Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa
File:                     34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa (raw, json)
Hash identifier:          vh37LS+azGK1lNilgZpjLA+LMtV8gz1C3+2xSFAbMyM=
Subject key identifier:   4E:0C:5C:60:91:41:2C:B7:30:B8:ED:FE:57:DE:D7:18:B6:D9:F4:D8
Certificate issuer:       /CN=2ED5E473D72A6D301514B818C3D2A94A5E387474
Certificate serial:       6C91E4F0691600D0C56B3523BE530765A45D18C9
Authority key identifier: 2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa
Signing time:             Thu 06 Mar 2025 19:52:28 +0000
ROA not before:           Thu 06 Mar 2025 19:47:28 +0000
ROA not after:            Thu 05 Mar 2026 19:52:28 +0000
asID:                     267163
IP address blocks:        45.230.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.crl
                          rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:91:e4:f0:69:16:00:d0:c5:6b:35:23:be:53:07:65:a4:5d:18:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED5E473D72A6D301514B818C3D2A94A5E387474
        Validity
            Not Before: Mar  6 19:47:28 2025 GMT
            Not After : Mar  5 19:52:28 2026 GMT
        Subject: CN=4E0C5C6091412CB730B8EDFE57DED718B6D9F4D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a0:59:6f:a7:46:54:55:5c:4a:91:95:b3:b4:
                    ac:f5:e1:51:af:cd:fb:60:11:1d:0a:7a:7e:35:29:
                    dd:9b:d3:60:cb:08:66:8e:47:5b:af:1c:ae:4b:f5:
                    9b:6e:65:b5:23:3f:06:c9:23:10:24:61:d7:b6:d1:
                    65:8b:53:03:4b:f9:cb:e0:03:d3:8a:eb:bb:51:c7:
                    3c:af:4f:d4:03:47:69:84:3d:61:e8:6f:1e:bf:f0:
                    70:3e:f3:71:82:c7:20:4a:c6:08:00:a5:5a:ca:b5:
                    cf:93:4c:21:9f:d1:70:0f:cf:94:96:3d:9b:8d:50:
                    9a:f7:dc:97:dd:a2:e1:84:35:82:00:c9:aa:f8:4e:
                    53:47:a1:da:b7:43:e9:d7:8b:8d:fe:ac:d3:6b:fe:
                    d7:ac:66:31:03:80:11:03:02:a5:c0:f3:1f:2c:b8:
                    84:1a:b9:e8:c3:dd:e0:8a:08:40:c3:eb:30:eb:ab:
                    a8:9b:0e:4d:77:36:99:74:85:47:e4:70:4b:ca:ef:
                    6b:e4:dc:fc:67:25:b1:66:a7:66:7a:a2:e1:9e:12:
                    77:4b:b0:34:c0:03:75:ff:26:1a:55:86:43:83:23:
                    01:e0:c4:cb:70:b4:88:0f:30:8a:41:16:33:0e:5e:
                    c2:ce:80:ed:18:fc:51:65:71:5f:77:e8:e5:ac:30:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0C:5C:60:91:41:2C:B7:30:B8:ED:FE:57:DE:D7:18:B6:D9:F4:D8
            X509v3 Authority Key Identifier:
                keyid:2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:d7:11:db:93:a9:fb:c9:b5:47:9c:26:f4:1f:21:14:33:e3:
         79:0b:3d:8f:a3:b5:da:ec:39:7f:f8:5c:22:06:a4:e9:7e:c9:
         43:96:95:9f:fc:1a:c5:71:16:28:a2:c4:c8:f2:72:e5:f7:dd:
         bb:7f:a1:a3:0f:93:19:18:8d:ce:a5:2f:1a:88:84:8a:af:cc:
         09:30:fe:99:ca:70:b3:c4:cf:36:ad:45:ff:b5:d5:95:05:29:
         55:0f:14:24:25:fe:fa:47:ab:a0:35:b4:3e:00:cf:7d:b3:8e:
         52:bf:9d:20:86:5a:34:25:f7:50:42:98:21:01:e9:e5:39:73:
         e2:46:25:d1:4a:dd:89:05:0f:f1:34:f7:40:c3:67:c6:7c:a8:
         78:6c:48:77:c5:04:08:e0:3f:c2:78:5e:88:9e:f2:39:4d:e1:
         00:36:76:b9:74:da:23:1a:b1:9f:b6:27:ef:ec:bc:af:1c:22:
         89:ce:d7:f9:c8:9b:df:19:40:23:c4:6e:c1:d9:fa:44:e9:44:
         4c:14:d4:40:66:29:50:21:f6:6f:3c:bd:61:ab:02:0a:ee:c7:
         eb:0b:b9:30:19:29:a8:0b:ce:98:4b:d7:a9:c6:33:54:1c:df:
         dd:a3:41:c1:b5:19:57:e8:56:8e:de:1a:df:c9:ee:1c:68:72:
         45:72:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:55:17 2025 by rpki-client