Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/34352e3137352e33322e302f32322d3234203d3e20323638383831.roa
File:                     34352e3137352e33322e302f32322d3234203d3e20323638383831.roa (raw, json)
Hash identifier:          EiFbXmNwfUfEkSI4qCqsU5jU8ePYLs88ZEXUItBxJT0=
Subject key identifier:   26:F7:BB:16:24:D8:FC:3E:6C:49:47:C1:EC:D3:86:38:40:90:2A:16
Certificate issuer:       /CN=DD880B71129737798123EE9EDC1423C3E8280892
Certificate serial:       16EE83C2CBAC7006672F3AFCD8991C724B5F79AD
Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/34352e3137352e33322e302f32322d3234203d3e20323638383831.roa
Signing time:             Thu 06 Mar 2025 19:00:01 +0000
ROA not before:           Thu 06 Mar 2025 18:55:01 +0000
ROA not after:            Fri 06 Mar 2026 19:00:01 +0000
asID:                     268881
IP address blocks:        45.175.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl
                          rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ee:83:c2:cb:ac:70:06:67:2f:3a:fc:d8:99:1c:72:4b:5f:79:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892
        Validity
            Not Before: Mar  6 18:55:01 2025 GMT
            Not After : Mar  6 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:65:6b:12:5f:89:25:ea:54:9e:75:97:72:
                    18:69:62:b1:ec:e9:56:d4:10:21:b3:ce:c6:54:52:
                    25:70:01:31:dd:81:cf:e6:28:3a:4d:64:d7:00:08:
                    d4:0c:a2:43:e7:93:b6:54:12:14:cd:da:10:84:e4:
                    0e:b0:a3:bf:40:89:26:0d:95:67:ac:b1:12:8b:bb:
                    44:17:ce:a9:b8:38:42:b6:a5:9c:ac:9a:7e:65:90:
                    2a:5c:9f:e2:1a:bc:2f:28:c0:d3:5f:9c:39:d9:8e:
                    32:a5:48:c3:9d:7f:35:b9:26:b9:d3:38:f3:10:26:
                    ed:eb:a2:61:db:e8:43:a2:1d:3e:a4:07:9d:66:29:
                    42:29:7a:12:12:ff:8d:62:f0:4c:88:5f:f6:cf:52:
                    43:2e:8a:b8:2a:ad:0d:e3:d7:9d:31:5b:52:60:33:
                    f8:f7:77:10:90:bc:c2:93:61:b3:50:54:06:e5:62:
                    22:52:28:2e:44:eb:4c:b4:b0:47:8f:40:b6:4b:c7:
                    d9:29:72:44:c6:56:ed:2e:b6:44:c1:1c:b9:17:c5:
                    47:55:ec:7d:30:b9:d3:f8:56:c0:3c:4b:79:b4:c3:
                    81:bc:8e:ab:b3:af:c1:26:ac:aa:8d:dd:e4:c5:59:
                    97:73:fe:ab:09:f5:2f:4b:6f:7f:b5:58:2b:c5:a7:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F7:BB:16:24:D8:FC:3E:6C:49:47:C1:EC:D3:86:38:40:90:2A:16
            X509v3 Authority Key Identifier:
                keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/34352e3137352e33322e302f32322d3234203d3e20323638383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:c5:df:d0:19:e5:9b:23:79:80:d0:77:af:5a:1f:bf:4a:
         a7:8d:bc:65:dd:c0:81:72:dd:c1:f7:2f:75:66:06:8a:dd:63:
         d4:9a:07:0e:09:84:93:28:b2:00:3c:2d:b8:5b:11:09:0d:f5:
         a9:40:15:e0:15:6e:5c:80:3a:73:68:9c:c8:77:22:6e:f1:b6:
         b1:00:89:d9:e3:47:1d:a2:f6:29:6e:37:6f:d7:f5:6c:d9:12:
         0f:10:1e:02:2a:eb:b1:54:39:0a:6d:cb:20:5e:6e:bb:f0:b8:
         9e:f7:4c:ce:d2:16:a1:83:85:b1:c9:a3:a5:2f:81:4b:20:17:
         87:e0:48:e4:27:f1:77:0c:5e:33:09:86:eb:41:bf:87:ba:89:
         e5:05:e9:f2:99:bf:2b:50:db:61:5b:9b:92:49:25:b7:55:e7:
         cf:2d:b0:c4:a9:98:9c:97:20:2f:9b:b4:04:ba:f0:30:11:5d:
         53:30:65:0c:83:af:e5:45:c2:bd:22:d1:eb:86:f5:b0:d2:6c:
         8d:22:33:2c:03:fe:58:8b:1f:d9:79:7c:45:09:a1:62:e8:ac:
         3f:0f:8e:a0:ca:96:f4:b8:21:8e:fc:cd:3a:b5:b1:59:b1:b1:
         18:36:99:fa:5a:b7:b0:08:4c:e4:ef:02:2f:0e:91:16:d5:9d:
         fe:66:b5:78
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUFu6DwsuscAZnLzr82Jkccktfea0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ4ODBCNzExMjk3Mzc3OTgxMjNFRTlFREMxNDIzQzNF
ODI4MDg5MjAeFw0yNTAzMDYxODU1MDFaFw0yNjAzMDYxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTc3RjY1NkIxMjVGODkyNUVB
NTQ5RTc1OTc3MjE4Njk2MkIxRUNFOTU2RDQxMDIxQjNDRUM2NTQ1MjI1NzAwMTMx
REQ4MUNGRTYyODNBNEQ2NEQ3MDAwOEQ0MENBMjQzRTc5M0I2NTQxMjE0Q0REQTEw
ODRFNDBFQjBBM0JGNDA4OTI2MEQ5NTY3QUNCMTEyOEJCQjQ0MTdDRUE5QjgzODQy
QjZBNTlDQUM5QTdFNjU5MDJBNUM5RkUyMUFCQzJGMjhDMEQzNUY5QzM5RDk4RTMy
QTU0OEMzOUQ3RjM1QjkyNkI5RDMzOEYzMTAyNkVERUJBMjYxREJFODQzQTIxRDNF
QTQwNzlENjYyOTQyMjk3QTEyMTJGRjhENjJGMDRDODg1RkY2Q0Y1MjQzMkU4QUI4
MkFBRDBERTNENzlEMzE1QjUyNjAzM0Y4Rjc3NzEwOTBCQ0MyOTM2MUIzNTA1NDA2
RTU2MjIyNTIyODJFNDRFQjRDQjRCMDQ3OEY0MEI2NEJDN0Q5Mjk3MjQ0QzY1NkVE
MkVCNjQ0QzExQ0I5MTdDNTQ3NTVFQzdEMzBCOUQzRjg1NkMwM0M0Qjc5QjRDMzgx
QkM4RUFCQjNBRkMxMjZBQ0FBOEREREU0QzU1OTk3NzNGRUFCMDlGNTJGNEI2RjdG
QjU1ODJCQzVBNzNFQUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA539laxJfiSXqVJ51l3IYaWKx7OlW1BAhs87GVFIlcAEx3YHP5ig6
TWTXAAjUDKJD55O2VBIUzdoQhOQOsKO/QIkmDZVnrLESi7tEF86puDhCtqWcrJp+
ZZAqXJ/iGrwvKMDTX5w52Y4ypUjDnX81uSa50zjzECbt66Jh2+hDoh0+pAedZilC
KXoSEv+NYvBMiF/2z1JDLoq4Kq0N49edMVtSYDP493cQkLzCk2GzUFQG5WIiUigu
ROtMtLBHj0C2S8fZKXJExlbtLrZEwRy5F8VHVex9MLnT+FbAPEt5tMOBvI6rs6/B
Jqyqjd3kxVmXc/6rCfUvS29/tVgrxac+rwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCb3uxYk2Pw+bElHwezThjhAkCoWMB8GA1UdIwQYMBaAFN2IC3ESlzd5gSPuntwU
I8PoKAiSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl4amhyQzRacnVpeUtO
S3RMMWJwZkQ4dUZ0ZnpldmNmd0RMTXJMVGlEbmNMLzEvREQ4ODBCNzExMjk3Mzc3
OTgxMjNFRTlFREMxNDIzQzNFODI4MDg5Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ERDg4MEI3MTEyOTczNzc5ODEyM0VFOUVEQzE0MjNDM0U4Mjgw
ODkyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85eGpockM0WnJ1aXlLTkt0TDFi
cGZEOHVGdGZ6ZXZjZndETE1yTFRpRG5jTC8xLzM0MzUyZTMxMzczNTJlMzMzMjJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzODM4MzgzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2v
IDANBgkqhkiG9w0BAQsFAAOCAQEAb1PF39AZ5ZsjeYDQd69aH79Kp428Zd3AgXLd
wfcvdWYGit1j1JoHDgmEkyiyADwtuFsRCQ31qUAV4BVuXIA6c2icyHcibvG2sQCJ
2eNHHaL2KW43b9f1bNkSDxAeAirrsVQ5Cm3LIF5uu/C4nvdMztIWoYOFscmjpS+B
SyAXh+BI5CfxdwxeMwmG60G/h7qJ5QXp8pm/K1DbYVubkkklt1Xnzy2wxKmYnJcg
L5u0BLrwMBFdUzBlDIOv5UXCvSLR64b1sNJsjSIzLAP+WIsf2Xl8RQmhYuisPw+O
oMqW9LghjvzNOrWxWbGxGDaZ+lq3sAhM5O8CLw6RFtWd/ma1eA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:57:18 2025 by rpki-client