Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/34352e3233312e3132342e302f32322d3332203d3e20323637313938.roa
File:                     34352e3233312e3132342e302f32322d3332203d3e20323637313938.roa (raw, json)
Hash identifier:          Qa5kV1YmPXIwguj2WBIA/8JNv/iGTbXRLSqHpbqLSsY=
Subject key identifier:   45:C3:AF:E4:8A:C9:DA:69:66:01:D6:8E:0D:9A:05:26:D1:4C:00:53
Certificate issuer:       /CN=4A878B171A89865FE50F9279FA62C99093D05B86
Certificate serial:       0AD49D591EEF426BDED898CE92CB736402CB7BFE
Authority key identifier: 4A:87:8B:17:1A:89:86:5F:E5:0F:92:79:FA:62:C9:90:93:D0:5B:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A878B171A89865FE50F9279FA62C99093D05B86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/34352e3233312e3132342e302f32322d3332203d3e20323637313938.roa
Signing time:             Fri 23 May 2025 12:15:57 +0000
ROA not before:           Fri 23 May 2025 12:10:57 +0000
ROA not after:            Fri 22 May 2026 12:15:57 +0000
asID:                     267198
IP address blocks:        45.231.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/4A878B171A89865FE50F9279FA62C99093D05B86.crl
                          rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/4A878B171A89865FE50F9279FA62C99093D05B86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A878B171A89865FE50F9279FA62C99093D05B86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 13:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d4:9d:59:1e:ef:42:6b:de:d8:98:ce:92:cb:73:64:02:cb:7b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A878B171A89865FE50F9279FA62C99093D05B86
        Validity
            Not Before: May 23 12:10:57 2025 GMT
            Not After : May 22 12:15:57 2026 GMT
        Subject: CN=45C3AFE48AC9DA696601D68E0D9A0526D14C0053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:ed:9a:3b:da:d7:e1:f7:c3:d1:c4:91:87:
                    60:b0:21:74:99:2f:de:bc:8f:78:22:4e:e8:d9:03:
                    ab:cf:58:40:81:7e:16:7d:06:e8:d4:ee:c2:7f:3c:
                    c0:3d:14:b6:e3:0a:ea:9d:50:35:44:01:24:52:c3:
                    1b:df:e2:12:2b:00:d9:ec:b0:df:71:fd:b7:58:ea:
                    8c:4e:45:8f:4e:8e:e0:71:39:82:cf:48:1f:71:2d:
                    10:92:a7:a5:6e:8b:d7:6c:2f:83:3d:22:c4:9f:99:
                    81:28:64:10:d0:67:53:81:ec:45:17:68:3d:f4:d6:
                    e7:ea:ad:55:50:e6:ab:78:83:88:93:ff:93:fb:9f:
                    ce:68:e8:80:aa:4f:ca:92:91:b9:eb:04:60:b3:e1:
                    75:0f:7b:c7:9d:38:67:01:08:60:9e:45:e8:f2:f9:
                    ad:4e:4b:ec:73:6d:ce:83:76:6b:85:8d:26:82:b8:
                    96:40:96:a1:ba:94:cc:c2:7e:ac:af:2c:d7:98:51:
                    43:2f:2f:36:e8:cf:c2:dd:9e:72:66:4c:7c:f0:33:
                    a7:c0:c4:20:32:63:bc:ff:08:32:58:b7:43:64:a7:
                    72:0b:2b:93:3b:40:14:dc:72:17:73:45:f1:55:50:
                    52:57:06:1a:19:ac:a7:cf:2e:e6:6c:fc:a4:16:d0:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C3:AF:E4:8A:C9:DA:69:66:01:D6:8E:0D:9A:05:26:D1:4C:00:53
            X509v3 Authority Key Identifier:
                keyid:4A:87:8B:17:1A:89:86:5F:E5:0F:92:79:FA:62:C9:90:93:D0:5B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/4A878B171A89865FE50F9279FA62C99093D05B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A878B171A89865FE50F9279FA62C99093D05B86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/34352e3233312e3132342e302f32322d3332203d3e20323637313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:f7:55:18:78:11:dc:ee:fe:f4:eb:a0:3f:7c:9a:61:48:3b:
         02:82:5d:3f:48:ff:6a:99:11:4e:7b:38:a2:b2:19:56:ac:47:
         91:02:81:67:10:5a:6c:8a:8c:96:94:b2:e2:a3:f8:b0:3d:de:
         9f:13:18:ef:54:31:72:5f:2e:1e:91:2e:92:a7:23:e1:10:26:
         3d:c0:21:99:7f:8f:ab:8e:a5:14:0b:c0:e0:fd:99:98:f0:c9:
         54:17:dd:00:a0:f1:61:7f:e3:5c:80:21:ab:53:bc:a8:e7:a4:
         ca:84:4b:47:53:97:2f:19:34:ed:9e:8f:52:6a:5f:76:7c:e9:
         10:5d:cd:6a:26:ef:2e:20:91:4d:87:31:97:11:8f:26:0e:89:
         0d:7b:5b:73:32:70:d5:e3:4a:0f:64:fc:aa:80:aa:4b:18:e3:
         73:63:98:60:98:78:44:dc:47:57:68:b5:dc:28:e3:5a:4c:93:
         5a:94:b2:e6:e1:a5:da:a9:c8:1f:45:ed:fb:e7:38:f6:9b:0b:
         3c:73:c2:6d:9a:2b:ea:6e:ad:d8:41:e2:20:88:3a:33:e1:63:
         8f:bb:64:44:73:88:4e:fe:cd:96:05:63:66:7d:7b:f6:01:1b:
         0b:9c:76:35:fa:1c:f2:79:e9:1e:18:b6:d1:af:8f:1a:3b:6c:
         91:e8:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:11:08 2025 by rpki-client