Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/34352e3137382e3138382e302f32332d3233203d3e20323639303931.roa
File:                     34352e3137382e3138382e302f32332d3233203d3e20323639303931.roa (raw, json)
Hash identifier:          37SvGuZe58jpzCszJAEDfr+qlabxrvB4pp9ZajuFtQ4=
Subject key identifier:   EB:D9:3D:3A:D8:23:CE:66:9D:46:42:26:EE:5C:C4:3F:CB:93:96:77
Certificate issuer:       /CN=BD1D92CC61E951D8FC0BC47254B3C399B04418ED
Certificate serial:       3EB56A6D57C13B828413658B8E075CDD834F6B6D
Authority key identifier: BD:1D:92:CC:61:E9:51:D8:FC:0B:C4:72:54:B3:C3:99:B0:44:18:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/34352e3137382e3138382e302f32332d3233203d3e20323639303931.roa
Signing time:             Tue 04 Feb 2025 13:00:23 +0000
ROA not before:           Tue 04 Feb 2025 12:55:23 +0000
ROA not after:            Tue 03 Feb 2026 13:00:23 +0000
asID:                     269091
IP address blocks:        45.178.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl
                          rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b5:6a:6d:57:c1:3b:82:84:13:65:8b:8e:07:5c:dd:83:4f:6b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1D92CC61E951D8FC0BC47254B3C399B04418ED
        Validity
            Not Before: Feb  4 12:55:23 2025 GMT
            Not After : Feb  3 13:00:23 2026 GMT
        Subject: CN=EBD93D3AD823CE669D464226EE5CC43FCB939677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3e:c3:8d:e3:67:d2:ec:28:a4:67:c1:39:94:
                    10:93:fc:6f:26:be:6d:fb:9f:3e:29:27:54:e1:dd:
                    dc:cf:85:27:c2:65:98:c5:1e:84:0d:a1:46:2f:27:
                    ef:18:e6:b0:59:12:07:b4:28:4e:82:3a:99:fb:0c:
                    53:af:f6:4f:49:f7:ea:db:a7:9a:2a:42:b1:d3:07:
                    39:26:83:2b:77:0d:f2:69:c1:1a:a4:ec:c0:83:45:
                    30:0c:5f:a7:5a:66:4b:d6:a9:22:93:26:7f:2f:23:
                    a9:99:49:7f:bf:32:69:da:70:5b:aa:a4:82:4f:ec:
                    86:e1:40:3a:b9:c5:d1:b1:4c:4f:d0:77:63:6e:12:
                    86:f3:81:77:40:65:2d:8f:53:cd:27:52:69:06:4d:
                    c7:6f:7f:f5:12:30:08:14:82:a4:c2:af:e7:e9:a9:
                    1e:23:c2:f2:49:56:56:cc:7a:5a:ac:81:08:63:df:
                    9a:e5:05:d6:5c:9e:0b:8c:2b:b1:7f:42:78:ee:3f:
                    be:44:f7:a6:5b:ab:d7:27:3a:ae:3f:3e:7a:98:12:
                    32:a6:8d:bb:a8:3e:a4:22:ba:df:74:a1:b2:5a:50:
                    6e:dd:f4:03:a2:54:54:6f:0f:27:33:2d:94:fb:03:
                    2f:38:62:4c:f1:2a:dc:b2:33:84:11:a5:85:d8:73:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D9:3D:3A:D8:23:CE:66:9D:46:42:26:EE:5C:C4:3F:CB:93:96:77
            X509v3 Authority Key Identifier:
                keyid:BD:1D:92:CC:61:E9:51:D8:FC:0B:C4:72:54:B3:C3:99:B0:44:18:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/34352e3137382e3138382e302f32332d3233203d3e20323639303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:e8:71:3a:ae:61:cc:3c:89:ac:2f:7f:86:29:ad:d2:60:f5:
         44:d0:97:fe:15:97:f1:92:f1:f5:f1:77:5f:51:4e:8c:eb:ca:
         04:42:b1:13:f9:d1:5a:61:1e:15:1d:16:97:37:f6:4a:5c:ef:
         a9:67:4a:fb:f3:5d:19:4e:7c:62:cd:3a:d0:02:47:82:66:08:
         65:8c:66:b6:16:03:9e:62:47:66:b5:23:93:51:e0:d1:25:6c:
         ab:4f:31:de:ad:cf:82:75:43:04:1a:ff:22:59:84:a0:b0:b3:
         f2:05:32:c6:87:47:1e:d9:e0:d7:77:d0:22:1e:89:96:84:09:
         65:b6:6a:79:74:42:79:58:bf:1e:8d:de:be:de:27:e9:ad:29:
         00:b8:42:2c:f9:ef:61:75:90:2a:23:b4:0b:d8:71:a9:33:f2:
         56:cd:c5:13:69:00:8d:ca:70:b9:e1:e7:25:8a:b9:d3:ce:17:
         ff:75:43:bc:0e:53:9f:7c:a0:c2:0f:a2:74:c6:fb:25:d8:27:
         e9:f1:d1:4d:0e:f2:53:8d:07:de:ea:5f:8b:b4:2e:35:3a:15:
         31:a8:73:13:b0:68:98:0b:56:94:30:37:ed:27:ce:3b:8e:78:
         ed:72:8f:5b:cb:c4:41:70:85:57:a6:d1:f8:1e:40:03:ac:94:
         69:f5:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:19:00 2025 by rpki-client