Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37372e302f32342d3234203d3e20323639373030.roa
File:                     34352e3139312e37372e302f32342d3234203d3e20323639373030.roa (raw, json)
Hash identifier:          GuHPTKZpJ8dlk1jPPCu8SRKwnHQAzmAES0A23kyZIPA=
Subject key identifier:   59:72:AC:03:B0:44:4B:42:E9:74:43:AC:AB:83:EE:AA:08:6B:69:D5
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       3CA061139AEF861B59BEF72D501257E78395C701
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37372e302f32342d3234203d3e20323639373030.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     269700
IP address blocks:        45.191.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a0:61:13:9a:ef:86:1b:59:be:f7:2d:50:12:57:e7:83:95:c7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:f1:bf:d5:61:c1:3a:3f:29:d0:45:29:01:
                    fd:6e:ec:10:76:ba:81:11:3c:2c:51:f9:09:96:f6:
                    1a:1f:2b:69:66:ea:ee:9c:2d:a8:c6:ba:81:7d:e8:
                    6a:f3:9d:b1:79:3d:60:ac:3a:f9:f7:f6:86:b4:30:
                    8a:fa:68:69:88:ba:50:28:29:2b:c5:0f:d6:44:94:
                    65:52:4d:2e:5a:47:8c:19:5e:d0:36:d1:b5:7d:88:
                    8c:d8:d8:f2:5d:2c:2e:3d:3e:9e:0d:5b:80:ee:88:
                    37:7d:e1:41:71:29:31:92:95:71:e6:7b:53:6d:44:
                    10:98:33:cd:35:cb:85:f8:7a:90:d2:87:21:37:4b:
                    45:15:e6:fd:38:e6:87:83:74:45:ba:44:a7:63:0f:
                    20:17:af:b6:14:95:ab:9b:7a:4f:34:5d:29:70:a3:
                    69:bb:c5:de:7d:f8:65:22:fc:50:35:73:e5:28:bb:
                    4a:a9:12:b0:58:0f:1a:8a:f8:a5:21:d2:39:30:fd:
                    e8:95:d8:7f:a2:5d:6a:91:ae:6c:c6:8b:dd:4d:fa:
                    ab:01:83:b7:49:c5:c1:e0:39:63:ce:32:1a:71:27:
                    e4:84:8c:5d:a2:5c:8b:cf:30:74:14:ab:5a:99:8b:
                    d3:7b:00:e5:a2:9a:5f:07:f5:73:20:48:8b:c7:9a:
                    82:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:72:AC:03:B0:44:4B:42:E9:74:43:AC:AB:83:EE:AA:08:6B:69:D5
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37372e302f32342d3234203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:91:07:ad:7a:16:85:01:e4:27:27:a0:98:d5:d6:19:97:93:
         9d:38:28:28:f3:67:dd:bf:42:85:6f:16:69:7f:4a:e8:a6:73:
         13:73:d3:d0:4c:1d:ef:54:2f:ce:2b:03:4c:47:78:93:87:c9:
         f3:6a:df:ab:81:5d:79:84:42:79:ee:f8:9e:79:ce:65:2d:5e:
         52:6c:90:24:c3:52:80:0c:0c:19:03:7e:59:f5:c7:ac:cc:47:
         76:6b:36:af:e1:cf:31:83:fb:8e:7e:d9:c3:d4:42:c9:5a:ff:
         b5:20:24:f3:a8:9b:f2:6e:60:94:01:f4:dd:30:04:8b:27:c1:
         3e:9a:ae:82:54:f7:de:56:bb:3f:1e:80:8b:08:ba:eb:23:4e:
         8c:cc:47:f2:3b:40:14:df:24:d4:9f:67:9f:c7:85:ca:99:e1:
         fc:5b:22:58:47:81:6d:35:a2:44:a0:e2:d2:3f:18:28:02:22:
         ff:7f:f2:01:a3:f6:7a:a9:03:f7:e4:f0:2f:57:4f:94:1d:9b:
         1e:f8:5d:e0:73:ff:06:c3:1e:ab:a8:21:00:86:1b:0b:d7:40:
         0e:ee:45:42:b9:74:d7:16:bb:42:9d:bb:e9:d9:f9:0d:fd:4e:
         f0:64:be:a6:57:0c:d3:2e:f5:b2:6d:53:3a:38:7f:31:6e:fd:
         c1:8a:58:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:56:45 2025 by rpki-client