Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa
File:                     34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa (raw, json)
Hash identifier:          Y5JNXMEumxDVUZiElAyi7R+3gKcGhMNvHvm8dkJM32M=
Subject key identifier:   0F:09:0E:DE:0D:4C:9B:7B:CE:D8:8F:74:B8:E8:AD:AB:DA:98:D5:50
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       773C8C37D8B6F2E9C096B84A89F2CD9A38E67E47
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa
Signing time:             Thu 06 Mar 2025 18:28:48 +0000
ROA not before:           Thu 06 Mar 2025 18:23:48 +0000
ROA not after:            Thu 05 Mar 2026 18:28:48 +0000
asID:                     263347
IP address blocks:        45.162.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3c:8c:37:d8:b6:f2:e9:c0:96:b8:4a:89:f2:cd:9a:38:e6:7e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Mar  6 18:23:48 2025 GMT
            Not After : Mar  5 18:28:48 2026 GMT
        Subject: CN=0F090EDE0D4C9B7BCED88F74B8E8ADABDA98D550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:f5:e3:d4:e8:ea:c8:83:a9:b4:26:20:1b:
                    3b:dc:0a:e1:50:8f:47:ae:2b:97:a8:60:21:b3:2f:
                    d8:25:b7:04:8f:2b:25:39:7e:f3:f4:e4:22:fd:4d:
                    1f:1b:79:8f:08:e7:53:07:dc:56:26:b4:40:8e:23:
                    ec:a4:9f:73:0a:4c:24:60:30:24:af:f4:87:cb:7d:
                    9b:6d:51:17:f0:22:6b:94:2d:5d:35:38:dd:ff:ac:
                    28:2e:ed:7f:a4:e7:ab:75:39:33:d5:de:6c:9c:fa:
                    f9:f9:0b:e6:29:9a:95:31:46:a5:8d:d6:2a:af:36:
                    b2:b5:b1:bc:51:57:61:3e:44:a5:6a:f9:eb:15:ee:
                    46:45:f5:3c:e1:e5:c9:a8:b9:86:05:59:9d:eb:b6:
                    8a:14:be:cf:e8:8e:ea:0e:d3:ed:f4:93:5e:d8:69:
                    f7:7f:6c:b1:e3:b3:49:b1:dc:c6:1f:56:f0:6d:e2:
                    8d:97:b5:16:76:2b:8c:bf:b7:f7:e4:a8:e9:7f:43:
                    64:90:f2:fc:71:09:76:c5:9b:8d:09:91:db:a4:9a:
                    62:82:92:49:a1:47:7d:ae:77:63:e9:b7:7f:0c:10:
                    5d:f2:35:4f:7f:2d:7b:b5:5a:a8:af:31:04:e4:e4:
                    98:db:61:9f:16:87:17:6c:35:f3:3b:5e:bb:f3:da:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:09:0E:DE:0D:4C:9B:7B:CE:D8:8F:74:B8:E8:AD:AB:DA:98:D5:50
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32322d3232203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:6d:24:16:22:f3:1b:69:bc:97:61:8d:ca:df:e2:82:95:
         f6:92:81:64:67:e5:6d:5b:73:35:47:bf:e5:a4:46:83:db:49:
         69:e1:a3:a5:c8:73:05:ef:45:90:4b:fc:72:a6:16:0f:6c:65:
         a9:e1:b8:0e:9f:77:c1:94:a5:4b:58:ce:be:70:25:2c:90:8d:
         9f:4a:d9:65:7a:4d:dd:04:82:ed:8a:1b:78:3d:0c:02:d6:2c:
         b4:17:9a:40:9b:a3:7f:1e:68:b7:d8:30:a3:01:d7:1c:e6:95:
         f1:af:a4:d2:f0:23:14:58:dc:17:30:94:a3:97:87:25:7f:51:
         a2:9c:5f:aa:2a:3d:ef:3f:35:bd:fb:b3:be:5c:6a:a2:4c:e9:
         79:20:9d:4f:29:aa:54:8c:c7:31:dd:34:60:39:c0:8b:91:77:
         d7:36:ea:20:81:e5:4d:10:df:fa:a3:61:77:66:c7:13:41:36:
         ba:04:7f:60:7a:4a:02:3d:09:5e:ea:3b:24:ad:1b:a1:f6:d9:
         96:b2:5d:b7:d3:ce:cb:de:fc:d3:3a:9a:bb:a7:f3:41:e3:32:
         5b:79:12:e7:31:cb:00:cd:93:97:05:28:d1:4c:88:d4:10:91:
         7c:e3:42:be:17:1c:1d:a7:ea:ba:08:1d:39:f8:5d:5e:da:a0:
         10:2e:eb:0d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdzyMN9i28unAlrhKifLNmjjmfkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNTAzMDYxODIzNDhaFw0yNjAzMDUxODI4NDhaMDMxMTAvBgNV
BAMTKDBGMDkwRURFMEQ0QzlCN0JDRUQ4OEY3NEI4RThBREFCREE5OEQ1NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZuvXj1OjqyIOptCYgGzvcCuFQ
j0euK5eoYCGzL9gltwSPKyU5fvP05CL9TR8beY8I51MH3FYmtECOI+ykn3MKTCRg
MCSv9IfLfZttURfwImuULV01ON3/rCgu7X+k56t1OTPV3myc+vn5C+YpmpUxRqWN
1iqvNrK1sbxRV2E+RKVq+esV7kZF9Tzh5cmouYYFWZ3rtooUvs/ojuoO0+30k17Y
afd/bLHjs0mx3MYfVvBt4o2XtRZ2K4y/t/fkqOl/Q2SQ8vxxCXbFm40JkdukmmKC
kkmhR32ud2Ppt38MEF3yNU9/LXu1WqivMQTk5JjbYZ8WhxdsNfM7Xrvz2tkdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDwkO3g1Mm3vO2I90uOitq9qY1VAwHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzQzNTJlMzEzNjMyMmUzMTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItopgwDQYJKoZIhvcNAQELBQADggEBAFEubSQW
IvMbabyXYY3K3+KClfaSgWRn5W1bczVHv+WkRoPbSWnho6XIcwXvRZBL/HKmFg9s
ZanhuA6fd8GUpUtYzr5wJSyQjZ9K2WV6Td0Egu2KG3g9DALWLLQXmkCbo38eaLfY
MKMB1xzmlfGvpNLwIxRY3BcwlKOXhyV/UaKcX6oqPe8/Nb37s75caqJM6XkgnU8p
qlSMxzHdNGA5wIuRd9c26iCB5U0Q3/qjYXdmxxNBNroEf2B6SgI9CV7qOyStG6H2
2ZayXbfTzsve/NM6mrun80HjMlt5EucxywDNk5cFKNFMiNQQkXzjQr4XHB2n6roI
HTn4XV7aoBAu6w0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:53:20 2025 by rpki-client