81:7d:5d:ff:c8:54:ae:71:95:65:
                    00:0c:db:42:f5:07:93:52:72:7c:4d:26:29:45:dd:
                    35:5f:97:00:d7:82:23:bd:56:be:73:ed:81:68:3f:
                    4f:82:43:65:dc:bf:e9:0f:9d:62:49:0d:ec:bc:00:
                    77:db:e7:54:3d:de:9f:7f:f3:7e:4c:5c:90:44:d1:
                    5e:c2:ce:2d:ff:66:61:72:6a:12:8c:4f:eb:4d:64:
                    51:9a:77:a5:07:8d:2a:9e:77:2f:89:71:9d:b4:86:
                    26:d7:95:96:0d:8e:15:03:25:cd:5b:06:63:22:91:
                    ca:41:30:be:7e:23:17:6a:b0:c4:95:fd:18:5e:b0:
                    f6:1b:1a:53:b4:53:59:c1:a2:37:35:7d:bd:64:73:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CD:02:EB:55:1C:AB:7A:00:22:8D:D7:96:3C:3E:83:C7:B1:E6:C4
            X509v3 Authority Key Identifier:
                keyid:AA:5A:26:0F:50:57:13:B6:2C:47:66:44:35:58:AE:92:2F:FF:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA5A260F505713B62C4766443558AE922FFFC6F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/34352e3137312e31322e302f32322d3332203d3e20323638313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:ff:6e:09:ad:fa:90:0d:d6:1e:44:a0:2e:e6:6d:5e:9a:63:
         68:30:4f:53:c6:04:ba:b1:44:46:38:d9:af:e0:b3:4c:79:57:
         fa:6e:ff:b0:e3:ff:16:f6:cb:9f:63:09:c4:dc:f7:25:7c:23:
         51:e4:e3:57:57:f4:a9:90:5c:b9:a7:04:34:e4:76:b2:5f:fe:
         8f:33:6d:cd:a4:93:e5:0d:36:20:bc:53:a6:c6:b9:30:13:a3:
         d4:6e:be:3a:5c:04:53:d5:b5:d1:f2:63:ee:c6:cb:be:08:56:
         d0:1b:79:1f:dc:f9:4c:e2:0c:46:ff:4b:54:0e:16:7b:c4:fa:
         3b:b0:be:3f:03:29:5a:e7:a3:a5:6d:5b:55:ff:88:c4:12:70:
         a9:56:9a:8f:9d:34:e7:2c:35:91:53:a5:a3:f3:aa:cb:47:ec:
         e2:8b:df:47:4d:9b:3d:8b:a7:82:5d:32:2a:ad:8b:94:4c:12:
         e3:15:6a:89:1d:09:c4:6e:3a:28:7a:e4:79:bb:bb:58:95:bc:
         2f:dc:49:cb:1d:5f:58:f7:fc:0c:97:3e:ea:b7:eb:b7:f2:23:
         f5:9e:12:5c:95:24:a8:e0:aa:f0:87:fe:06:9c:4b:36:e0:3f:
         f6:b8:d3:c5:d5:3a:00:dd:83:93:e7:95:fe:4b:c7:65:f0:21:
         b5:4d:98:cc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaDS2G2SBcWFrfFJGKwtZ4c5wFFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE1QTI2MEY1MDU3MTNCNjJDNDc2NjQ0MzU1OEFFOTIy
RkZGQzZGNzAeFw0yNTAzMDYwMjIxMDNaFw0yNjAzMDUwMjI2MDNaMDMxMTAvBgNV
BAMTKEMzQ0QwMkVCNTUxQ0FCN0EwMDIyOERENzk2M0MzRTgzQzdCMUU2QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKScxMVK4MRClRSbSn0POfj3sW
Va4OF2gKeeqLE0GLXueLA1igRGaRILrVN6eUzF1C0a8/DZrSo81YJSziuTpYQXBY
MitHB9y2jHr1E/l9mN1CJgGZcaGurtkfP4Q+QMeWg1xxy4VoTtjMdu9pgX1d/8hU
rnGVZQAM20L1B5NScnxNJilF3TVflwDXgiO9Vr5z7YFoP0+CQ2Xcv+kPnWJJDey8
AHfb51Q93p9/835MXJBE0V7Czi3/ZmFyahKMT+tNZFGad6UHjSqedy+JcZ20hibX
lZYNjhUDJc1bBmMikcpBML5+IxdqsMSV/RhesPYbGlO0U1nBojc1fb1kc1BFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUw80C61Ucq3oAIo3Xljw+g8ex5sQwHwYDVR0j
BBgwFoAUqlomD1BXE7YsR2ZENViuki//xvcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JBU0dSTU41ZDNma1daZHB3RnNkUjZzdWtwcnpDTUp5Sk4xN2tqSkZn
dVovMS9BQTVBMjYwRjUwNTcxM0I2MkM0NzY2NDQzNTU4QUU5MjJGRkZDNkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNUEyNjBGNTA1NzEzQjYy
QzQ3NjY0NDM1NThBRTkyMkZGRkM2RjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiQVNHUk1ONWQzZmtXWmRwd0ZzZFI2c3VrcHJ6Q01KeUpOMTdrakpGZ3VaLzEv
MzQzNTJlMzEzNzMxMmUzMTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzEzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLasMMA0GCSqGSIb3DQEBCwUAA4IBAQCC/24JrfqQ
DdYeRKAu5m1emmNoME9TxgS6sURGONmv4LNMeVf6bv+w4/8W9sufYwnE3PclfCNR
5ONXV/SpkFy5pwQ05HayX/6PM23NpJPlDTYgvFOmxrkwE6PUbr46XART1bXR8mPu
xsu+CFbQG3kf3PlM4gxG/0tUDhZ7xPo7sL4/Ayla56OlbVtV/4jEEnCpVpqPnTTn
LDWRU6Wj86rLR+zii99HTZs9i6eCXTIqrYuUTBLjFWqJHQnEbjooeuR5u7tYlbwv
3EnLHV9Y9/wMlz7qt+u38iP1nhJclSSo4Krwh/4GnEs24D/2uNPF1ToA3YOT55X+
S8dl8CG1TZjM
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:11:39 2025 by rpki-client