Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/34352e3137382e3131322e302f32322d3234203d3e20323639303337.roa
File:                     34352e3137382e3131322e302f32322d3234203d3e20323639303337.roa (raw, json)
Hash identifier:          amaSCzqn/xsXH/EbydyXEyMXSLaknBb8dbflAj98/oM=
Subject key identifier:   87:43:75:96:4D:CD:B1:36:7A:F2:03:1E:B8:0C:FD:B0:BA:81:A6:1A
Certificate issuer:       /CN=11DBA150DA3969CE822352214139847D219FDEF0
Certificate serial:       3D5FF9DA024CC9EFF81D230754AF551691BC7C3C
Authority key identifier: 11:DB:A1:50:DA:39:69:CE:82:23:52:21:41:39:84:7D:21:9F:DE:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11DBA150DA3969CE822352214139847D219FDEF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/34352e3137382e3131322e302f32322d3234203d3e20323639303337.roa
Signing time:             Mon 03 Feb 2025 18:34:09 +0000
ROA not before:           Mon 03 Feb 2025 18:29:09 +0000
ROA not after:            Mon 02 Feb 2026 18:34:09 +0000
asID:                     269037
IP address blocks:        45.178.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/11DBA150DA3969CE822352214139847D219FDEF0.crl
                          rsync://rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/11DBA150DA3969CE822352214139847D219FDEF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11DBA150DA3969CE822352214139847D219FDEF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 00:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5f:f9:da:02:4c:c9:ef:f8:1d:23:07:54:af:55:16:91:bc:7c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11DBA150DA3969CE822352214139847D219FDEF0
        Validity
            Not Before: Feb  3 18:29:09 2025 GMT
            Not After : Feb  2 18:34:09 2026 GMT
        Subject: CN=874375964DCDB1367AF2031EB80CFDB0BA81A61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:8a:6f:1a:06:07:96:c3:44:f6:34:39:fd:
                    49:de:c4:ca:4d:78:1a:4a:03:06:83:b7:8a:7d:38:
                    67:d8:44:f0:8f:aa:12:8e:63:67:61:cc:76:49:a3:
                    ad:7a:47:cb:d0:3c:3b:d0:6d:ca:38:0f:8a:6f:8f:
                    52:eb:1c:b2:58:17:0a:02:fb:cd:3c:fc:6a:b4:c0:
                    e2:b2:65:a9:6f:0a:f3:b9:74:da:13:c3:2d:22:a5:
                    81:18:a9:f0:24:74:13:8b:e4:0c:e7:8a:27:72:3a:
                    64:dd:36:3d:ac:1f:39:34:78:81:fd:11:c8:94:05:
                    41:9e:6c:0b:92:0c:d3:73:ad:7f:40:ed:46:35:99:
                    56:94:f8:01:3a:a5:db:fd:78:13:fd:2e:bd:6d:a8:
                    da:c4:09:90:34:1c:d4:f0:1c:c6:3a:53:6c:9e:1a:
                    de:c5:3b:3a:df:e5:50:c6:f7:74:9f:2b:1f:63:a9:
                    08:28:06:eb:34:49:b7:99:3c:bc:0d:f7:a7:d2:8b:
                    d6:97:1c:f3:53:63:22:c7:5d:7a:72:f8:01:7e:85:
                    18:51:21:f5:da:71:fd:93:73:af:80:c9:17:99:d3:
                    68:8f:8a:d9:9b:69:22:81:73:f8:3f:27:d5:7e:fa:
                    78:54:8a:45:85:47:f8:22:ed:1c:8b:f2:96:87:37:
                    f1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:43:75:96:4D:CD:B1:36:7A:F2:03:1E:B8:0C:FD:B0:BA:81:A6:1A
            X509v3 Authority Key Identifier:
                keyid:11:DB:A1:50:DA:39:69:CE:82:23:52:21:41:39:84:7D:21:9F:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/11DBA150DA3969CE822352214139847D219FDEF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11DBA150DA3969CE822352214139847D219FDEF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/34352e3137382e3131322e302f32322d3234203d3e20323639303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:f8:6b:ce:dc:e8:a0:90:a2:92:57:34:b0:0e:b0:fb:d7:4b:
         64:79:db:08:6f:4a:b1:f5:ab:c8:12:6e:f4:ef:1d:80:84:61:
         e1:e2:78:46:60:de:21:af:54:49:99:da:b7:4e:7e:be:3e:c4:
         9d:89:88:ac:39:7d:0e:4f:f4:04:10:42:8a:9d:ef:16:c8:df:
         31:bf:39:4e:73:d9:68:30:34:9c:23:ce:4f:e6:af:44:68:48:
         64:1c:f9:73:f3:1a:26:dd:ef:44:38:2e:c2:c4:75:85:93:65:
         ae:ed:e2:b9:fd:71:9f:a0:37:7a:29:20:30:51:aa:05:a6:b4:
         e2:2f:98:c6:c5:7b:11:ec:10:2e:67:a0:5e:69:ba:d6:da:3d:
         b1:fe:83:8b:cb:71:41:a7:aa:27:ad:46:e5:df:19:97:23:39:
         e5:9c:2b:d3:b9:97:2f:05:54:21:65:2f:83:89:38:39:3e:e4:
         04:e1:78:82:91:3d:af:44:fa:bd:5e:89:98:f1:55:91:d8:7d:
         16:ea:d1:c9:78:c7:be:3e:1e:61:30:f6:9b:2c:9e:d6:a7:29:
         b5:80:1b:04:0e:b9:71:98:82:b9:12:13:6c:9b:22:98:57:74:
         b9:68:02:4c:f6:d6:00:c0:24:5f:90:6e:9d:63:a0:d2:0a:e6:
         e0:33:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:59:38 2025 by rpki-client