Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa
File:                     34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (raw, json)
Hash identifier:          g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=
Subject key identifier:   27:4E:84:36:48:0B:64:7D:7D:AA:D8:55:F7:71:C9:3A:8A:F5:3A:21
Certificate issuer:       /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
Certificate serial:       583CAB42F85442E8B944A76A56B708642C4DC7
Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa
Signing time:             Wed 05 Mar 2025 19:00:21 +0000
ROA not before:           Wed 05 Mar 2025 18:55:21 +0000
ROA not after:            Wed 04 Mar 2026 19:00:21 +0000
asID:                     268254
IP address blocks:        45.236.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl
                          rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3c:ab:42:f8:54:42:e8:b9:44:a7:6a:56:b7:08:64:2c:4d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
        Validity
            Not Before: Mar  5 18:55:21 2025 GMT
            Not After : Mar  4 19:00:21 2026 GMT
        Subject: CN=274E8436480B647D7DAAD855F771C93A8AF53A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:d1:c0:c6:f9:a4:02:8c:9d:48:64:16:0d:
                    77:b8:7f:8e:c2:65:c2:f1:e6:36:b6:aa:ef:a2:21:
                    9f:a1:e1:7e:4d:6f:d7:a2:5d:83:21:22:b4:01:7c:
                    d7:d8:87:bd:21:21:98:4e:65:2f:0f:fd:93:82:85:
                    8f:4a:58:8a:2d:c0:44:5e:8b:d8:6e:03:80:42:4c:
                    fb:23:73:85:42:0f:a6:dd:d9:1c:1b:58:c2:b3:f5:
                    26:70:11:00:c1:b9:2d:d1:da:93:23:91:67:aa:13:
                    61:79:bd:2a:77:80:09:9b:58:8c:df:60:7d:dc:88:
                    7e:3f:2b:63:56:c8:43:a3:f7:6b:a2:ee:3c:a1:2b:
                    34:77:09:bb:a3:4a:46:cd:9c:6f:a8:3a:36:d3:4e:
                    9e:87:5c:2a:dd:14:e1:ab:98:97:14:96:d1:6a:30:
                    ee:66:d8:38:f2:5f:c4:a8:19:fd:d2:ed:fa:0f:52:
                    81:7d:72:1f:4e:be:3b:42:13:02:0f:8a:de:0c:eb:
                    66:e4:75:af:80:a8:52:0f:6e:11:57:64:51:22:f6:
                    2c:80:e5:5d:b9:e6:e1:20:cc:87:3a:2e:d4:3c:60:
                    d3:60:94:69:ba:bd:2d:b5:26:f4:63:ca:4b:42:b5:
                    e5:1a:28:85:1f:16:bc:f5:f3:21:f2:bf:8a:71:8a:
                    3e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4E:84:36:48:0B:64:7D:7D:AA:D8:55:F7:71:C9:3A:8A:F5:3A:21
            X509v3 Authority Key Identifier:
                keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c2:73:e9:8b:01:01:f9:55:1e:43:f5:dd:fa:70:7f:ab:88:
         cb:65:8b:d4:75:89:94:57:45:5a:ca:3f:71:c0:f9:28:7c:80:
         e5:56:16:91:cb:ab:ff:c4:95:c0:33:28:bc:98:04:16:40:51:
         68:24:2b:98:05:f1:51:f6:da:61:b3:03:04:df:fd:18:2e:33:
         05:56:2a:f9:3d:8f:4b:71:a1:94:57:40:0e:96:47:1d:de:03:
         30:43:af:bf:6f:b2:81:a7:28:09:0f:89:c8:34:72:a8:76:18:
         fd:b0:b0:d2:ed:22:65:05:aa:80:6e:d9:3c:e4:56:97:2d:89:
         e6:af:98:f2:5c:74:2f:01:11:78:b8:68:1f:a5:67:42:12:98:
         ad:e3:ec:93:a6:83:0a:9c:c6:7c:56:d0:20:10:18:7a:d1:aa:
         d5:15:37:0b:5b:5b:3d:4a:c0:fb:27:3a:66:f1:43:8a:98:db:
         e4:ec:8c:1e:38:c1:6c:56:13:1e:23:e9:9c:1a:76:d0:76:61:
         cd:ed:5b:ea:f3:9a:77:8d:fc:4b:dc:13:cf:0d:43:df:da:0f:
         5f:99:e2:a8:3b:04:3c:5b:89:56:cc:8a:85:2f:b6:f3:de:fb:
         37:6a:22:d4:42:d2:54:7e:c8:84:e0:1a:47:4f:c1:66:7f:25:
         f5:37:dc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:28:06 2025 by rpki-client