Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32342d3234203d3e20323639303733.roa
File:                     34352e3137392e33362e302f32342d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          T0JBQ407MqhHBXXA6Yq6ylvDFyKIfNgkocsySTcP0h4=
Subject key identifier:   1D:FF:21:64:96:F6:9C:71:72:31:F6:FD:94:BA:54:BF:FB:E7:74:98
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       439620CF0D3F7F53FA6A1BDF9D196A77B1CB9FFE
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32342d3234203d3e20323639303733.roa
Signing time:             Tue 22 Oct 2024 14:21:50 +0000
ROA not before:           Tue 22 Oct 2024 14:16:50 +0000
ROA not after:            Tue 21 Oct 2025 14:21:50 +0000
asID:                     269073
IP address blocks:        45.179.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:96:20:cf:0d:3f:7f:53:fa:6a:1b:df:9d:19:6a:77:b1:cb:9f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Oct 22 14:16:50 2024 GMT
            Not After : Oct 21 14:21:50 2025 GMT
        Subject: CN=1DFF216496F69C717231F6FD94BA54BFFBE77498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:49:57:c4:5c:61:7c:bf:0c:10:5b:4c:92:
                    c5:86:6e:59:f8:30:c3:65:fd:af:ee:2f:aa:f6:85:
                    ad:37:e9:8e:60:89:9f:36:2a:83:ce:66:7d:c3:ef:
                    9d:0e:e7:d2:09:61:09:d8:3f:43:38:3f:c3:ac:6d:
                    7b:6e:06:c3:84:1e:71:4f:96:cc:e5:52:de:16:10:
                    18:c5:c6:0d:0f:c7:60:0a:23:01:02:58:c2:b6:52:
                    84:c3:2b:f7:9b:3a:ee:92:94:ee:97:ab:fe:47:59:
                    4b:3b:da:69:71:77:e1:8e:cf:b2:76:df:55:d3:51:
                    de:df:c5:2a:93:f4:36:46:24:d2:d8:4e:4b:96:1d:
                    10:74:1f:bd:6c:05:e2:f5:a5:8b:73:c4:62:13:d3:
                    75:24:2e:1a:2f:11:11:1e:1c:2f:5e:02:fc:93:10:
                    bb:5f:29:0b:c6:42:71:fc:d5:c2:a6:cb:87:2c:6b:
                    d6:1f:8a:dc:25:7d:15:74:4a:19:bc:77:7c:61:8b:
                    44:dc:9d:63:91:de:5a:d9:17:b2:d9:43:63:2e:a2:
                    f4:59:38:92:52:99:e9:09:2d:ba:44:06:a4:ef:dc:
                    50:38:66:5b:f2:9b:81:e6:ed:70:52:64:3e:f8:88:
                    29:b0:42:59:96:56:f6:36:f0:d3:ed:9b:2a:93:cd:
                    1b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FF:21:64:96:F6:9C:71:72:31:F6:FD:94:BA:54:BF:FB:E7:74:98
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32342d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:75:8e:66:c9:bd:eb:7c:a0:79:02:cc:4e:94:7e:34:ce:80:
         75:61:f7:cc:34:a2:ca:aa:04:3c:b9:f0:fc:cf:2d:f8:61:0f:
         3d:80:96:b3:28:b9:b5:58:12:2e:cc:23:2c:e6:12:cb:e0:6a:
         38:5e:ad:af:bb:a3:84:9e:49:33:2d:3e:5a:ab:78:7c:b6:28:
         fa:25:da:a5:6a:16:69:65:b5:a5:45:a7:6e:2d:ff:8c:51:02:
         dd:4b:c8:07:be:62:99:6c:6e:f0:f1:cf:8a:2f:16:20:7e:b9:
         e9:b1:bf:28:2a:22:30:12:13:6f:c5:65:73:87:f0:2b:c5:2f:
         6c:aa:5a:f2:13:c0:60:c3:31:b3:14:c4:02:39:b9:21:98:86:
         cb:d4:87:a2:d3:8d:ac:0a:b4:88:43:ff:1e:7e:be:99:23:36:
         e0:cc:da:91:21:0c:99:74:e9:e8:dc:ab:b0:03:98:b1:e6:71:
         4f:d7:7f:eb:cd:5e:e1:36:56:f0:79:00:3e:5c:49:ae:0b:70:
         ea:f9:6f:49:8e:5c:c4:d0:1d:11:c4:0f:41:11:60:af:69:ae:
         9e:ff:2e:85:a4:64:c6:3b:53:9d:5d:d5:23:d3:f8:1a:d9:57:
         f0:bf:34:07:1a:de:43:dd:74:a4:f6:cd:16:b1:ee:db:ba:5a:
         2c:e7:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:24 2025 by rpki-client