Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/34352e37302e3136342e302f32322d3234203d3e20323637353738.roa
File:                     34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (raw, json)
Hash identifier:          bgATyLhGQzrVoyhWXiawG0q8ugeWTjHILMnumMrO5hk=
Subject key identifier:   CF:19:1A:45:CB:94:7A:74:50:EF:F6:37:72:B1:15:90:C6:F1:D9:8D
Certificate issuer:       /CN=1AF8EF98196B4BF9759D4778A8E265C6E12D3314
Certificate serial:       3583D120533AC5F9611DB5B44CDC6DEAFB5ADF42
Authority key identifier: 1A:F8:EF:98:19:6B:4B:F9:75:9D:47:78:A8:E2:65:C6:E1:2D:33:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/34352e37302e3136342e302f32322d3234203d3e20323637353738.roa
Signing time:             Thu 27 Mar 2025 14:37:46 +0000
ROA not before:           Thu 27 Mar 2025 14:32:46 +0000
ROA not after:            Thu 26 Mar 2026 14:37:46 +0000
asID:                     267578
IP address blocks:        45.70.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.crl
                          rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 09:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:83:d1:20:53:3a:c5:f9:61:1d:b5:b4:4c:dc:6d:ea:fb:5a:df:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF8EF98196B4BF9759D4778A8E265C6E12D3314
        Validity
            Not Before: Mar 27 14:32:46 2025 GMT
            Not After : Mar 26 14:37:46 2026 GMT
        Subject: CN=CF191A45CB947A7450EFF63772B11590C6F1D98D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:5a:3d:f7:17:5f:19:5d:ab:87:60:88:71:
                    51:38:e0:1c:1e:f8:ae:2f:9f:dc:a2:78:28:1e:4d:
                    4d:85:db:e5:30:fe:77:bc:8e:ed:f8:d5:02:58:1b:
                    b9:4f:b4:0d:87:6a:82:ad:77:38:c6:c2:e9:91:83:
                    ee:67:ab:f1:41:84:87:18:46:d2:3d:cf:4f:a2:37:
                    22:6e:3c:11:ab:ad:dc:3b:22:4b:21:b8:b1:a2:e3:
                    30:74:b7:3e:6f:9c:11:22:0f:a1:e6:5a:3f:cc:8c:
                    ee:0c:09:0f:db:ca:d8:89:21:bd:6c:51:fb:24:ce:
                    23:67:23:d2:37:d1:c1:19:4d:bc:2c:a4:c2:e0:4a:
                    c8:85:bb:0d:f3:67:fd:cd:82:93:b6:af:a2:38:f3:
                    fb:33:37:71:79:24:44:32:a2:72:bb:59:e2:c8:e9:
                    29:27:12:14:5b:2e:47:bf:7d:c3:96:fc:e4:2b:9f:
                    c9:9f:2d:cb:29:e3:81:3c:02:5b:20:94:18:22:58:
                    5e:c8:e2:1f:43:78:76:4f:43:12:55:b9:75:c6:91:
                    62:7e:10:62:c2:3d:81:97:66:3f:3d:4a:48:38:08:
                    21:ea:2b:76:8d:e3:07:f0:25:0e:f1:eb:3f:d0:d7:
                    15:b9:49:5a:93:fc:65:18:6d:07:81:15:98:e6:8c:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:19:1A:45:CB:94:7A:74:50:EF:F6:37:72:B1:15:90:C6:F1:D9:8D
            X509v3 Authority Key Identifier:
                keyid:1A:F8:EF:98:19:6B:4B:F9:75:9D:47:78:A8:E2:65:C6:E1:2D:33:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/34352e37302e3136342e302f32322d3234203d3e20323637353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:d2:b0:1f:fc:d3:56:f1:e1:07:4b:42:63:7b:a0:49:e7:f7:
         7a:9f:ec:eb:96:50:ba:4a:37:9f:fd:a3:93:ab:c8:87:93:ac:
         47:85:4f:f6:8a:bb:e9:06:2f:f8:ca:40:99:b1:a9:2f:38:de:
         32:73:94:ed:40:85:9c:ac:02:1d:a7:f2:c8:6a:2f:8e:04:53:
         00:34:d9:e7:ca:51:17:fa:2d:7a:ed:b3:2a:78:17:48:e8:3a:
         c1:09:c5:cc:26:43:ae:4a:8d:de:5e:ee:9c:82:f8:9c:4a:32:
         14:8c:7c:bc:49:7f:2c:ff:98:a5:6e:65:ec:9b:47:ae:a5:8b:
         de:78:87:e0:80:38:35:88:42:a1:bb:50:a4:07:3a:c9:10:60:
         62:95:cf:49:c8:ef:0a:77:57:22:58:cb:a2:60:c9:9d:5b:32:
         92:67:49:97:fc:8b:92:40:c7:67:83:3f:68:11:2a:91:f6:a0:
         f5:3d:95:42:26:74:14:6e:c4:c3:3c:f2:79:c8:65:42:9f:d2:
         3f:4a:ca:3b:5a:a0:4d:1b:02:bb:8b:b1:c7:64:a6:d4:9d:79:
         3b:da:d9:f4:e4:71:8f:de:bd:14:92:da:f0:b5:4a:0d:00:a5:
         3d:c9:85:fd:99:22:6c:82:31:27:4c:31:12:e2:e3:7f:5a:a4:
         db:25:a2:07
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNYPRIFM6xflhHbW0TNxt6vta30IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFGOEVGOTgxOTZCNEJGOTc1OUQ0Nzc4QThFMjY1QzZF
MTJEMzMxNDAeFw0yNTAzMjcxNDMyNDZaFw0yNjAzMjYxNDM3NDZaMDMxMTAvBgNV
BAMTKENGMTkxQTQ1Q0I5NDdBNzQ1MEVGRjYzNzcyQjExNTkwQzZGMUQ5OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7AFo99xdfGV2rh2CIcVE44Bwe
+K4vn9yieCgeTU2F2+Uw/ne8ju341QJYG7lPtA2HaoKtdzjGwumRg+5nq/FBhIcY
RtI9z0+iNyJuPBGrrdw7IkshuLGi4zB0tz5vnBEiD6HmWj/MjO4MCQ/bytiJIb1s
UfskziNnI9I30cEZTbwspMLgSsiFuw3zZ/3NgpO2r6I48/szN3F5JEQyonK7WeLI
6SknEhRbLke/fcOW/OQrn8mfLcsp44E8AlsglBgiWF7I4h9DeHZPQxJVuXXGkWJ+
EGLCPYGXZj89Skg4CCHqK3aN4wfwJQ7x6z/Q1xW5SVqT/GUYbQeBFZjmjCyJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzxkaRcuUenRQ7/Y3crEVkMbx2Y0wHwYDVR0j
BBgwFoAUGvjvmBlrS/l1nUd4qOJlxuEtMxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1k4VWtnZ0NDQjJjYmNQaDZtcUhaVldlWTNXSllOVnJxdFVqZ1BCcUFt
WVQvMC8xQUY4RUY5ODE5NkI0QkY5NzU5RDQ3NzhBOEUyNjVDNkUxMkQzMzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRjhFRjk4MTk2QjRCRjk3
NTlENDc3OEE4RTI2NUM2RTEyRDMzMTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZOFVrZ2dDQ0IyY2JjUGg2bXFIWlZXZVkzV0pZTlZycXRVamdQQnFBbVlULzAv
MzQzNTJlMzczMDJlMzEzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzUzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUakMA0GCSqGSIb3DQEBCwUAA4IBAQCy0rAf/NNW
8eEHS0Jje6BJ5/d6n+zrllC6Sjef/aOTq8iHk6xHhU/2irvpBi/4ykCZsakvON4y
c5TtQIWcrAIdp/LIai+OBFMANNnnylEX+i167bMqeBdI6DrBCcXMJkOuSo3eXu6c
gvicSjIUjHy8SX8s/5ilbmXsm0eupYveeIfggDg1iEKhu1CkBzrJEGBilc9JyO8K
d1ciWMuiYMmdWzKSZ0mX/IuSQMdngz9oESqR9qD1PZVCJnQUbsTDPPJ5yGVCn9I/
Sso7WqBNGwK7i7HHZKbUnXk72tn05HGP3r0UktrwtUoNAKU9yYX9mSJsgjEnTDES
4uN/WqTbJaIH
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:26:43 2025 by rpki-client