Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa
File:                     34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          P0zH4PM0p4SuhxF2KnFq4rADXb7V40mRPDOeZ6lYLEw=
Subject key identifier:   A2:05:13:7B:1C:66:67:3B:CA:54:AA:F6:F5:C0:93:7E:56:AE:97:20
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       70BE1D395B5545A54467E3135E8B8126608BF5EB
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa
Signing time:             Mon 08 Jul 2024 18:44:03 +0000
ROA not before:           Mon 08 Jul 2024 18:39:03 +0000
ROA not after:            Mon 07 Jul 2025 18:44:03 +0000
asID:                     266433
IP address blocks:        45.226.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 16:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:be:1d:39:5b:55:45:a5:44:67:e3:13:5e:8b:81:26:60:8b:f5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Jul  8 18:39:03 2024 GMT
            Not After : Jul  7 18:44:03 2025 GMT
        Subject: CN=A205137B1C66673BCA54AAF6F5C0937E56AE9720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:68:d3:77:70:7c:f6:ed:90:80:72:37:66:e0:
                    fe:d2:ec:61:12:7c:68:f0:de:e3:8a:45:3f:0d:b9:
                    db:b8:9b:87:0b:a7:1d:1b:aa:e4:56:8f:af:48:e2:
                    bc:a9:6f:aa:e8:7e:1a:6b:c1:83:b0:03:77:9f:3a:
                    e3:d4:4c:39:30:ee:69:a2:74:0d:51:18:6d:a5:f4:
                    9d:a6:db:b9:d1:19:df:d4:1a:d6:7c:f6:a3:5a:e5:
                    99:5f:f7:c1:b3:9b:ef:69:58:9b:dd:06:af:d0:fa:
                    77:4e:11:a6:46:b9:7c:5b:b7:46:d3:da:bb:98:2d:
                    25:6b:f1:b8:67:bb:27:6b:43:99:68:32:cb:33:f1:
                    96:09:2d:d7:db:ef:ce:63:8b:9b:2a:b6:cf:4d:bb:
                    71:c1:bb:9a:f5:c9:9b:57:a8:5a:3e:a8:f4:c9:11:
                    ac:4e:b6:62:f4:88:20:4f:53:b7:6b:2d:2a:87:51:
                    5f:82:52:bf:b2:37:30:5b:34:cb:12:11:f5:c9:35:
                    f8:d9:1b:df:5d:20:c6:30:20:88:8f:81:a5:28:18:
                    8e:e6:6a:39:14:22:2d:b8:7b:75:b6:50:51:e3:c2:
                    74:36:af:19:7a:cb:65:57:16:5c:20:3c:b3:f2:0b:
                    35:61:ba:d3:ab:23:6f:55:ca:0b:ae:45:97:b6:98:
                    50:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:05:13:7B:1C:66:67:3B:CA:54:AA:F6:F5:C0:93:7E:56:AE:97:20
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:df:47:f8:cb:71:d3:d8:b4:0f:03:e5:94:15:fb:bc:56:c5:
         41:a6:0c:ac:b2:92:07:c1:b0:e0:b8:9d:e6:da:73:b1:4e:43:
         9b:23:e5:b6:26:23:0b:07:57:20:e3:4e:23:33:4e:49:94:6f:
         7d:a3:15:f3:03:5a:a6:9a:74:48:d4:9b:82:7f:4b:ca:24:01:
         34:0c:e2:99:83:a4:b6:e3:d6:58:a1:59:30:85:c6:55:eb:bf:
         53:74:77:e7:49:e3:17:8f:71:b2:87:68:e0:b7:25:ed:10:2e:
         a9:79:7b:07:fb:19:70:c9:c4:ef:73:4d:f4:09:50:5b:83:53:
         d4:f1:75:f3:23:4b:ca:14:40:23:15:bf:d3:07:ad:ef:03:db:
         06:44:b3:a8:ce:09:db:5c:22:0a:89:44:16:24:d0:63:0a:56:
         f1:f7:3b:6e:43:29:4b:94:71:fd:05:4c:f6:13:d3:cc:63:94:
         34:27:0c:39:32:1e:3d:fa:18:a3:ef:9c:ae:62:55:87:20:67:
         5b:b5:af:d7:4d:48:1b:57:1c:e9:c5:86:0e:85:28:14:71:04:
         c1:7b:4a:4e:ea:1c:bb:51:17:69:6a:cc:49:e9:a7:21:0d:69:
         bc:9f:75:f3:f3:3a:a6:c4:10:c8:88:a4:06:f5:d0:0d:fe:67:
         94:d7:98:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:01:16 2025 by rpki-client