Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/34352e3233332e35322e302f32322d3234203d3e20323637323939.roa
File:                     34352e3233332e35322e302f32322d3234203d3e20323637323939.roa (raw, json)
Hash identifier:          RTd9J1c28XlXqVBlTo920pxMIXWqV+es/p6t9zS5Dvg=
Subject key identifier:   79:DC:B7:53:3F:54:45:D7:57:68:83:4F:D6:62:58:0F:20:B9:E6:4B
Certificate issuer:       /CN=F1819F336E15B82769119C5B919D4F6F3543575A
Certificate serial:       556B5F74306C63640245B041DBD3646005D69108
Authority key identifier: F1:81:9F:33:6E:15:B8:27:69:11:9C:5B:91:9D:4F:6F:35:43:57:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1819F336E15B82769119C5B919D4F6F3543575A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/34352e3233332e35322e302f32322d3234203d3e20323637323939.roa
Signing time:             Thu 06 Mar 2025 16:20:41 +0000
ROA not before:           Thu 06 Mar 2025 16:15:41 +0000
ROA not after:            Thu 05 Mar 2026 16:20:41 +0000
asID:                     267299
IP address blocks:        45.233.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/F1819F336E15B82769119C5B919D4F6F3543575A.crl
                          rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/F1819F336E15B82769119C5B919D4F6F3543575A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1819F336E15B82769119C5B919D4F6F3543575A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 18:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6b:5f:74:30:6c:63:64:02:45:b0:41:db:d3:64:60:05:d6:91:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1819F336E15B82769119C5B919D4F6F3543575A
        Validity
            Not Before: Mar  6 16:15:41 2025 GMT
            Not After : Mar  5 16:20:41 2026 GMT
        Subject: CN=79DCB7533F5445D75768834FD662580F20B9E64B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:db:ba:8e:85:af:34:27:2b:26:02:c0:f1:
                    5d:66:96:e1:48:a2:0b:35:90:7d:bd:b0:92:e4:2b:
                    3c:5d:b9:3a:ac:e5:e9:6b:09:c0:1a:9b:7c:76:96:
                    d7:c3:b6:92:93:d9:23:8e:05:b0:4d:ce:e6:3b:93:
                    d9:25:f4:85:a9:6c:58:83:4a:24:dd:81:87:6b:e5:
                    25:7f:32:c4:31:15:6f:14:26:a3:b5:3a:27:3d:60:
                    f7:24:5f:06:4e:91:06:82:ac:17:18:78:a3:ef:54:
                    e6:e0:63:12:15:db:b1:3e:28:a0:fe:ed:e0:72:be:
                    f2:ae:1d:7e:3e:e1:e1:76:e6:a6:1e:73:3c:93:29:
                    00:86:70:78:db:12:f2:ab:2b:4b:17:18:b2:ef:e7:
                    57:72:53:b5:24:bc:59:19:be:69:a3:2c:da:29:65:
                    1c:7a:15:92:50:c1:79:aa:2a:72:04:2f:84:1a:f0:
                    00:7a:52:ad:f1:40:21:75:bd:3f:80:c1:1c:3a:7c:
                    a6:ad:6b:83:84:8c:3f:7c:54:d3:f5:68:b0:31:0e:
                    f2:ee:21:14:e0:d3:a2:5c:04:ea:b6:08:36:65:b1:
                    53:80:bd:5d:41:c2:f3:49:b3:2a:ee:a0:22:68:79:
                    e4:5f:eb:fa:75:f5:48:28:76:a1:cf:59:a2:70:a0:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DC:B7:53:3F:54:45:D7:57:68:83:4F:D6:62:58:0F:20:B9:E6:4B
            X509v3 Authority Key Identifier:
                keyid:F1:81:9F:33:6E:15:B8:27:69:11:9C:5B:91:9D:4F:6F:35:43:57:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/F1819F336E15B82769119C5B919D4F6F3543575A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1819F336E15B82769119C5B919D4F6F3543575A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/34352e3233332e35322e302f32322d3234203d3e20323637323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:76:a8:de:9e:8b:79:54:fe:09:da:48:01:bd:0b:7e:a9:69:
         81:4e:d9:db:e7:09:0b:9d:5a:3b:b4:15:63:f2:19:81:fd:6f:
         8e:35:c8:23:3a:e5:7f:9b:71:50:6b:0e:1c:d1:e1:13:ef:6b:
         34:3c:13:21:29:07:dd:b6:12:21:6a:c5:fc:62:a6:f0:5b:87:
         86:e5:df:c6:c9:e7:67:5d:84:33:f5:28:7d:cd:f8:e9:6d:88:
         56:1b:bd:50:cc:81:ea:06:b2:46:c7:c0:6b:7c:8a:59:4c:4c:
         4f:2b:43:52:e5:eb:83:db:08:33:8f:0a:b2:04:b4:e2:b8:72:
         eb:6b:be:d9:5c:6d:32:e0:60:cb:fc:09:a6:be:b8:ea:1b:ef:
         5c:2d:69:21:df:1f:ea:ce:7a:dc:72:22:b4:20:93:e0:3f:61:
         01:0c:7e:4c:83:f5:8c:f8:db:55:d9:96:1c:0a:eb:e8:a4:88:
         27:b0:cc:05:42:a1:d1:e4:10:e9:98:b3:4f:8c:ad:5d:66:74:
         38:2f:10:29:c2:f4:39:01:b9:5e:b3:70:18:a4:73:89:0d:ae:
         d9:6f:d5:6f:f9:78:3a:51:28:da:eb:2a:8f:38:43:d7:7c:b4:
         f7:cf:ce:6c:68:54:91:0d:d6:52:3e:b0:8e:85:6e:8b:59:82:
         cf:b4:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:40 2025 by rpki-client