Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33362e302f32342d3234203d3e20323731363939.roa
File:                     34352e3232382e33362e302f32342d3234203d3e20323731363939.roa (raw, json)
Hash identifier:          1aA/vO2ruice+zmG6vuolNoOSJZYKzf3H0JjW4k3yzk=
Subject key identifier:   6A:D2:D1:9A:F7:33:8D:02:79:C4:34:65:19:5B:A5:33:75:F6:33:AD
Certificate issuer:       /CN=22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F
Certificate serial:       4B2101CE6AF26C5B9B66BC052EE8B254DC1431AA
Authority key identifier: 22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33362e302f32342d3234203d3e20323731363939.roa
Signing time:             Mon 17 Mar 2025 17:41:22 +0000
ROA not before:           Mon 17 Mar 2025 17:36:22 +0000
ROA not after:            Mon 16 Mar 2026 17:41:22 +0000
asID:                     271699
IP address blocks:        45.228.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 12:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:21:01:ce:6a:f2:6c:5b:9b:66:bc:05:2e:e8:b2:54:dc:14:31:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F
        Validity
            Not Before: Mar 17 17:36:22 2025 GMT
            Not After : Mar 16 17:41:22 2026 GMT
        Subject: CN=6AD2D19AF7338D0279C43465195BA53375F633AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b2:5b:9e:0f:51:52:1a:87:cd:0b:7b:01:27:
                    8c:62:c7:37:da:ea:23:19:83:b0:c0:bf:46:f8:74:
                    1f:f7:41:70:2b:93:fe:4f:f9:f7:ee:6e:e1:3b:e2:
                    d2:a4:49:8f:21:65:6b:d8:ac:05:c5:da:b7:bc:98:
                    e9:49:88:69:d2:98:22:e6:1d:8f:b1:6a:97:0b:d0:
                    c8:9c:22:05:b4:a3:0a:e5:1e:b2:67:b3:60:7e:2f:
                    f8:0e:7e:4b:a4:31:5a:f0:f0:79:dd:65:a6:05:63:
                    7a:94:7e:c2:91:8e:8f:99:c8:d9:33:28:c3:bc:ec:
                    6d:c2:5b:20:be:99:2e:b4:58:73:bc:56:43:eb:59:
                    16:c0:97:df:ca:e7:26:a8:8e:0b:46:e0:ae:de:aa:
                    c0:b9:98:65:77:ad:f6:60:53:da:42:52:d4:e8:43:
                    ec:a9:c9:ed:7b:98:75:43:df:6c:00:6a:74:3f:72:
                    6e:17:6a:1b:72:84:e8:62:65:9b:b2:c4:9d:54:39:
                    df:18:c9:d0:58:52:ea:79:77:d0:33:ba:55:bb:8b:
                    72:64:27:4f:f8:a0:73:2a:b9:c7:0f:87:29:31:77:
                    d0:99:f8:62:96:06:68:f4:a3:66:23:24:ac:67:cf:
                    ca:ed:3f:a0:b6:02:24:88:4b:fe:27:e1:0e:a5:28:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D2:D1:9A:F7:33:8D:02:79:C4:34:65:19:5B:A5:33:75:F6:33:AD
            X509v3 Authority Key Identifier:
                keyid:22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33362e302f32342d3234203d3e20323731363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:01:da:97:cd:49:10:c4:73:ba:66:96:6f:ad:69:c9:cc:99:
         e3:40:3e:36:b5:38:ac:ca:9c:a9:50:f4:7b:3e:eb:f8:56:37:
         d6:56:27:51:e9:6e:1f:fb:5e:84:1c:80:8d:d9:ff:f4:7d:a7:
         bd:eb:76:b0:23:24:19:86:15:f1:e4:8a:d7:f0:31:fd:cc:ba:
         91:9c:69:d2:71:c5:08:c0:09:cc:28:40:c0:41:54:a6:e3:32:
         df:9c:ad:9b:c8:64:db:2d:f2:ca:fa:2f:88:c8:a8:17:b6:c1:
         40:07:f7:2c:fa:77:e1:04:e9:e5:ae:0e:2d:cb:91:4e:33:9d:
         73:9c:c0:37:c8:2b:63:8d:41:68:db:82:39:94:7e:e4:8e:a0:
         04:3d:4c:16:01:49:24:94:53:48:46:a2:db:14:3d:dc:1e:b6:
         f5:50:87:f5:bd:57:21:d9:d2:6c:a5:83:40:35:7c:8c:68:51:
         29:6a:c8:c9:67:9c:fd:d2:4f:00:a3:42:c2:d2:bf:83:7d:3e:
         cf:1b:36:51:72:97:99:4a:82:74:6b:78:c2:60:81:5e:00:80:
         88:f8:64:90:ee:3b:24:fa:d5:a8:bb:f7:76:49:8f:4c:ba:e8:
         83:dc:f1:52:49:86:15:44:ce:7b:2f:9f:a2:8c:88:1d:21:ca:
         e5:8b:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:36:11 2025 by rpki-client