Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e34382e302f32322d3232203d3e20323638373933.roa
File:                     34352e3137332e34382e302f32322d3232203d3e20323638373933.roa (raw, json)
Hash identifier:          dedz4cKUA4tg3K8EgL4CLz5Wqcn9eF+sqV4Z2qivTls=
Subject key identifier:   A2:18:B6:05:D3:51:A6:C9:11:83:E6:DF:48:22:0F:AB:48:81:D0:BD
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       64BB5E5708693C39DE49184E784A37144C30E5CA
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e34382e302f32322d3232203d3e20323638373933.roa
Signing time:             Tue 17 Dec 2024 12:47:32 +0000
ROA not before:           Tue 17 Dec 2024 12:42:32 +0000
ROA not after:            Tue 16 Dec 2025 12:47:32 +0000
asID:                     268793
IP address blocks:        45.173.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl
                          rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 02:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bb:5e:57:08:69:3c:39:de:49:18:4e:78:4a:37:14:4c:30:e5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Dec 17 12:42:32 2024 GMT
            Not After : Dec 16 12:47:32 2025 GMT
        Subject: CN=A218B605D351A6C91183E6DF48220FAB4881D0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bc:63:72:59:bc:8f:94:da:20:e6:fa:c6:4e:
                    11:20:0e:3d:5e:8b:d5:cc:2a:f5:a2:35:14:4c:56:
                    8c:3b:2c:27:a8:e8:ac:47:41:cb:53:b1:00:32:04:
                    2a:62:0b:d2:c7:b5:23:11:cd:7e:01:cd:99:07:50:
                    92:9d:db:1f:c8:52:1f:51:1f:55:26:cd:a3:a0:a0:
                    0e:6c:86:f8:32:84:6a:16:f7:ba:41:ae:b1:a0:87:
                    04:17:55:69:1d:fe:b6:a6:15:bb:cd:ef:27:8f:3d:
                    1a:a4:05:a0:72:af:38:d0:14:85:51:9c:0d:fb:ae:
                    1a:0f:4e:33:9f:f2:1a:3a:3c:8c:87:d9:37:dd:b1:
                    7f:90:c7:e0:9b:d5:24:93:7b:80:19:4b:05:80:46:
                    af:19:f9:02:85:48:4a:4c:35:74:c8:7d:83:8c:39:
                    32:a4:af:53:d1:76:ef:4e:c6:b6:18:0a:29:e5:80:
                    ba:8e:37:2c:bd:09:2b:60:dc:f1:10:bb:f1:36:79:
                    75:e9:69:ab:8b:58:bb:d3:98:90:43:30:df:59:11:
                    72:06:a4:4c:3a:da:78:8a:79:c3:41:55:8c:57:d6:
                    16:59:b7:b5:6f:8c:bd:f4:94:87:f3:a5:b6:5b:fc:
                    49:86:45:82:8b:1d:f6:23:e7:39:97:ab:48:b2:5a:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:18:B6:05:D3:51:A6:C9:11:83:E6:DF:48:22:0F:AB:48:81:D0:BD
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/34352e3137332e34382e302f32322d3232203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:62:eb:64:df:69:c3:e9:6e:f4:f4:18:a2:fa:6f:1f:ed:ce:
         bf:ea:b2:77:61:73:d0:74:a8:12:bf:17:47:1e:48:51:ee:c8:
         9b:09:0f:9c:a8:a9:5d:f0:64:1f:85:23:c5:b3:67:f1:ac:d4:
         79:8c:d6:56:74:b5:7d:3e:c0:ec:85:d3:18:79:90:94:52:36:
         3d:87:e3:17:dc:16:22:63:82:78:a5:c5:a2:6e:25:55:3f:21:
         9d:0f:7b:6a:cc:c4:c8:70:dd:12:94:87:ee:37:ca:fe:62:bf:
         f2:3f:12:b1:ed:6e:20:ae:6b:d4:4c:c3:3a:2b:8a:d7:27:96:
         cb:d0:de:20:84:3e:e9:4f:45:77:6e:56:52:5f:af:77:71:7b:
         16:6b:f4:10:61:d9:18:1b:b9:14:cb:32:f4:f7:a9:d1:30:7e:
         01:cd:96:a3:00:9e:bd:4f:50:d4:d6:7d:62:6b:e4:72:4e:f9:
         cc:29:a1:f9:58:98:5f:be:1f:91:3e:0e:c7:f4:6a:04:f6:d9:
         4d:48:8c:7e:50:bf:87:cc:1e:9d:aa:19:14:c0:c1:07:ff:bd:
         06:2e:d2:3a:9e:32:01:4f:16:4a:37:df:55:ae:91:b7:4c:32:
         6e:78:80:27:2a:30:41:d7:85:2d:60:c4:20:b7:91:14:f3:99:
         28:78:b4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:16:47 2025 by rpki-client