Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32332d3233203d3e20323636303636.roa
File:                     34352e342e3132342e302f32332d3233203d3e20323636303636.roa (raw, json)
Hash identifier:          WgJfXJxPn/zfRkbNXOIcA5yb6LYFCl7IGzLsOarix10=
Subject key identifier:   AF:C2:09:07:E1:4E:75:19:D5:EF:63:5B:9E:21:2B:BA:DD:46:17:23
Certificate issuer:       /CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Certificate serial:       112475553DC71B4DA2B83C85E2C01B788D7608CF
Authority key identifier: 7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32332d3233203d3e20323636303636.roa
Signing time:             Mon 03 Mar 2025 22:11:50 +0000
ROA not before:           Mon 03 Mar 2025 22:06:50 +0000
ROA not after:            Mon 02 Mar 2026 22:11:50 +0000
asID:                     266066
IP address blocks:        45.4.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl
                          rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:24:75:55:3d:c7:1b:4d:a2:b8:3c:85:e2:c0:1b:78:8d:76:08:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
        Validity
            Not Before: Mar  3 22:06:50 2025 GMT
            Not After : Mar  2 22:11:50 2026 GMT
        Subject: CN=AFC20907E14E7519D5EF635B9E212BBADD461723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:6f:6d:cc:41:8f:9e:6d:19:07:02:35:38:
                    aa:0f:42:4f:8f:56:a8:35:54:ca:8f:ee:4d:1f:df:
                    ec:40:dd:b9:65:e7:59:05:35:2b:cf:73:68:0d:fa:
                    e8:87:b1:b9:4c:6e:40:19:f9:25:3a:cf:27:6b:55:
                    c9:29:e7:01:75:aa:dc:cf:74:a6:db:40:20:e9:cb:
                    d9:e3:6d:a4:96:f9:0f:b8:8e:12:77:30:e4:e7:81:
                    26:fb:5c:c8:70:99:84:80:d6:c5:bf:a9:e8:0e:24:
                    8c:df:44:8f:53:88:06:74:fa:0c:cf:5e:99:4f:49:
                    93:fd:60:2c:bf:63:2a:33:c0:c8:b0:f1:b8:39:41:
                    b6:81:45:7e:ff:75:39:70:07:25:19:26:bb:1c:9f:
                    24:26:92:7b:dd:04:4e:a1:60:15:63:84:32:eb:e9:
                    51:5a:30:a8:40:e2:bb:5c:0d:40:d6:0c:20:6d:98:
                    d7:77:b5:47:42:8f:ed:8e:57:51:b5:7a:0c:d2:a8:
                    02:81:c6:21:5d:a7:32:d2:bf:da:51:1d:11:41:75:
                    2a:d0:cc:14:21:87:ee:f5:2e:39:cb:61:e8:70:2b:
                    31:f4:ab:b9:b6:07:e4:1f:2b:5f:cb:82:a3:c4:1d:
                    a9:13:37:6f:13:98:77:d0:bb:15:38:1d:89:f8:55:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C2:09:07:E1:4E:75:19:D5:EF:63:5B:9E:21:2B:BA:DD:46:17:23
            X509v3 Authority Key Identifier:
                keyid:7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32332d3233203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:a8:3c:e9:12:ce:91:b0:9d:a5:74:5d:cf:67:a2:f8:a4:01:
         56:1a:90:2f:66:41:6f:95:a2:c8:d8:e6:24:ec:7a:26:fc:d4:
         9d:c6:93:3c:e7:62:74:4c:9d:64:bc:59:a3:8e:7a:65:72:39:
         96:30:59:24:5c:2b:a0:5d:3d:46:49:84:23:d8:5c:bb:3a:7d:
         29:9a:c2:ff:f6:a5:d3:a9:5a:11:51:61:06:d0:c6:10:d5:79:
         b7:d9:2f:af:1b:33:86:95:5e:8d:31:59:83:59:62:3c:5a:d9:
         d1:71:87:b0:86:76:a2:3d:60:75:ac:6f:56:e3:b0:ad:1a:0f:
         ad:30:8e:ca:c7:f2:7a:79:ad:e7:81:c6:15:52:8b:9e:f0:5f:
         20:0d:0d:28:2f:8e:36:bb:d3:d7:f3:d6:07:43:81:8f:c4:8f:
         4b:73:7d:64:bd:9b:f7:c5:e7:85:a3:36:28:51:fd:3c:bc:9c:
         0c:b4:26:f0:db:58:b4:3e:85:ad:95:d8:1e:24:eb:ab:90:19:
         bd:d3:f7:1b:26:b1:9d:f1:96:67:11:eb:52:ad:d5:7f:eb:aa:
         66:7c:77:fc:cf:78:0d:46:95:29:85:4e:97:e2:2e:ad:2d:28:
         59:c7:e5:9a:97:ea:4b:78:0d:62:5e:d7:35:e1:3c:83:b0:e4:
         e6:2e:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:34 2025 by rpki-client