Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3234382e302f32322d3232203d3e20323639363536.roa
File:                     34352e3139302e3234382e302f32322d3232203d3e20323639363536.roa (raw, json)
Hash identifier:          gpSl2TohgstxqWk2JY1eaTJHu7O7kaqkgYhD1UYUBaU=
Subject key identifier:   A7:E3:12:85:FC:3B:57:C2:56:FD:05:0D:7C:73:87:81:67:70:29:DE
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       0C116BDFDE7338F1AAC202CB2BF8BB684A6443DC
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3234382e302f32322d3232203d3e20323639363536.roa
Signing time:             Thu 05 Dec 2024 18:15:19 +0000
ROA not before:           Thu 05 Dec 2024 18:10:19 +0000
ROA not after:            Thu 04 Dec 2025 18:15:19 +0000
asID:                     269656
IP address blocks:        45.190.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 08:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:11:6b:df:de:73:38:f1:aa:c2:02:cb:2b:f8:bb:68:4a:64:43:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Dec  5 18:10:19 2024 GMT
            Not After : Dec  4 18:15:19 2025 GMT
        Subject: CN=A7E31285FC3B57C256FD050D7C738781677029DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:d9:88:e3:55:60:34:a1:89:3e:3b:6d:5a:
                    b4:a0:6b:de:94:2e:db:ef:b2:2c:00:7e:92:e0:62:
                    67:e3:a3:a9:30:ec:64:fe:80:37:5b:b8:26:03:55:
                    42:53:e9:e1:e6:08:c7:f3:32:c0:d4:61:cc:a6:eb:
                    b9:87:5a:7c:b8:a0:4f:5a:47:ce:e4:5e:fc:ae:d5:
                    3b:3b:7d:45:fa:b2:d9:f1:2c:9f:e2:82:83:24:a5:
                    94:8e:c3:04:9a:de:bb:cd:6d:d0:1b:73:16:20:67:
                    b4:28:c6:bb:2f:22:ae:12:ef:a1:4e:5a:10:49:1a:
                    f5:74:36:2c:ea:19:2a:c0:ea:fe:16:72:3c:c4:27:
                    48:9c:95:04:63:99:a8:8a:55:45:a0:69:23:bc:4e:
                    00:12:7e:36:8e:76:27:c1:0d:52:69:bf:7b:0b:e3:
                    23:ef:5e:88:c1:83:75:94:91:c4:6d:00:54:4d:9c:
                    17:48:d4:a3:b1:65:48:35:93:30:d7:d5:34:24:3b:
                    18:b8:38:b7:d4:1c:e0:fe:23:14:af:37:ea:b3:25:
                    f7:c7:a3:01:2c:74:11:2e:9d:bf:80:f1:4f:28:59:
                    d3:e6:46:2f:b5:f2:17:ce:1b:53:d6:a6:ac:2e:86:
                    99:06:8d:03:4a:f1:a8:47:e4:16:0f:0f:8c:d3:1c:
                    5e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E3:12:85:FC:3B:57:C2:56:FD:05:0D:7C:73:87:81:67:70:29:DE
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3234382e302f32322d3232203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:65:62:09:ff:9b:8a:d4:6e:25:fb:8e:e5:49:9d:18:91:39:
         38:6c:ad:0c:cb:f4:1b:39:1f:6b:bd:b0:e7:73:1c:5e:41:91:
         a9:2a:a9:1c:32:ab:3b:c3:75:85:06:a0:e1:bb:0b:86:d0:84:
         87:af:65:f5:6c:93:ef:4e:dd:d3:07:4c:d9:60:e4:fe:22:6e:
         f9:dc:50:85:71:a8:2b:f9:f2:b1:12:3a:a1:7c:0a:e6:7e:f0:
         5c:63:b4:7b:0a:95:18:b6:0c:46:69:1b:e9:1c:61:6b:ed:42:
         b2:a2:bb:8f:92:59:b1:70:f0:5a:d9:25:4b:d0:a9:49:96:76:
         5f:c1:57:0c:8d:a8:15:87:b8:22:2a:8a:b9:46:95:45:d9:6c:
         35:30:3d:62:6e:62:3b:c2:05:64:1b:73:9a:ee:cc:6d:09:1b:
         8e:7a:f8:2d:3a:14:7a:82:f1:51:80:af:4e:6a:95:2f:fc:f7:
         07:16:8e:8b:1d:7a:6e:21:13:85:7b:22:61:91:e5:e3:22:1e:
         28:a4:54:15:8c:42:9a:20:cb:b1:e2:95:e0:dd:f2:27:14:d2:
         49:48:77:c1:bb:4d:2b:b8:de:25:88:d8:18:56:4a:d1:bf:be:
         95:6e:12:cd:3a:e0:0d:a1:f5:a1:dc:5e:1b:c8:2f:6f:26:d2:
         d5:bc:da:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:17 2025 by rpki-client