Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa
File:                     34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa (raw, json)
Hash identifier:          vmUqtdLNe6sx3wOlzgRDPBjYrf5oAD5yUM/mEpGrWK0=
Subject key identifier:   95:89:8F:C3:DB:92:E4:84:D5:B8:E2:92:5B:0D:DE:B7:13:4E:3E:A3
Certificate issuer:       /CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
Certificate serial:       22BE66D636EEDA1A13F0EC7AA00B2FBD543181D6
Authority key identifier: 62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa
Signing time:             Thu 06 Mar 2025 13:33:18 +0000
ROA not before:           Thu 06 Mar 2025 13:28:18 +0000
ROA not after:            Thu 05 Mar 2026 13:33:18 +0000
asID:                     268160
IP address blocks:        45.170.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl
                          rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:be:66:d6:36:ee:da:1a:13:f0:ec:7a:a0:0b:2f:bd:54:31:81:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
        Validity
            Not Before: Mar  6 13:28:18 2025 GMT
            Not After : Mar  5 13:33:18 2026 GMT
        Subject: CN=95898FC3DB92E484D5B8E2925B0DDEB7134E3EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:14:69:2e:23:32:bf:d7:bd:fe:67:b6:79:3d:
                    b7:f4:a8:12:b5:4d:40:11:3f:43:98:9d:24:ca:b6:
                    35:61:e7:93:9a:52:cb:d5:dd:b6:f0:f8:0b:a8:b6:
                    8b:69:c9:cb:39:30:f0:de:d2:e7:3e:d0:b6:a2:f2:
                    ef:ef:ed:c8:8d:13:f9:1a:08:66:2d:8a:71:e9:e4:
                    4f:ad:67:8e:dc:2a:0f:02:5a:7a:9b:5a:78:11:ec:
                    33:b9:c7:aa:d7:ab:5c:b1:6f:7e:75:25:ec:6b:de:
                    cb:e4:37:a9:8d:fc:bf:27:be:ab:c0:2c:09:94:83:
                    6c:77:90:18:62:ab:28:42:1d:7a:56:e1:49:1e:7a:
                    a7:5d:7a:8a:f1:1f:c3:b0:79:82:ff:25:e0:38:28:
                    51:33:69:9b:73:7f:eb:51:be:88:83:13:5e:ea:5e:
                    c4:f8:c4:cf:e0:cb:b1:85:88:87:3a:35:73:d7:50:
                    a0:78:04:7e:17:b5:fc:6b:e7:7e:c0:e2:32:b1:fd:
                    7d:fe:8b:fe:6f:23:75:ea:fb:d9:be:06:b2:54:1c:
                    92:90:d2:ac:e1:62:5b:0f:2d:e8:16:46:42:9c:11:
                    1d:e3:ff:a2:ea:59:a7:5e:2c:59:08:c1:26:7f:6c:
                    ec:77:28:37:45:45:b5:9d:74:d0:02:af:d3:99:62:
                    2a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:89:8F:C3:DB:92:E4:84:D5:B8:E2:92:5B:0D:DE:B7:13:4E:3E:A3
            X509v3 Authority Key Identifier:
                keyid:62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:f2:25:d4:26:02:d9:d4:c0:fd:93:96:9a:56:bc:53:0d:ab:
         d9:8a:5a:f4:1f:69:ce:ac:02:70:28:fa:75:83:03:c1:10:56:
         1f:e2:41:6e:c6:ff:7a:91:23:27:88:01:c9:00:bd:ee:6f:17:
         82:2b:f9:a2:0e:5e:69:f3:85:39:a1:0f:cf:fa:9f:a1:9c:a7:
         2f:65:bc:38:58:e7:99:e6:b5:88:6f:9b:49:1c:ee:81:64:c2:
         96:d1:9e:b1:9a:0b:35:e2:04:e7:2f:41:51:38:cc:b8:06:af:
         97:10:d9:92:9e:fb:53:09:fc:c1:42:a8:81:db:52:87:c1:75:
         db:a6:89:98:89:df:92:7b:36:68:da:d7:86:63:25:d8:22:71:
         70:e1:a8:9e:fe:fb:36:74:3e:cc:76:31:19:b4:5c:ca:fa:cd:
         05:43:3a:c9:13:6e:c8:5a:0f:45:90:0f:71:6c:d5:1b:59:5f:
         a4:af:6d:dc:0e:7b:07:88:77:af:99:91:f0:82:9c:be:7b:fe:
         05:47:31:55:f3:6d:a2:db:d7:7f:45:3d:ab:4d:9b:b2:27:7a:
         11:a0:cd:c2:5d:17:bf:20:81:ce:81:7a:59:04:06:26:b6:3e:
         8f:28:51:6c:11:d5:84:59:40:30:c8:8b:d9:a8:d7:57:de:9f:
         1c:17:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:34 2025 by rpki-client