Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e3138342e3134342e302f32322d3332203d3e2030.roa
File:                     34352e3138342e3134342e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          c36d2mjaAd8Cyc1hfVDKGXQD7U9Zxyie6YoffQ3J5BY=
Subject key identifier:   D8:FC:01:FE:88:5F:17:70:8D:8F:5B:8D:2F:D0:19:ED:C3:FD:F0:85
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       5960617E169867621E764D1F079F987F0C5C4CE7
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e3138342e3134342e302f32322d3332203d3e2030.roa
Signing time:             Mon 17 Mar 2025 17:44:03 +0000
ROA not before:           Mon 17 Mar 2025 17:39:03 +0000
ROA not after:            Mon 16 Mar 2026 17:44:03 +0000
asID:                     0
IP address blocks:        45.184.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:60:61:7e:16:98:67:62:1e:76:4d:1f:07:9f:98:7f:0c:5c:4c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:03 2025 GMT
            Not After : Mar 16 17:44:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:4a:1e:c4:60:48:ac:2a:b4:cc:e0:05:0e:
                    b5:10:b6:08:4d:cc:92:37:55:38:dd:ac:e4:f0:07:
                    71:9d:b8:1a:c0:9b:dc:00:44:60:f0:55:7a:d2:b0:
                    75:ae:95:6f:8f:8e:a9:b3:09:16:c1:74:01:2e:66:
                    c4:e7:d8:fc:0f:92:dc:d7:2f:6a:a9:f3:eb:81:dc:
                    0f:1b:84:80:cf:d7:c1:81:26:b6:08:3d:29:03:ae:
                    b7:52:08:9d:95:9d:bb:1d:8a:4f:41:59:20:34:38:
                    f3:9f:fe:2a:0e:a6:83:48:45:a0:20:48:91:13:98:
                    1b:9c:7a:a0:07:97:79:cb:85:47:6e:a7:d5:28:62:
                    0f:b2:ab:ae:78:2f:26:b4:a3:53:c2:d1:20:a8:c7:
                    46:4e:fe:9b:c6:37:6b:d2:b7:04:3e:0d:da:92:69:
                    e8:10:20:38:f6:e9:98:e9:25:1d:85:64:0e:18:86:
                    0b:7d:1f:14:8b:87:b7:13:49:30:66:3c:15:75:20:
                    9a:20:26:f7:66:aa:f4:a1:59:6a:62:84:11:9c:a8:
                    c5:88:a0:fe:29:a4:e9:a6:27:cb:20:70:11:30:12:
                    35:1f:9f:cc:41:c0:63:4b:ff:a1:45:a4:3d:b5:ff:
                    01:9b:75:b6:66:2b:d5:11:e2:9f:7d:4b:9f:04:ec:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FC:01:FE:88:5F:17:70:8D:8F:5B:8D:2F:D0:19:ED:C3:FD:F0:85
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e3138342e3134342e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:83:5f:f5:18:1f:8f:a1:1b:4b:e8:fb:8c:a9:81:b6:8d:77:
         51:c6:12:61:0f:bb:a9:10:8c:74:71:0e:6b:ad:07:db:11:5a:
         6d:0b:dc:8b:df:81:b7:45:0c:f6:c9:f7:4d:3e:0f:6a:fc:74:
         7f:04:98:82:69:ac:06:a9:35:c4:f9:24:ca:8f:42:c7:8a:3c:
         9d:fb:2f:61:6e:c7:37:06:44:05:45:32:8c:3c:30:9b:55:91:
         4d:d3:ab:b6:71:05:3f:d9:b3:f4:82:24:6e:a9:e6:d4:91:56:
         6f:d9:88:69:7c:63:bd:5e:87:61:8f:7a:3e:a4:3a:15:c9:27:
         d4:4e:93:8b:60:75:62:ad:27:81:e3:2d:11:5f:90:d8:f0:97:
         a1:44:5f:06:9a:94:66:46:a0:fc:22:2c:2d:24:3a:e3:6e:2b:
         a3:26:e4:05:75:f8:29:fe:b1:c3:60:dc:ad:80:bd:19:be:8c:
         c3:fa:da:0c:e4:ed:79:31:32:78:b0:ea:dc:c6:0e:f6:ef:18:
         ba:19:d5:f9:e8:11:76:26:91:b3:c7:ae:01:1f:de:7f:9c:1a:
         8b:57:34:ed:e5:bf:f4:7e:e9:60:26:39:b2:2d:9a:e1:9e:4a:
         92:cd:09:98:cb:1a:12:5e:03:97:e2:11:87:e8:fb:ea:ea:83:
         03:9c:f5:a4
-----BEGIN CERTIFICATE-----
MIIHOTCCBiGgAwIBAgIUWWBhfhaYZ2Iedk0fB5+YfwxcTOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNTAzMTcxNzM5MDNaFw0yNjAzMTYxNzQ0MDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdDNjRBMUVDNDYwNDhBQzJB
QjRDQ0UwMDUwRUI1MTBCNjA4NERDQzkyMzc1NTM4RERBQ0U0RjAwNzcxOURCODFB
QzA5QkRDMDA0NDYwRjA1NTdBRDJCMDc1QUU5NTZGOEY4RUE5QjMwOTE2QzE3NDAx
MkU2NkM0RTdEOEZDMEY5MkRDRDcyRjZBQTlGM0VCODFEQzBGMUI4NDgwQ0ZEN0Mx
ODEyNkI2MDgzRDI5MDNBRUI3NTIwODlEOTU5REJCMUQ4QTRGNDE1OTIwMzQzOEYz
OUZGRTJBMEVBNjgzNDg0NUEwMjA0ODkxMTM5ODFCOUM3QUEwMDc5Nzc5Q0I4NTQ3
NkVBN0Q1Mjg2MjBGQjJBQkFFNzgyRjI2QjRBMzUzQzJEMTIwQThDNzQ2NEVGRTlC
QzYzNzZCRDJCNzA0M0UwRERBOTI2OUU4MTAyMDM4RjZFOTk4RTkyNTFEODU2NDBF
MTg4NjBCN0QxRjE0OEI4N0I3MTM0OTMwNjYzQzE1NzUyMDlBMjAyNkY3NjZBQUY0
QTE1OTZBNjI4NDExOUNBOEM1ODhBMEZFMjlBNEU5QTYyN0NCMjA3MDExMzAxMjM1
MUY5RkNDNDFDMDYzNEJGRkExNDVBNDNEQjVGRjAxOUI3NUI2NjYyQkQ1MTFFMjlG
N0Q0QjlGMDRFQ0Q3RTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt8ZKHsRgSKwqtMzgBQ61ELYITcySN1U43azk8AdxnbgawJvcAERg
8FV60rB1rpVvj46pswkWwXQBLmbE59j8D5Lc1y9qqfPrgdwPG4SAz9fBgSa2CD0p
A663UgidlZ27HYpPQVkgNDjzn/4qDqaDSEWgIEiRE5gbnHqgB5d5y4VHbqfVKGIP
squueC8mtKNTwtEgqMdGTv6bxjdr0rcEPg3akmnoECA49umY6SUdhWQOGIYLfR8U
i4e3E0kwZjwVdSCaICb3Zqr0oVlqYoQRnKjFiKD+KaTppifLIHARMBI1H5/MQcBj
S/+hRaQ9tf8Bm3W2ZivVEeKffUufBOzX4QIDAQABo4ICRzCCAkMwHQYDVR0OBBYE
FNj8Af6IXxdwjY9bjS/QGe3D/fCFMB8GA1UdIwQYMBaAFGMlGanCezsoaaww7fKW
tITkS/HwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIvNjMyNTE5QTlDMjdCM0Iy
ODY5QUMzMEVERjI5NkI0ODRFNDRCRjFGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJG
MUYwLmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8yLzM0MzUyZTMxMzgzNDJlMzEzNDM0
MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItuJAwDQYJKoZI
hvcNAQELBQADggEBAKSDX/UYH4+hG0vo+4ypgbaNd1HGEmEPu6kQjHRxDmutB9sR
Wm0L3IvfgbdFDPbJ900+D2r8dH8EmIJprAapNcT5JMqPQseKPJ37L2FuxzcGRAVF
Mow8MJtVkU3Tq7ZxBT/Zs/SCJG6p5tSRVm/ZiGl8Y71eh2GPej6kOhXJJ9ROk4tg
dWKtJ4HjLRFfkNjwl6FEXwaalGZGoPwiLC0kOuNuK6Mm5AV1+Cn+scNg3K2AvRm+
jMP62gzk7XkxMniw6tzGDvbvGLoZ1fnoEXYmkbPHrgEf3n+cGotXNO3lv/R+6WAm
ObItmuGeSpLNCZjLGhJeA5fiEYfo++rqgwOc9aQ=
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:37:27 2025 by rpki-client