Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/34352e37312e3130382e302f32322d3332203d3e20323637363134.roa
File:                     34352e37312e3130382e302f32322d3332203d3e20323637363134.roa (raw, json)
Hash identifier:          MOkoRt5zfAQuHeFoeqlqNg+U8tYEZ4z2kqif13gqSNs=
Subject key identifier:   61:36:D5:F3:19:AF:40:64:36:10:61:52:61:68:A2:A4:7D:B7:E1:2B
Certificate issuer:       /CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
Certificate serial:       77617959286693E5E0ECCC8A83876CFA1E6EA29D
Authority key identifier: FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/34352e37312e3130382e302f32322d3332203d3e20323637363134.roa
Signing time:             Sat 07 Dec 2024 15:39:19 +0000
ROA not before:           Sat 07 Dec 2024 15:34:19 +0000
ROA not after:            Sat 06 Dec 2025 15:39:19 +0000
asID:                     267614
IP address blocks:        45.71.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl
                          rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 02:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:61:79:59:28:66:93:e5:e0:ec:cc:8a:83:87:6c:fa:1e:6e:a2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
        Validity
            Not Before: Dec  7 15:34:19 2024 GMT
            Not After : Dec  6 15:39:19 2025 GMT
        Subject: CN=6136D5F319AF4064361061526168A2A47DB7E12B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:db:4f:b9:f4:9e:4b:09:60:8d:70:e5:c3:8b:
                    60:7b:a3:42:9a:4f:20:a8:bc:8b:ed:a3:e3:fa:cd:
                    79:f2:34:ac:2e:ca:b0:c8:c1:3e:c6:e5:e0:75:30:
                    c8:a6:ba:9e:b0:61:ec:e9:c5:ad:e4:e7:0f:9b:57:
                    c5:42:01:ef:f4:3e:35:00:f1:45:bd:39:3c:f8:6e:
                    a3:c8:9f:d8:ed:d3:b3:57:49:0a:c5:3d:ac:36:a4:
                    fa:a1:81:ed:7a:81:77:c5:db:6d:b1:8c:c3:31:c3:
                    90:a2:31:cd:ed:6f:8e:42:45:02:4e:53:45:98:b2:
                    69:c6:25:ee:14:02:9f:1d:8b:6f:1d:7b:ac:15:04:
                    30:40:30:6b:79:2e:12:a8:6b:f9:c8:9f:cf:ad:4b:
                    76:0e:c6:44:11:00:c5:28:ed:b5:3f:6d:10:a9:f7:
                    a6:6f:7d:ad:cd:08:7f:a2:49:3a:f7:05:09:e8:3b:
                    6b:29:b7:65:8e:04:6b:c0:d7:d5:ad:ba:c6:37:78:
                    c0:df:f7:71:09:9d:7c:7e:05:2e:8b:e3:ad:cc:33:
                    91:60:30:4e:e2:b9:b7:89:ee:fa:be:8c:56:cb:5d:
                    52:2c:d8:c8:b5:58:af:65:5d:cc:c2:96:ae:ec:31:
                    bd:e7:8b:66:0d:24:e7:0e:e0:53:ee:45:af:57:d4:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:36:D5:F3:19:AF:40:64:36:10:61:52:61:68:A2:A4:7D:B7:E1:2B
            X509v3 Authority Key Identifier:
                keyid:FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/34352e37312e3130382e302f32322d3332203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:94:37:55:75:a8:90:d3:5b:05:fb:ae:5b:29:1f:6a:bd:37:
         4f:72:2a:f0:47:ea:fa:87:15:c6:dc:a1:e9:c1:26:7f:b9:c8:
         0f:ce:34:2e:42:3b:1a:ab:83:67:f5:91:d0:e3:70:4c:63:ea:
         ba:0e:76:c7:32:a0:33:99:a5:a0:05:cc:f4:61:1f:60:d2:9a:
         de:a2:fc:6f:0f:7f:be:79:f1:39:49:95:fc:7c:e9:92:3c:08:
         03:26:b8:de:55:88:86:af:2c:3f:0a:e2:d4:02:5d:00:be:21:
         01:e5:a7:a1:e8:a0:87:7b:2e:0c:ca:2f:6e:86:95:a8:97:28:
         80:32:18:4f:3e:d6:52:af:f9:77:c2:44:6a:22:9e:5a:90:36:
         a5:57:fb:a6:02:60:53:4b:cd:54:57:1e:3c:6d:2d:0a:30:de:
         2d:10:0d:e1:32:d5:99:8c:a6:01:5f:dd:72:eb:7c:81:06:54:
         85:9c:37:e7:e2:39:20:db:3c:ec:1d:14:d8:a9:c5:45:e4:27:
         57:9e:eb:fd:c6:b3:00:7f:85:05:48:da:d4:e1:2d:2f:a4:e9:
         c7:ee:73:4a:0b:fa:eb:cf:85:c5:18:36:11:92:bd:99:89:dd:
         e4:9e:27:9d:d0:c3:6b:45:6a:2b:c1:de:62:87:47:e5:0d:04:
         60:cc:2e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:23 2025 by rpki-client