Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/34352e3138322e36382e302f32322d3234203d3e20323639323135.roa
File:                     34352e3138322e36382e302f32322d3234203d3e20323639323135.roa (raw, json)
Hash identifier:          OQEAGfoDTCxbqjX9poXYivBBVemL4mXwIE6l6E9r+6Q=
Subject key identifier:   E2:1B:18:0F:3D:88:F5:CD:1C:BE:24:AB:A0:D3:11:0B:B0:26:C5:97
Certificate issuer:       /CN=1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B
Certificate serial:       37F2AC6B54FB4A014DF40156BD14E0F2BCF8380A
Authority key identifier: 1E:6B:79:5E:AD:69:C5:E9:30:00:2F:4C:84:E8:CB:AC:16:DD:A2:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/34352e3138322e36382e302f32322d3234203d3e20323639323135.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     269215
IP address blocks:        45.182.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.crl
                          rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 06:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f2:ac:6b:54:fb:4a:01:4d:f4:01:56:bd:14:e0:f2:bc:f8:38:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=E21B180F3D88F5CD1CBE24ABA0D3110BB026C597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:c4:ec:6d:f2:56:3b:50:c2:6a:ab:7b:9e:
                    17:63:b3:3f:52:1f:66:d9:47:01:4a:38:98:3a:85:
                    97:5f:44:ae:e6:e4:f0:c9:a5:46:c3:a3:4f:e1:6d:
                    cf:44:01:8b:e9:65:4f:e2:11:89:55:26:bc:eb:1b:
                    3b:22:db:4e:56:94:df:05:cf:c1:5f:35:df:fe:ab:
                    fa:30:fd:91:10:1e:a6:0b:4f:b6:a3:3b:80:0a:36:
                    de:02:50:c8:86:08:fd:fa:19:25:c5:22:f7:36:fe:
                    f0:11:19:00:1b:de:72:b5:08:17:19:c7:af:8e:91:
                    35:3c:09:84:30:36:b9:d8:23:c4:14:d1:a3:48:f9:
                    28:bf:ee:d3:31:3e:b7:63:a9:71:a0:2c:ea:09:b2:
                    25:2e:85:0f:4c:e9:3b:a1:84:c3:65:72:f6:3a:1b:
                    05:da:0a:dc:16:c8:5c:d7:85:ad:c0:2d:3a:ae:6c:
                    68:83:eb:09:1b:d7:83:8b:8f:00:58:01:ea:ee:83:
                    71:80:5d:2e:09:dd:7c:c7:a9:cb:33:8e:40:89:c9:
                    83:aa:ca:f7:2f:36:ca:98:0c:d6:e3:25:5b:43:d1:
                    f0:97:e8:d6:5b:6e:67:09:65:b5:3a:44:07:08:88:
                    08:a7:c3:86:5d:b1:ff:ab:a0:bb:7d:31:33:91:13:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1B:18:0F:3D:88:F5:CD:1C:BE:24:AB:A0:D3:11:0B:B0:26:C5:97
            X509v3 Authority Key Identifier:
                keyid:1E:6B:79:5E:AD:69:C5:E9:30:00:2F:4C:84:E8:CB:AC:16:DD:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/34352e3138322e36382e302f32322d3234203d3e20323639323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:85:9a:9f:3c:e3:34:45:6e:65:87:a5:a5:67:b4:55:b4:27:
         09:89:ff:c9:ac:23:7d:ae:68:e0:51:b0:d7:cc:3e:d3:61:e7:
         ed:e7:42:36:01:7d:a3:97:2c:8e:88:54:c2:4d:ef:9f:5d:47:
         e8:bf:9e:34:f0:ca:e6:38:03:dd:da:c1:4e:92:7c:12:7d:85:
         f3:80:2b:c9:42:49:ec:47:e9:b6:f0:85:38:d0:b7:a4:33:aa:
         8e:8f:8f:e5:cd:f3:ba:e9:83:6f:13:c1:17:7e:0f:b6:be:6f:
         0d:5c:f3:1f:7b:e2:47:79:f7:51:fb:f3:32:bc:cf:7b:41:60:
         81:28:a5:d5:80:b3:c8:cf:9e:b6:6a:69:1d:ee:d2:04:b4:7d:
         c4:38:cf:dd:b2:5d:57:50:69:0a:23:a8:fd:04:db:60:c4:e0:
         02:82:95:4e:a8:03:90:89:1f:97:c5:c0:21:a0:c8:b2:9d:dc:
         80:a1:b3:99:a0:34:9a:1d:33:a2:1e:11:a2:8d:2e:4e:9a:9a:
         1a:9d:b8:47:e2:6f:1f:48:85:0d:ea:b3:56:55:8b:6f:0c:33:
         a0:f1:ec:56:4b:71:88:1d:73:e7:3c:98:ae:af:57:91:15:d5:
         b0:63:1b:3c:40:0f:87:fb:6a:ad:09:9d:19:e3:20:a4:d9:dc:
         6f:c1:88:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:08:33 2025 by rpki-client