Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36322e302f32342d3234203d3e20323639323230.roa
File:                     34352e3138322e36322e302f32342d3234203d3e20323639323230.roa (raw, json)
Hash identifier:          OueBDmPAaC9WvxmiTu9LiiAgbzmF7uH3b7Em2PTEZ4o=
Subject key identifier:   FE:99:40:B6:CB:09:6E:69:56:96:68:92:57:3D:7D:A6:3D:FB:C3:23
Certificate issuer:       /CN=4FCF39CBA2BF707C1033E8DC521C56B19D3FC243
Certificate serial:       44464296F34E8A41187079B8218B13A9C057DAD4
Authority key identifier: 4F:CF:39:CB:A2:BF:70:7C:10:33:E8:DC:52:1C:56:B1:9D:3F:C2:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36322e302f32342d3234203d3e20323639323230.roa
Signing time:             Fri 10 Jan 2025 12:17:43 +0000
ROA not before:           Fri 10 Jan 2025 12:12:43 +0000
ROA not after:            Fri 09 Jan 2026 12:17:43 +0000
asID:                     269220
IP address blocks:        45.182.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.crl
                          rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 21:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:46:42:96:f3:4e:8a:41:18:70:79:b8:21:8b:13:a9:c0:57:da:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FCF39CBA2BF707C1033E8DC521C56B19D3FC243
        Validity
            Not Before: Jan 10 12:12:43 2025 GMT
            Not After : Jan  9 12:17:43 2026 GMT
        Subject: CN=FE9940B6CB096E6956966892573D7DA63DFBC323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:58:68:d6:be:e1:f3:08:7c:43:42:cb:a2:
                    01:cb:09:e9:ca:56:ee:ca:39:d2:e7:d6:75:ce:b7:
                    2b:39:54:f6:f9:16:ac:fa:c7:e2:42:55:7e:59:c1:
                    a9:77:83:2c:90:1f:31:f9:7b:53:eb:13:4b:03:97:
                    ab:85:45:80:a8:9d:a7:b3:a7:36:bd:0b:bc:4b:b7:
                    0d:5b:5d:2e:98:d0:84:5f:87:b8:9b:58:cb:69:b5:
                    e9:a9:b9:fb:67:5f:43:a5:31:f2:70:c8:aa:88:ad:
                    67:af:8e:7e:ad:9d:b9:26:20:a1:3f:ee:09:24:c3:
                    90:ea:eb:4d:6b:62:32:c0:e5:55:91:dc:10:98:f4:
                    e5:4b:1c:c5:cc:ad:12:85:ae:7f:df:40:5a:7e:4d:
                    d5:53:76:32:7b:bd:f9:73:21:dd:62:3d:1e:78:47:
                    c0:8a:46:be:eb:0c:d8:e3:d9:0f:47:ef:3a:77:c1:
                    9e:df:71:3a:81:2b:aa:42:32:71:62:62:11:d0:e6:
                    c6:8f:30:12:9e:78:b6:85:99:1f:0c:04:a8:6f:00:
                    af:9b:39:bf:ec:8d:a3:6d:40:27:92:46:26:25:2b:
                    8f:32:b1:cb:71:79:76:2b:f9:e5:d0:6d:96:98:e6:
                    3b:d1:cc:30:32:e7:27:95:a3:38:bc:7f:61:23:3a:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:99:40:B6:CB:09:6E:69:56:96:68:92:57:3D:7D:A6:3D:FB:C3:23
            X509v3 Authority Key Identifier:
                keyid:4F:CF:39:CB:A2:BF:70:7C:10:33:E8:DC:52:1C:56:B1:9D:3F:C2:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/34352e3138322e36322e302f32342d3234203d3e20323639323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:c5:58:f8:8d:91:eb:34:44:cd:28:96:d7:a1:55:44:54:0c:
         e2:3a:da:ac:0c:ee:2b:8a:f0:43:ba:5b:97:41:8e:d1:43:de:
         5f:88:26:67:5c:31:bf:76:3a:b6:1b:7d:a5:4d:04:34:a5:4f:
         be:32:2f:2e:f0:f0:92:15:66:ff:0a:3f:28:20:1d:62:76:4f:
         bd:56:73:5e:54:80:fc:ec:d2:b1:39:7c:6e:97:8d:a5:71:d9:
         b8:c2:bf:4c:ed:e6:97:4f:e7:f4:c5:b1:9e:4a:fd:08:09:ca:
         c2:7a:6c:ef:59:0c:3c:51:17:09:04:5f:34:27:f1:e7:52:0c:
         a8:a7:4a:34:1c:fd:48:8a:78:3d:90:4f:0f:4a:e1:8f:f4:a1:
         39:85:d6:75:99:65:ce:f7:e0:43:7e:77:b8:4e:fb:a2:17:de:
         cd:e2:d3:e5:4e:73:c1:0d:95:60:ed:65:4f:a2:17:61:50:df:
         3c:48:73:d6:04:3e:ea:ac:8e:f1:eb:07:b7:02:f1:69:81:42:
         f7:b8:2a:5f:34:36:9b:c5:02:ad:62:a2:d6:2d:34:e0:f9:f9:
         c8:a5:64:d9:e6:2a:70:62:95:e0:69:ae:30:ba:e0:29:32:10:
         75:9d:d7:77:49:8d:e9:9e:c6:8c:eb:95:24:07:45:09:13:1b:
         24:65:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:00:39 2025 by rpki-client