Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138322e302f32342d3234203d3e20323638303638.roa
File:                     34352e3136382e3138322e302f32342d3234203d3e20323638303638.roa (raw, json)
Hash identifier:          Ljv7HH2TilEEvI2cbd8R87/DSu2DWbYf4aEcYAgURvA=
Subject key identifier:   A9:57:8C:35:0A:A1:54:E3:79:47:EC:77:85:0E:A8:E7:42:E9:28:35
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       10BBEF047D3B7CBFE13C22EC3BFD21B630A9D1CC
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138322e302f32342d3234203d3e20323638303638.roa
Signing time:             Thu 06 Mar 2025 06:00:21 +0000
ROA not before:           Thu 06 Mar 2025 05:55:21 +0000
ROA not after:            Thu 05 Mar 2026 06:00:21 +0000
asID:                     268068
IP address blocks:        45.168.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
                          rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 18:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bb:ef:04:7d:3b:7c:bf:e1:3c:22:ec:3b:fd:21:b6:30:a9:d1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Mar  6 05:55:21 2025 GMT
            Not After : Mar  5 06:00:21 2026 GMT
        Subject: CN=A9578C350AA154E37947EC77850EA8E742E92835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:3b:73:79:1b:2e:58:da:4e:e9:af:f6:02:5e:
                    94:02:e0:cd:87:d2:3e:71:83:fa:ed:d4:cd:ed:5e:
                    77:6a:10:b5:f9:5b:68:9f:fc:ea:60:c2:77:65:39:
                    21:33:c6:d6:e9:ec:85:bf:cd:f8:86:29:99:af:0d:
                    b3:28:c5:61:0c:2a:44:22:e5:a3:a6:aa:e9:f5:fb:
                    2b:51:fd:5d:80:53:56:c4:eb:32:10:ed:cd:b9:70:
                    91:78:58:9c:bb:dd:af:62:43:aa:23:66:a7:da:f1:
                    c0:48:42:28:b8:99:ed:05:89:67:c6:f2:54:24:4f:
                    9e:f7:f0:eb:1f:1f:b8:f9:50:35:79:32:7c:48:48:
                    08:31:6b:41:51:53:91:96:30:b9:ef:6e:f8:d3:ba:
                    1c:0a:fe:65:c9:3a:49:77:5d:81:6d:d6:dd:e2:d2:
                    7b:2c:7d:b3:6f:a3:13:ff:86:82:92:a6:a7:4c:d3:
                    29:66:8e:40:c4:52:c2:2c:b4:e6:e4:43:d0:85:d2:
                    01:87:e7:4e:8f:34:6a:66:1a:c9:cc:ed:38:49:fa:
                    81:d3:23:87:68:89:56:8f:86:bb:98:0e:36:98:76:
                    b2:e8:eb:2e:a0:ae:d8:a9:cf:e2:00:e0:78:e1:7e:
                    57:8d:6a:9f:ec:49:8c:a7:c2:c3:89:28:9f:ff:7e:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:57:8C:35:0A:A1:54:E3:79:47:EC:77:85:0E:A8:E7:42:E9:28:35
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138322e302f32342d3234203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a6:36:69:11:7f:f2:ce:6b:51:83:25:9c:e4:5f:eb:c5:14:
         b6:ac:89:56:62:b8:2c:5d:f9:18:9d:f2:08:7a:90:85:51:c8:
         19:9c:44:d2:51:e4:35:d1:91:fc:d3:00:70:7e:51:cf:4e:bc:
         a8:36:10:52:93:da:ef:74:29:60:ea:7e:a8:3b:4e:cb:29:d8:
         b3:74:4a:ba:a1:b2:b4:78:0a:bd:dd:43:b3:65:fa:45:47:23:
         8d:85:f7:a6:81:29:95:87:7b:18:b6:23:8c:49:90:fc:ae:0f:
         79:3e:25:db:c4:fc:15:98:41:f6:1a:20:16:49:f1:96:b2:19:
         8f:60:59:9f:a7:35:9c:0e:96:a2:2a:d2:60:a2:f5:8a:6a:b4:
         fd:2c:57:f9:f7:1a:34:7e:39:f4:f0:9f:b9:9b:84:79:bf:15:
         92:6b:1a:63:ab:9d:2d:e5:44:e3:a6:eb:74:08:3d:f2:66:f3:
         c1:5c:0f:4c:a5:86:80:eb:6b:aa:42:ed:40:be:24:bd:f0:b8:
         a2:94:ba:2d:27:d7:02:b3:89:13:7d:e9:97:4e:86:01:75:5a:
         34:fb:19:2a:47:bf:7c:8b:eb:e2:12:c5:a2:ec:f8:f2:fb:0f:
         28:71:44:88:dd:8d:5a:ea:5d:6e:b6:64:e5:5c:e7:ad:51:66:
         4f:e8:dc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:40 2025 by rpki-client