Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3234203d3e20323638383135.roa
File:                     34352e3137332e3135322e302f32322d3234203d3e20323638383135.roa (raw, json)
Hash identifier:          uKgqcnX9of8U3C/i+XG5liT+KkjE8NCVKTG4jWLUxIs=
Subject key identifier:   34:7F:16:E0:87:18:E6:A8:EB:A0:7B:82:4B:4D:19:C3:D9:0D:FA:E3
Certificate issuer:       /CN=B4DBFE65EE750F5062B29955F2B411BD46B94646
Certificate serial:       60774E6B28017EC8E021247D4A96B0D95C3E0A43
Authority key identifier: B4:DB:FE:65:EE:75:0F:50:62:B2:99:55:F2:B4:11:BD:46:B9:46:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4DBFE65EE750F5062B29955F2B411BD46B94646.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3234203d3e20323638383135.roa
Signing time:             Fri 31 Jan 2025 14:58:38 +0000
ROA not before:           Fri 31 Jan 2025 14:53:38 +0000
ROA not after:            Fri 30 Jan 2026 14:58:38 +0000
asID:                     268815
IP address blocks:        45.173.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/B4DBFE65EE750F5062B29955F2B411BD46B94646.crl
                          rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/B4DBFE65EE750F5062B29955F2B411BD46B94646.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4DBFE65EE750F5062B29955F2B411BD46B94646.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:77:4e:6b:28:01:7e:c8:e0:21:24:7d:4a:96:b0:d9:5c:3e:0a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4DBFE65EE750F5062B29955F2B411BD46B94646
        Validity
            Not Before: Jan 31 14:53:38 2025 GMT
            Not After : Jan 30 14:58:38 2026 GMT
        Subject: CN=347F16E08718E6A8EBA07B824B4D19C3D90DFAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:3a:c0:1f:4f:a4:62:50:7b:2f:10:91:50:
                    f5:2f:65:9a:f7:cd:81:77:1f:fa:39:62:5c:ce:06:
                    be:05:8f:31:c1:12:04:8c:54:1a:de:ae:5e:02:2f:
                    ac:64:75:4f:5e:9c:5b:bc:72:4e:fd:74:f3:7f:a5:
                    9e:06:e2:15:ae:d0:4c:13:61:75:b9:ff:bd:21:1d:
                    05:d3:6f:e5:ff:c9:b9:be:e5:76:93:b5:7c:45:2f:
                    f0:df:da:76:a0:03:d5:aa:83:b2:8b:a4:0d:75:a2:
                    c3:18:2e:e6:9c:b8:df:11:39:3f:3f:c8:2d:06:c5:
                    94:fc:09:3e:7a:03:c5:5f:3d:2a:f2:f0:9c:c1:76:
                    32:0c:ef:e4:a4:18:87:40:7c:1a:b9:53:27:86:27:
                    ee:20:0b:39:81:df:4c:c1:ab:26:b4:e9:75:a1:72:
                    0d:0c:13:1f:7b:c3:97:dd:47:9f:e4:ff:a9:e7:d7:
                    fa:ae:3f:7c:ca:32:cf:70:3e:a6:73:cd:75:15:55:
                    bf:7f:ea:87:09:55:85:f4:ff:46:0a:02:f6:be:92:
                    b5:36:74:94:72:48:1a:9d:d5:c9:55:67:6b:1b:66:
                    b4:03:fd:f7:4b:cb:e7:fd:c7:7c:d4:0f:4b:45:77:
                    cf:e7:25:85:66:fb:28:22:cb:2b:17:10:26:17:40:
                    a3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7F:16:E0:87:18:E6:A8:EB:A0:7B:82:4B:4D:19:C3:D9:0D:FA:E3
            X509v3 Authority Key Identifier:
                keyid:B4:DB:FE:65:EE:75:0F:50:62:B2:99:55:F2:B4:11:BD:46:B9:46:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/B4DBFE65EE750F5062B29955F2B411BD46B94646.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4DBFE65EE750F5062B29955F2B411BD46B94646.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3234203d3e20323638383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:4a:db:0b:78:e6:7d:4b:71:a5:70:39:46:8d:96:22:cb:f6:
         d4:ce:c1:ef:dc:cd:d0:4a:80:35:84:ec:db:db:f7:dd:4d:3f:
         41:03:36:a9:d6:3a:3b:80:1c:b0:fc:34:ae:a1:8c:38:52:a8:
         00:09:66:01:b7:6e:fd:b4:e5:f7:e9:90:89:db:63:d7:7d:63:
         93:cf:9d:47:26:f2:ed:ff:70:c5:d7:4c:65:f9:f2:ca:cc:8d:
         fa:8a:4f:7d:a5:da:40:92:ce:9c:9b:23:34:72:4e:68:50:12:
         93:f5:9a:02:65:9a:e0:76:35:02:40:c5:6f:cc:b9:1d:ce:d2:
         20:ba:96:92:ff:a4:81:0f:10:55:65:fe:0a:b0:d3:aa:3c:fd:
         e8:b0:19:8f:ef:7b:9e:e3:b7:28:17:36:c2:b7:2d:c9:23:81:
         d9:f3:55:a4:b5:47:de:b8:6d:1f:6f:ca:da:c9:a0:da:a7:9c:
         7c:82:c0:42:14:7a:20:a2:3a:d0:b4:9c:b7:33:04:2e:67:2d:
         5e:10:23:18:ff:10:92:78:c3:61:1a:e1:c4:2f:bd:e2:0b:b5:
         2b:57:40:aa:7d:95:54:d0:41:57:0e:80:29:c9:f1:7e:cf:2c:
         2f:62:16:98:37:bf:7c:93:87:bd:c8:16:ad:92:1f:dc:cf:71:
         c0:7f:91:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:07 2025 by rpki-client