Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34312e302f32342d3234203d3e20323636353134.roa
File:                     34352e3138362e34312e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          Lb+btG2GnauT0dEyFycnqvTikKPboZR1Uh5nhFwlpOM=
Subject key identifier:   33:23:73:AB:B3:91:97:D7:70:D1:44:68:D5:64:1A:EE:9C:E5:37:57
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       7C3E72CC8F8BA57DD04FFD3E8B694D4EC9CFF8E9
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34312e302f32342d3234203d3e20323636353134.roa
Signing time:             Mon 24 Mar 2025 12:57:04 +0000
ROA not before:           Mon 24 Mar 2025 12:52:04 +0000
ROA not after:            Mon 23 Mar 2026 12:57:04 +0000
asID:                     266514
IP address blocks:        45.186.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3e:72:cc:8f:8b:a5:7d:d0:4f:fd:3e:8b:69:4d:4e:c9:cf:f8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Mar 24 12:52:04 2025 GMT
            Not After : Mar 23 12:57:04 2026 GMT
        Subject: CN=332373ABB39197D770D14468D5641AEE9CE53757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:13:96:64:f5:ee:99:d9:e1:0f:1c:1a:d0:
                    62:d8:4c:9c:06:e9:85:e7:2e:4f:af:e4:04:93:36:
                    73:c9:25:49:e2:d4:64:d8:fd:95:78:db:8b:63:1d:
                    eb:47:44:cf:75:14:56:e9:28:5f:63:a8:32:0b:b2:
                    a4:d1:8d:3e:33:28:2d:98:d1:0b:ff:54:c5:17:a3:
                    7d:22:0f:45:71:29:59:33:ca:eb:af:17:1d:3d:1a:
                    43:fa:34:a8:87:c1:25:ff:3f:78:0a:b7:6a:00:56:
                    5c:ec:1c:f9:1e:91:89:36:77:98:d9:17:46:59:bd:
                    a7:d0:73:c4:03:65:c8:fa:9e:ba:9e:0c:db:df:f1:
                    9d:a4:8b:15:97:71:c4:ce:84:b2:e1:8d:b6:31:1b:
                    f8:26:e1:27:2d:65:b1:83:1c:75:fd:3b:2e:85:83:
                    ac:d1:1f:86:1a:28:2e:f1:d5:56:9a:7a:63:94:80:
                    41:c0:bf:e0:d5:4b:3f:8f:44:2d:15:7c:0c:80:6c:
                    18:51:88:3a:52:38:d4:ea:55:70:f9:87:31:51:b2:
                    6b:92:84:01:16:34:0b:4a:d9:ba:24:d4:31:c5:9b:
                    dd:f9:6c:d3:25:3d:b8:5a:1f:ac:95:1a:d7:08:77:
                    9b:ee:c4:21:64:3e:c7:76:65:4b:aa:74:a9:74:96:
                    97:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:23:73:AB:B3:91:97:D7:70:D1:44:68:D5:64:1A:EE:9C:E5:37:57
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/34352e3138362e34312e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:84:97:f1:ca:fd:c5:42:85:b4:88:f5:47:2f:52:0f:5e:10:
         17:91:b8:f9:21:35:57:23:31:09:fd:c0:d8:1c:ea:65:31:64:
         c2:db:69:af:0d:26:ba:c1:c6:67:a6:bb:4f:ec:3d:58:fc:93:
         56:5e:71:74:6e:3f:bd:9c:91:20:af:40:a9:c0:fe:59:7e:3b:
         73:7a:8c:1e:34:a8:46:5f:29:aa:e0:99:92:e6:2d:83:e9:cc:
         73:e8:2e:fe:8c:5e:22:a2:b7:b4:9a:09:4e:be:0f:97:00:a2:
         00:ab:ec:16:b9:df:e1:05:ee:b0:a0:a2:a4:61:d7:26:dd:b1:
         a3:fa:e4:35:0b:1e:29:7f:12:96:4a:d2:63:6d:92:a9:5a:43:
         13:83:7b:3b:66:0a:4a:c3:2d:f8:e6:dd:74:94:11:98:4b:96:
         b2:8f:de:a8:c9:95:30:e5:32:c9:79:ed:77:13:81:cb:cc:37:
         47:e7:e1:f0:99:4f:95:3f:aa:23:10:a8:0e:d4:aa:23:ab:b5:
         24:53:0a:f2:1f:35:cc:c4:26:a7:8f:6b:86:4d:62:bd:34:dc:
         57:88:6f:d7:89:b8:53:e2:0a:df:45:7b:b1:85:14:98:c0:80:
         38:5a:ea:f4:5a:87:67:90:19:f0:b7:b0:22:36:86:92:f6:50:
         c8:0c:e6:f3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfD5yzI+LpX3QT/0+i2lNTsnP+OkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQwQzg4NUZFMzc4RkY5MEQzOUVBMjg3NUU5RjZFNTEz
RkRDRUFDQTAeFw0yNTAzMjQxMjUyMDRaFw0yNjAzMjMxMjU3MDRaMDMxMTAvBgNV
BAMTKDMzMjM3M0FCQjM5MTk3RDc3MEQxNDQ2OEQ1NjQxQUVFOUNFNTM3NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIhOWZPXumdnhDxwa0GLYTJwG
6YXnLk+v5ASTNnPJJUni1GTY/ZV424tjHetHRM91FFbpKF9jqDILsqTRjT4zKC2Y
0Qv/VMUXo30iD0VxKVkzyuuvFx09GkP6NKiHwSX/P3gKt2oAVlzsHPkekYk2d5jZ
F0ZZvafQc8QDZcj6nrqeDNvf8Z2kixWXccTOhLLhjbYxG/gm4SctZbGDHHX9Oy6F
g6zRH4YaKC7x1VaaemOUgEHAv+DVSz+PRC0VfAyAbBhRiDpSONTqVXD5hzFRsmuS
hAEWNAtK2bok1DHFm935bNMlPbhaH6yVGtcId5vuxCFkPsd2ZUuqdKl0lpfpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMyNzq7ORl9dw0URo1WQa7pzlN1cwHwYDVR0j
BBgwFoAUHQyIX+N4/5DTnqKHXp9uUT/c6sowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnlObVk2cW5pM0ZtTTVyU2htWDl3UWhSVlozTENXQjNNZHQ1ejJSQ05t
OEIvMS8xRDBDODg1RkUzNzhGRjkwRDM5RUEyODc1RTlGNkU1MTNGRENFQUNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFEMEM4ODVGRTM3OEZGOTBE
MzlFQTI4NzVFOUY2RTUxM0ZEQ0VBQ0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J5Tm1ZNnFuaTNGbU01clNobVg5d1FoUlZaM0xDV0IzTWR0NXoyUkNObThCLzEv
MzQzNTJlMzEzODM2MmUzNDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzUzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbopMA0GCSqGSIb3DQEBCwUAA4IBAQAKhJfxyv3F
QoW0iPVHL1IPXhAXkbj5ITVXIzEJ/cDYHOplMWTC22mvDSa6wcZnprtP7D1Y/JNW
XnF0bj+9nJEgr0CpwP5ZfjtzeoweNKhGXymq4JmS5i2D6cxz6C7+jF4iore0mglO
vg+XAKIAq+wWud/hBe6woKKkYdcm3bGj+uQ1Cx4pfxKWStJjbZKpWkMTg3s7ZgpK
wy345t10lBGYS5ayj96oyZUw5TLJee13E4HLzDdH5+HwmU+VP6ojEKgO1Kojq7Uk
UwryHzXMxCanj2uGTWK9NNxXiG/XibhT4grfRXuxhRSYwIA4Wur0WodnkBnwt7Ai
NoaS9lDIDObz
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:02:56 2025 by rpki-client