Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3139312e3136382e302f32322d3234203d3e203238323031.roa
File:                     34352e3139312e3136382e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          yknZWPnDbc7L1dXB9YltopQHEqGhhtzGPYcRRkLjEYA=
Subject key identifier:   88:F2:0E:14:22:5E:66:8E:65:E0:A8:CF:90:57:EB:6B:F2:0F:35:47
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       5074DF9D5DC4DD2392A61E1C1DBD0E6457BF9C2A
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3139312e3136382e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 12 Mar 2025 13:33:20 +0000
ROA not before:           Wed 12 Mar 2025 13:28:20 +0000
ROA not after:            Wed 11 Mar 2026 13:33:20 +0000
asID:                     28201
IP address blocks:        45.191.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:74:df:9d:5d:c4:dd:23:92:a6:1e:1c:1d:bd:0e:64:57:bf:9c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Mar 12 13:28:20 2025 GMT
            Not After : Mar 11 13:33:20 2026 GMT
        Subject: CN=88F20E14225E668E65E0A8CF9057EB6BF20F3547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:34:d5:ea:7e:86:cf:2d:93:ef:19:1f:b0:
                    b9:18:ed:59:ad:cf:ff:36:86:b6:24:c9:b5:ee:69:
                    2c:82:6b:0f:83:0e:fb:7e:94:fe:d8:6f:c5:f9:e9:
                    5e:a8:5a:bb:eb:ff:bd:51:54:0d:5d:91:53:cf:6c:
                    52:a2:4d:61:f6:c0:a2:f7:04:5e:e3:c7:8e:40:62:
                    50:6c:69:40:99:c7:6f:6a:50:08:5a:a2:b8:86:eb:
                    07:0c:85:a1:ad:a8:98:1a:f7:35:e4:6b:03:64:ee:
                    99:96:9b:ed:15:e9:49:2f:19:8c:67:b6:40:0b:7d:
                    8c:0d:0c:47:75:e2:f1:d0:ca:e8:6d:ef:32:8a:73:
                    57:7d:03:97:ff:27:68:52:40:33:99:47:72:0a:19:
                    58:f2:9b:ff:fb:40:75:c4:59:b4:1b:b9:ac:b8:31:
                    66:b6:df:30:e9:12:9b:c3:44:a3:7a:78:a8:af:d8:
                    3a:96:ab:8c:a1:47:8f:42:01:9b:a7:85:82:a7:ab:
                    7a:be:16:e9:3f:d6:48:cb:98:bc:7d:06:c0:a6:4d:
                    1c:05:b1:b1:d0:33:9f:76:57:35:3e:ae:e8:8c:c2:
                    a1:04:ea:b6:ea:07:f6:e7:b1:e4:35:5e:25:d8:e8:
                    b7:7a:db:06:15:fd:fc:e2:87:9d:94:b0:c2:d2:d4:
                    3d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F2:0E:14:22:5E:66:8E:65:E0:A8:CF:90:57:EB:6B:F2:0F:35:47
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3139312e3136382e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:16:c9:4f:ac:bb:8a:de:53:ef:bd:eb:cd:52:79:48:5c:7b:
         50:a7:13:ad:f4:47:3d:3c:a3:6a:d8:28:f2:dc:0e:cc:75:24:
         a7:5e:0c:dc:e6:c9:89:b5:d6:a9:a2:c3:65:b6:05:5e:f9:4b:
         cd:8f:e9:65:1f:56:bc:13:83:cb:db:a2:74:ec:e5:9a:1f:9d:
         82:a9:2e:e1:bd:bc:09:1d:17:2e:ea:d1:c3:e7:70:e8:4b:b3:
         f3:8a:bd:61:cf:1d:24:93:a7:96:34:d9:89:b6:d1:bd:70:5c:
         3f:88:78:d8:2b:5a:4c:87:72:43:f4:91:2d:17:38:a5:70:88:
         e8:0c:f2:2c:0f:b6:39:00:be:0f:d4:86:29:1d:c7:a7:a7:18:
         a7:da:03:35:fa:ee:ee:76:2a:b7:c9:a2:ae:5c:9e:4d:a6:c3:
         b9:99:8c:e2:1f:8a:17:0e:a9:74:37:1d:55:b9:0f:27:cb:a0:
         4e:4c:cc:51:68:25:63:5a:5d:f2:bc:d8:a8:85:50:ef:10:c8:
         37:29:43:30:a1:07:d3:59:57:f0:b4:c3:14:6c:a4:35:f7:3e:
         6d:5b:8d:01:4a:e4:2e:e8:df:f8:ec:a9:bf:f4:38:d3:cc:a7:
         c5:5c:3e:b4:9a:40:82:af:6f:87:b6:f9:3f:84:e8:29:14:40:
         64:60:82:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:30:47 2025 by rpki-client