Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e3137372e3131322e302f32322d3234203d3e20323730383134.roa
File:                     34352e3137372e3131322e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          aPrk8Ek58PvAEO6YkrmGsIyqqqRMNyrqDreVK+qjuAo=
Subject key identifier:   F1:A7:A9:B1:13:8E:FE:01:59:29:7A:08:D0:E5:8F:0A:F4:8C:BC:EE
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       0553C0D422409B9F6EB185E970C4DE0B26B04C54
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e3137372e3131322e302f32322d3234203d3e20323730383134.roa
Signing time:             Mon 25 Nov 2024 16:53:21 +0000
ROA not before:           Mon 25 Nov 2024 16:48:21 +0000
ROA not after:            Mon 24 Nov 2025 16:53:21 +0000
asID:                     270814
IP address blocks:        45.177.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 23:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:53:c0:d4:22:40:9b:9f:6e:b1:85:e9:70:c4:de:0b:26:b0:4c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Nov 25 16:48:21 2024 GMT
            Not After : Nov 24 16:53:21 2025 GMT
        Subject: CN=F1A7A9B1138EFE0159297A08D0E58F0AF48CBCEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:82:cf:00:c1:bd:57:b0:f7:f9:ef:b9:10:e1:
                    51:e6:6b:c7:9b:3c:fc:10:49:d6:82:72:1a:60:b1:
                    aa:fa:39:5d:0f:6c:ef:72:a9:66:69:70:c9:b0:a9:
                    05:14:c1:e1:7d:dc:89:56:86:d6:70:2e:db:ff:f6:
                    78:03:3b:22:88:80:af:7e:37:a2:76:ba:d7:f2:41:
                    1d:3e:d5:cb:aa:cc:67:07:05:a8:6e:aa:95:50:8a:
                    d9:48:20:0a:9b:6e:d4:c5:6c:de:0c:3b:a7:e1:81:
                    d3:f3:49:39:81:e7:a3:4d:0f:f1:89:1f:d4:2c:d6:
                    ca:8b:2b:6c:73:e7:9f:72:76:d6:46:4e:3e:1d:9e:
                    56:9c:de:f3:73:4e:9b:62:46:f3:00:5e:ca:af:27:
                    25:bf:7b:6e:36:9b:7f:b5:73:ef:49:1f:c1:c5:35:
                    ff:44:35:f6:93:75:ce:3b:07:e5:ee:69:d3:ba:cc:
                    a4:5f:53:01:0d:e6:a2:1a:4f:03:13:a1:79:0d:e4:
                    30:3d:82:73:db:97:7b:70:33:b4:19:6b:66:3f:0b:
                    1d:59:1b:61:bc:e4:06:ac:52:df:05:0a:fa:66:78:
                    48:92:58:d3:b9:c0:e2:e8:e6:f4:5c:cf:d2:56:75:
                    12:39:00:a1:eb:3b:ee:9f:ab:88:c7:d5:3f:15:70:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A7:A9:B1:13:8E:FE:01:59:29:7A:08:D0:E5:8F:0A:F4:8C:BC:EE
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e3137372e3131322e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:9e:6a:0f:d1:30:d2:ac:f6:2b:ce:19:b4:5f:e1:45:43:37:
         da:93:bb:5f:4f:c1:64:5a:1c:bb:bf:81:b4:b8:7e:89:d5:fd:
         4d:95:9d:e4:9e:bc:85:43:3d:d0:cb:ca:65:1c:d6:bd:28:42:
         86:e3:f8:ed:8f:11:1b:12:34:4a:1e:5e:da:a5:cc:b1:75:54:
         31:1a:f3:9d:87:6b:9d:53:ff:2c:2c:87:02:18:1a:21:bc:af:
         21:ef:cb:a2:b7:68:83:c9:88:fd:c0:b0:62:5c:ee:59:e5:43:
         06:fe:c4:69:7e:77:79:55:d6:27:1d:79:ed:df:8c:96:c6:15:
         a2:47:59:88:ad:29:29:2d:fb:12:5b:5c:b1:7d:49:34:46:bc:
         da:c0:e6:63:4a:99:34:8d:db:5b:59:37:49:9e:53:98:cb:1a:
         5e:08:36:df:49:de:12:61:96:9b:4e:c6:fa:ee:25:6c:84:fb:
         2b:57:47:b8:48:fd:ac:34:24:30:35:79:26:b8:e0:cd:d3:e5:
         e9:82:ed:44:b1:b7:ef:7f:79:94:f4:50:ac:2b:d5:1d:a3:c7:
         ff:4a:62:4e:92:86:92:3b:09:ec:6d:6d:cd:f6:37:9d:f6:27:
         11:cb:f6:4f:2b:ed:f2:de:ad:7c:0f:ec:d7:32:34:00:cb:35:
         1e:ad:2f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:40 2025 by rpki-client