Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa
File:                     34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa (raw, json)
Hash identifier:          P1YDvHnHLZj5HFoQxg4W7/3oIckGLAnpA6kp0zzdLpU=
Subject key identifier:   BE:65:57:3B:37:49:26:35:E5:8D:25:5C:BD:94:AF:99:64:FD:27:4B
Certificate issuer:       /CN=E9874D754A4F2E9B8149C3B894251362FDD83E90
Certificate serial:       41D98123B2FBF4D8572A3D07D0F87A928092A6CB
Authority key identifier: E9:87:4D:75:4A:4F:2E:9B:81:49:C3:B8:94:25:13:62:FD:D8:3E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa
Signing time:             Wed 19 Mar 2025 00:10:58 +0000
ROA not before:           Wed 19 Mar 2025 00:05:58 +0000
ROA not after:            Wed 18 Mar 2026 00:10:58 +0000
asID:                     269014
IP address blocks:        45.176.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.crl
                          rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d9:81:23:b2:fb:f4:d8:57:2a:3d:07:d0:f8:7a:92:80:92:a6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9874D754A4F2E9B8149C3B894251362FDD83E90
        Validity
            Not Before: Mar 19 00:05:58 2025 GMT
            Not After : Mar 18 00:10:58 2026 GMT
        Subject: CN=BE65573B37492635E58D255CBD94AF9964FD274B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:51:ed:c4:b8:69:33:57:2e:dd:1c:0e:33:7b:
                    96:c5:10:87:2b:31:7e:01:fe:d0:c8:10:67:b6:85:
                    c1:13:8a:f5:c4:a9:0b:e5:b7:35:6a:a7:f8:81:ef:
                    53:fe:fd:76:6f:40:95:bd:1b:6c:88:9c:09:a8:9f:
                    85:b3:49:2d:86:be:08:a4:39:df:2c:9d:22:38:ab:
                    3f:f7:b5:6e:70:09:07:0c:c3:74:40:90:87:a7:e0:
                    d1:73:f8:1d:42:e6:87:14:54:1f:c5:0e:fd:16:81:
                    be:3f:92:fa:a7:ec:a4:7b:87:bd:1e:54:f2:77:db:
                    e0:78:bc:2f:c8:26:db:1a:a2:c9:af:80:54:bf:c9:
                    16:d1:fb:be:0e:20:d9:2f:d9:33:d0:6b:d4:ad:ac:
                    62:f0:61:c7:f8:86:b5:4d:4f:24:98:2d:39:22:01:
                    a1:de:c4:3a:c2:17:a4:66:85:06:e0:88:2b:d4:ae:
                    03:a8:35:83:0d:a1:5c:39:fa:36:d1:4d:1c:e9:b3:
                    a2:13:26:90:56:d2:9b:ac:99:5d:74:68:19:53:a7:
                    07:5f:ef:2d:df:e1:60:a8:c3:03:93:99:3c:26:a8:
                    3e:af:3c:ab:a9:6a:7d:56:fb:1e:ec:97:41:ea:c3:
                    20:02:ba:75:21:ed:7b:8e:17:c3:f6:ec:91:df:4d:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:65:57:3B:37:49:26:35:E5:8D:25:5C:BD:94:AF:99:64:FD:27:4B
            X509v3 Authority Key Identifier:
                keyid:E9:87:4D:75:4A:4F:2E:9B:81:49:C3:B8:94:25:13:62:FD:D8:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:b8:1a:cc:07:cb:bf:c9:ef:99:73:47:bd:1d:5f:9f:94:c3:
         a2:50:c4:63:e2:2d:1a:e9:b7:5b:99:88:40:5b:48:3c:13:a7:
         fc:02:ab:42:ce:55:9b:68:5b:d0:7a:ee:54:14:a9:45:74:72:
         9c:47:bd:03:f2:15:69:5a:0a:e2:c9:9a:fc:9f:3e:82:b2:1d:
         e6:35:8b:20:ad:a1:a6:f7:95:19:4f:d5:dd:96:1c:df:c4:3d:
         d6:c2:90:ad:8d:25:c7:42:80:5a:50:f9:68:0f:55:04:b9:40:
         c4:1b:9f:a1:7e:e2:30:31:7e:1e:0b:6a:0b:97:d5:f9:ec:2d:
         6e:ff:b9:a5:af:d5:2b:f5:54:ab:e8:54:bd:87:75:88:92:15:
         06:5b:68:19:6e:6d:ba:a3:f9:7b:81:ed:22:14:f2:5b:04:12:
         01:6f:48:e7:81:63:89:4c:57:e5:e4:6d:09:21:de:4a:aa:c3:
         d9:74:09:fe:a7:bb:80:08:6c:f0:08:8d:94:02:74:25:bc:f4:
         70:23:19:66:f4:ed:96:88:48:9b:69:9d:af:58:93:e4:24:32:
         30:90:19:af:17:fe:7b:06:cd:af:a4:3c:a0:56:bf:27:28:9f:
         d6:bd:29:5b:d2:39:b3:fc:a6:af:20:ff:da:e9:31:e5:cb:c2:
         5b:70:4c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:01 2025 by rpki-client