Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132362e302f32342d3234203d3e20323636303636.roa
File:                     34352e342e3132362e302f32342d3234203d3e20323636303636.roa (raw, json)
Hash identifier:          JJTYpZUcponr1Odi47qPegjpqquxYgdPiwLYLTJFYfw=
Subject key identifier:   1E:A0:70:BE:FD:AD:D4:61:EF:B8:44:6F:2A:C6:4D:03:07:66:DB:E8
Certificate issuer:       /CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Certificate serial:       4456C3DC76EA187C0514206C2FA964FD916146B9
Authority key identifier: 7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132362e302f32342d3234203d3e20323636303636.roa
Signing time:             Mon 03 Mar 2025 22:12:35 +0000
ROA not before:           Mon 03 Mar 2025 22:07:35 +0000
ROA not after:            Mon 02 Mar 2026 22:12:35 +0000
asID:                     266066
IP address blocks:        45.4.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl
                          rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:56:c3:dc:76:ea:18:7c:05:14:20:6c:2f:a9:64:fd:91:61:46:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
        Validity
            Not Before: Mar  3 22:07:35 2025 GMT
            Not After : Mar  2 22:12:35 2026 GMT
        Subject: CN=1EA070BEFDADD461EFB8446F2AC64D030766DBE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:ee:5f:b5:7f:7d:f2:51:6a:c9:d5:8e:50:
                    30:a8:58:df:20:0c:6b:6a:67:1d:24:cc:d2:d4:97:
                    28:86:a6:e0:fd:6d:6d:55:b6:aa:d6:e5:1f:b9:84:
                    07:32:97:94:24:2e:32:2a:49:5a:a4:57:f1:3f:46:
                    d9:1b:2b:52:62:07:6a:44:8e:27:34:a6:de:e3:89:
                    dc:4b:72:d8:b4:52:5a:96:d6:5f:5c:b1:7e:56:cf:
                    dc:86:83:15:5a:f6:da:4d:66:c6:85:1a:d6:52:c1:
                    7c:f1:f6:f7:7c:cf:7a:5c:60:19:e1:77:05:d0:ed:
                    51:2d:13:a0:c0:67:ca:83:fb:4e:c3:5b:68:44:45:
                    23:6d:a0:f7:dc:42:38:3b:76:d8:af:87:67:cc:69:
                    fe:66:bf:b4:42:15:9c:2d:25:15:09:2e:8d:47:71:
                    d4:a9:c8:f4:b0:1e:41:9b:c7:87:02:51:cd:3d:e3:
                    6b:d9:93:57:eb:4f:bd:94:92:5e:c4:ea:bb:bc:18:
                    c7:d7:ac:b2:3b:2c:ae:b4:74:c3:42:0a:26:ac:94:
                    0c:c7:7b:ba:80:0e:03:35:62:52:d0:f1:9c:8b:7c:
                    9d:1f:9e:43:81:65:bb:39:a9:15:30:72:7a:83:d0:
                    44:99:a1:83:94:c9:5a:8e:30:f8:bb:9e:ba:f6:46:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A0:70:BE:FD:AD:D4:61:EF:B8:44:6F:2A:C6:4D:03:07:66:DB:E8
            X509v3 Authority Key Identifier:
                keyid:7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132362e302f32342d3234203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:2c:b3:4c:e0:c6:50:87:83:4a:7b:12:18:1a:3e:3f:4f:91:
         c2:36:53:ca:2f:f4:9b:73:3f:45:f1:8f:82:1d:97:7b:da:d9:
         1e:9b:8a:27:c8:ad:9c:4b:30:1a:0b:43:91:8d:95:44:79:76:
         41:3a:80:7d:10:45:aa:fa:10:09:b0:e1:5f:3f:8e:92:30:f4:
         11:ec:6e:47:22:71:9b:70:fc:76:16:f1:e0:fe:0a:fb:97:85:
         c0:eb:7d:33:3a:96:9b:68:91:bf:70:d3:b1:39:89:32:18:ad:
         b3:fa:ae:cd:be:dc:06:02:be:36:bd:e0:2f:2a:5b:b8:2e:de:
         59:d1:cc:2e:9a:37:a0:d6:1d:32:16:d1:c7:fe:5c:b5:15:67:
         0f:72:7e:92:43:c6:7c:38:5d:d8:ed:3c:8f:49:a9:15:d3:40:
         7b:06:65:91:c3:88:d6:8a:09:bb:83:68:17:8e:ff:56:2e:90:
         f9:e5:71:9c:02:cc:8b:5b:d6:41:fd:34:a2:e0:20:72:89:fa:
         c1:0b:fd:43:ca:de:46:5c:65:ec:ad:3e:1e:2f:9c:be:f2:e7:
         a9:9c:06:7e:c2:16:1e:12:2f:cb:47:b5:c1:ac:83:63:db:f1:
         21:47:52:ac:d3:9d:27:dd:7c:bc:58:17:a0:24:cc:f9:35:b2:
         e5:bf:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:33 2025 by rpki-client