Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/34352e3138382e34342e302f32322d3332203d3e20323639353331.roa
File:                     34352e3138382e34342e302f32322d3332203d3e20323639353331.roa (raw, json)
Hash identifier:          e1+2ztAGF5R9HREcNfVjhD41uuDrRrNSK+uKsWHg/9Y=
Subject key identifier:   F0:57:BA:A0:5A:89:7D:B7:A2:BE:15:D7:89:90:B6:1C:9B:1C:15:9C
Certificate issuer:       /CN=D0EC3327DD13304B2D3E7A30B411166F1721FADC
Certificate serial:       2E4005E1464D8BB49B9FA341E602CC6C4712DBDB
Authority key identifier: D0:EC:33:27:DD:13:30:4B:2D:3E:7A:30:B4:11:16:6F:17:21:FA:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EC3327DD13304B2D3E7A30B411166F1721FADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/34352e3138382e34342e302f32322d3332203d3e20323639353331.roa
Signing time:             Wed 28 May 2025 21:09:45 +0000
ROA not before:           Wed 28 May 2025 21:04:45 +0000
ROA not after:            Wed 27 May 2026 21:09:45 +0000
asID:                     269531
IP address blocks:        45.188.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/D0EC3327DD13304B2D3E7A30B411166F1721FADC.crl
                          rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/D0EC3327DD13304B2D3E7A30B411166F1721FADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EC3327DD13304B2D3E7A30B411166F1721FADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 05:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:40:05:e1:46:4d:8b:b4:9b:9f:a3:41:e6:02:cc:6c:47:12:db:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EC3327DD13304B2D3E7A30B411166F1721FADC
        Validity
            Not Before: May 28 21:04:45 2025 GMT
            Not After : May 27 21:09:45 2026 GMT
        Subject: CN=F057BAA05A897DB7A2BE15D78990B61C9B1C159C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:47:a5:50:15:f6:34:33:95:7e:48:79:84:27:
                    12:ea:dc:01:e2:12:a7:43:7c:ef:0e:d4:7c:de:b1:
                    27:7e:d7:e6:3a:c2:fb:a8:9f:9c:f4:79:fc:a3:4c:
                    98:31:97:65:9b:d5:14:f3:93:4c:8b:2a:29:56:d4:
                    35:cf:70:31:31:5b:a6:b1:ce:4f:c5:94:f2:21:66:
                    4a:da:a1:4c:1f:86:6b:4b:ed:28:80:2c:dd:e6:4c:
                    18:74:f5:61:1b:dc:1c:21:27:6e:a9:4e:ad:d3:ba:
                    6f:7e:64:22:6f:ef:96:69:f2:f4:62:0c:7a:80:e3:
                    58:69:91:00:15:b6:75:21:69:3d:47:f6:ff:d0:ac:
                    11:aa:c7:ba:4a:32:21:a6:0c:58:f3:58:89:55:da:
                    4b:87:a9:81:9e:b2:fd:57:56:28:2e:8f:51:be:d0:
                    51:e7:56:bf:6f:41:4e:8a:de:a8:b4:46:87:c1:55:
                    8e:ae:ef:18:94:b7:54:fe:76:29:b1:79:24:f7:d1:
                    9e:1d:18:b7:df:79:76:dc:3a:14:48:ee:ed:ef:75:
                    e1:40:db:b7:1e:47:8e:3c:59:52:aa:8a:4a:e5:22:
                    5d:08:aa:6f:54:55:81:16:a8:7c:41:d1:ad:25:4d:
                    09:99:d6:d0:28:d2:5f:ee:42:51:9d:ac:ab:dc:58:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:57:BA:A0:5A:89:7D:B7:A2:BE:15:D7:89:90:B6:1C:9B:1C:15:9C
            X509v3 Authority Key Identifier:
                keyid:D0:EC:33:27:DD:13:30:4B:2D:3E:7A:30:B4:11:16:6F:17:21:FA:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/D0EC3327DD13304B2D3E7A30B411166F1721FADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EC3327DD13304B2D3E7A30B411166F1721FADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/34352e3138382e34342e302f32322d3332203d3e20323639353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:e9:c9:af:8a:6b:00:6b:03:f1:fe:f7:66:eb:a2:0e:7d:bf:
         ab:c1:8a:6f:9d:b7:67:69:73:a2:6f:e3:81:9d:a3:94:e1:2f:
         5d:6f:61:29:86:4f:9c:45:6b:19:5a:5c:f0:6c:f1:83:e6:27:
         ba:3d:fe:d4:f8:a5:08:a8:f0:3c:97:53:4e:f3:3b:0d:ab:2c:
         df:6d:84:ac:f2:74:fe:4b:b6:5b:19:dc:a9:ef:5d:03:e0:57:
         e7:2a:e1:ff:0e:7e:95:d0:ad:fb:b0:44:c4:af:96:86:44:6e:
         eb:28:25:8d:94:20:00:63:61:27:56:de:04:7d:47:ee:11:16:
         7b:15:45:a9:ab:03:bd:8d:76:29:4b:dc:fd:51:c8:a9:b3:3d:
         15:01:de:21:f3:37:87:b6:48:f1:63:ce:a4:4b:70:d1:09:1b:
         e0:7f:55:93:fe:04:b4:a6:a1:29:a3:a4:08:8b:ef:82:72:25:
         2c:03:76:02:da:a1:d8:d2:19:28:86:63:57:bb:f6:af:d8:88:
         36:de:75:d6:44:d7:64:98:d7:a7:a5:10:1e:b1:77:ce:1a:69:
         09:e1:c3:d3:11:b9:17:fb:95:b0:d1:cb:11:13:29:12:47:bb:
         0b:83:dc:25:83:04:02:be:6b:0c:e6:9f:1e:0f:9e:35:67:ad:
         ab:eb:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 05:29:30 2025 by rpki-client