Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39362e302f32332d3233203d3e20323639313238.roa
File:                     34352e3138302e39362e302f32332d3233203d3e20323639313238.roa (raw, json)
Hash identifier:          D/ifkOa7cd+uRve9JfZELMNtshvPHC3Ec/PXOs1mkY0=
Subject key identifier:   18:AF:DA:A1:99:7C:16:FF:07:A0:24:DB:0B:C7:BD:7F:87:42:8D:3C
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       7FD337F693800B99379A0164BEA4CCFCB6F80E89
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39362e302f32332d3233203d3e20323639313238.roa
Signing time:             Thu 06 Mar 2025 09:00:32 +0000
ROA not before:           Thu 06 Mar 2025 08:55:32 +0000
ROA not after:            Thu 05 Mar 2026 09:00:32 +0000
asID:                     269128
IP address blocks:        45.180.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
                          rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d3:37:f6:93:80:0b:99:37:9a:01:64:be:a4:cc:fc:b6:f8:0e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Mar  6 08:55:32 2025 GMT
            Not After : Mar  5 09:00:32 2026 GMT
        Subject: CN=18AFDAA1997C16FF07A024DB0BC7BD7F87428D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:32:ba:f4:e7:f4:aa:5e:b2:ed:89:c2:94:
                    d3:cb:84:59:6f:24:2b:fe:35:3d:96:61:0f:7a:b2:
                    91:4a:be:31:ca:91:33:b1:83:11:d0:8b:51:c9:82:
                    c1:dc:32:dc:f8:bf:11:2d:3b:f1:b2:00:30:97:2a:
                    0a:22:25:1b:32:06:5b:2b:06:75:21:de:54:f3:bc:
                    4a:d0:44:1b:43:74:ee:25:8b:66:6a:48:31:3d:6a:
                    f5:b7:68:4a:81:e0:18:bb:64:b7:84:00:a7:36:c8:
                    55:c2:ca:a1:88:83:35:46:9b:b5:01:cd:16:a2:40:
                    86:3b:f8:9e:30:5b:38:3d:0e:b0:cc:92:2a:0d:01:
                    dd:a1:09:fa:c2:00:04:7d:5d:04:05:9f:f5:53:96:
                    08:ef:6e:04:da:b2:d4:0f:b5:a7:d6:94:22:aa:0b:
                    2f:09:47:a3:d2:fd:02:21:a8:e7:35:5f:c2:e5:38:
                    01:1f:a2:3b:d8:d8:65:b9:b4:46:82:48:6b:a3:eb:
                    be:66:1a:1d:82:cb:86:46:80:6f:e5:01:5d:d6:40:
                    74:05:2a:41:cb:f4:e8:f7:8d:df:03:f2:ee:1b:cd:
                    21:ef:2d:13:1e:2d:2f:69:6b:55:8e:34:5d:c4:33:
                    72:6b:59:9a:0a:84:04:5e:99:9f:b6:67:81:fa:dd:
                    09:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AF:DA:A1:99:7C:16:FF:07:A0:24:DB:0B:C7:BD:7F:87:42:8D:3C
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39362e302f32332d3233203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:92:c0:b2:a2:e0:50:18:40:fa:fb:db:15:e8:cf:45:2e:62:
         95:f3:bf:92:20:9f:37:b2:f0:5d:2c:93:b7:44:36:99:94:f7:
         b1:0d:8d:f0:72:81:b5:6f:87:9f:76:f8:4e:f8:e5:c0:96:08:
         f1:98:24:0f:c8:7b:e6:ba:c9:59:a6:6b:0a:2a:dd:66:37:66:
         3d:18:f1:cc:aa:02:73:34:d9:f4:3a:38:da:48:1f:8a:30:c3:
         d6:14:97:56:4e:fc:ee:7c:22:b2:9b:69:8c:9a:9f:d0:dc:f4:
         51:66:23:41:ec:4d:9c:ca:98:a2:5e:f8:57:ac:19:c3:e9:7e:
         8a:0c:04:2e:e7:96:05:4f:3a:24:b5:85:e3:b9:4d:2e:7f:b5:
         b6:0a:3e:87:ec:3a:ba:bf:51:b5:13:4a:58:bc:b0:9a:af:86:
         d5:7e:d6:f7:3c:5c:07:8d:d4:38:26:62:bc:ea:98:dd:87:3a:
         65:1b:fc:92:eb:f8:07:4f:3c:91:b6:41:f8:73:62:cc:12:f9:
         f4:51:b0:d4:79:49:9d:51:db:e2:a6:f8:b7:f4:b2:96:34:00:
         9e:49:09:ed:d0:3b:c3:57:21:5b:8a:ba:b0:ef:48:b3:f8:1e:
         bd:b4:a8:c7:20:79:7f:5b:c4:63:27:8e:bc:7f:33:55:ef:32:
         d4:31:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:53:04 2025 by rpki-client