Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa
File:                     34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa (raw, json)
Hash identifier:          b3lyoHK7cnMfZlfwSyMTUao3pgodLMS9LB2LB4y6Fh0=
Subject key identifier:   AF:12:E0:4D:3A:FC:1D:9D:45:EA:12:AB:FC:0F:BF:63:18:D2:47:D4
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       5BC015AC9A5B6F884124B58ED5ADB90BA8B63E10
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa
Signing time:             Wed 19 Mar 2025 18:33:16 +0000
ROA not before:           Wed 19 Mar 2025 18:28:16 +0000
ROA not after:            Wed 18 Mar 2026 18:33:16 +0000
asID:                     269183
IP address blocks:        45.181.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl
                          rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 08:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c0:15:ac:9a:5b:6f:88:41:24:b5:8e:d5:ad:b9:0b:a8:b6:3e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: Mar 19 18:28:16 2025 GMT
            Not After : Mar 18 18:33:16 2026 GMT
        Subject: CN=AF12E04D3AFC1D9D45EA12ABFC0FBF6318D247D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ce:cd:44:6f:0e:a8:8a:ab:74:30:ae:46:6d:
                    a6:95:13:8b:01:45:68:da:09:e3:88:a7:f1:28:00:
                    12:44:f5:36:88:42:38:3e:62:94:8c:36:c5:8c:69:
                    1b:44:77:66:dc:1f:81:4c:a4:aa:ea:d5:24:6a:ee:
                    4e:4e:83:69:76:d7:d6:ed:ad:35:44:10:fe:88:c8:
                    b2:66:34:25:ff:3f:de:c5:4c:39:11:cd:44:3f:b6:
                    c6:a7:9d:90:04:d1:1b:64:32:df:d5:3c:e2:9b:2d:
                    ea:01:3c:a8:f8:42:b9:e9:fe:7f:8a:9d:9a:3b:40:
                    c2:a3:af:42:22:10:0e:99:d4:fc:2c:a6:f5:f3:f8:
                    b6:09:4a:3d:f3:1c:79:7a:a5:79:26:9d:6d:dc:97:
                    71:c7:fb:2c:33:f5:99:64:88:ca:c8:68:74:31:13:
                    0f:bf:ff:f7:69:b6:7c:8b:d0:d6:3d:f0:92:40:9b:
                    6c:d7:ff:b7:2d:ff:19:54:4f:42:65:69:28:00:57:
                    7b:03:7f:08:66:94:81:cd:23:f7:ec:90:2d:5a:e7:
                    0b:dd:c1:0b:3e:cb:1c:e9:e3:14:19:91:1e:57:1e:
                    f4:be:29:52:c3:3f:a7:c3:48:ba:13:94:bd:aa:dd:
                    43:2c:05:a0:cc:b0:26:0a:a7:f1:ba:54:e5:b1:6d:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:12:E0:4D:3A:FC:1D:9D:45:EA:12:AB:FC:0F:BF:63:18:D2:47:D4
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:18:6f:65:2a:aa:5d:c9:f6:76:3a:08:e2:f2:aa:6a:32:1b:
         54:8c:78:31:21:b4:9d:ee:86:9a:a3:fd:2d:f4:e0:84:5a:58:
         ae:a5:0a:35:a6:7a:ae:15:72:3f:3a:db:d3:1a:ee:d1:0b:97:
         69:4b:f5:12:08:b9:bd:2e:fa:99:6d:6f:97:c9:2d:16:ac:93:
         46:af:c7:4f:b9:2c:a2:bf:9d:68:91:d6:46:b7:35:50:41:ee:
         e0:d3:20:14:4c:e3:0d:de:0f:f5:d6:1e:2d:5c:ec:2e:c6:0b:
         88:ce:9c:20:dc:73:3e:26:59:89:a0:dc:bd:92:42:56:30:e0:
         06:47:ec:0c:29:11:84:69:dd:6d:67:c6:2c:8e:f6:e8:6f:44:
         bd:31:86:51:8f:66:6b:d8:b7:6a:44:d9:f4:8c:75:b6:d1:5a:
         b1:81:17:6c:5f:8f:55:0a:99:3d:c2:2c:b9:e5:57:7f:a3:d7:
         6e:e3:6b:d6:17:5b:b8:24:58:94:6f:fa:db:12:2b:1e:8d:aa:
         4d:a2:de:24:2f:20:e5:7e:13:32:df:13:cd:ec:2b:87:c8:39:
         e0:3d:ff:c8:23:67:f2:e3:9a:23:04:44:5e:c0:f3:16:6f:a8:
         9c:6c:41:9a:74:4c:99:ba:a1:47:1a:a1:fa:a6:ac:fe:87:5e:
         4a:6c:ec:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:08:32 2025 by rpki-client