Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137372e302f32342d3234203d3e20323636393138.roa
File:                     34352e3232342e3137372e302f32342d3234203d3e20323636393138.roa (raw, json)
Hash identifier:          lPQs9DfHVt4MfgIPNmvdlfmpu+wozHBVPEzktIQvQfE=
Subject key identifier:   A8:2C:60:8A:08:F6:9D:D6:17:23:73:EF:59:E2:B0:21:02:72:64:48
Certificate issuer:       /CN=44E04535A0B2769897B15757A3419A5A38572BBA
Certificate serial:       4B74405C22BB8FAFDEB809A5EE6745501F2E78C4
Authority key identifier: 44:E0:45:35:A0:B2:76:98:97:B1:57:57:A3:41:9A:5A:38:57:2B:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E04535A0B2769897B15757A3419A5A38572BBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137372e302f32342d3234203d3e20323636393138.roa
Signing time:             Wed 15 Jan 2025 12:00:40 +0000
ROA not before:           Wed 15 Jan 2025 11:55:40 +0000
ROA not after:            Wed 14 Jan 2026 12:00:40 +0000
asID:                     266918
IP address blocks:        45.224.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/44E04535A0B2769897B15757A3419A5A38572BBA.crl
                          rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/44E04535A0B2769897B15757A3419A5A38572BBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E04535A0B2769897B15757A3419A5A38572BBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:74:40:5c:22:bb:8f:af:de:b8:09:a5:ee:67:45:50:1f:2e:78:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44E04535A0B2769897B15757A3419A5A38572BBA
        Validity
            Not Before: Jan 15 11:55:40 2025 GMT
            Not After : Jan 14 12:00:40 2026 GMT
        Subject: CN=A82C608A08F69DD6172373EF59E2B02102726448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:1f:df:92:11:a5:35:54:ef:74:7e:3d:d3:
                    32:fc:02:f1:0d:d2:b5:ff:92:1b:dd:ec:cf:87:50:
                    48:b3:e2:65:ae:e3:d3:9c:8b:65:6f:6b:f8:b1:c9:
                    ec:56:d6:c0:96:94:d1:f5:ce:b1:eb:aa:b1:9a:41:
                    8a:73:ce:30:4c:d5:69:76:56:5c:c0:43:b7:44:f1:
                    6d:d2:0c:d8:19:b8:3b:ed:87:35:92:07:fa:01:76:
                    f4:9f:8a:58:38:04:80:08:65:0a:b4:73:06:83:23:
                    ce:6b:ba:33:ce:19:e1:2b:ee:8b:03:f1:3a:5c:da:
                    58:7c:21:8d:3e:ee:98:b7:58:c0:fd:b0:24:ca:7b:
                    e6:89:83:15:a0:f6:de:f7:b3:1b:35:61:25:e3:5f:
                    df:c3:25:51:31:e2:79:cf:57:64:b6:1f:28:79:db:
                    ed:2b:ca:b2:9f:f3:27:54:47:6b:a9:5a:78:a9:68:
                    d3:20:54:d3:8e:c6:8c:77:80:54:be:09:b3:0e:40:
                    7e:f8:4b:ff:e3:fe:a3:44:fd:41:7d:c5:ed:ac:35:
                    26:ee:36:d6:9f:ab:ce:81:f0:47:42:a8:00:89:61:
                    b4:57:33:62:c8:af:3c:01:06:0c:42:32:af:d5:ef:
                    69:a8:c2:31:08:44:70:76:79:9b:28:98:b9:ea:a3:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2C:60:8A:08:F6:9D:D6:17:23:73:EF:59:E2:B0:21:02:72:64:48
            X509v3 Authority Key Identifier:
                keyid:44:E0:45:35:A0:B2:76:98:97:B1:57:57:A3:41:9A:5A:38:57:2B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/44E04535A0B2769897B15757A3419A5A38572BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E04535A0B2769897B15757A3419A5A38572BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137372e302f32342d3234203d3e20323636393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:4d:ba:42:32:3f:70:a5:a4:a6:03:1e:db:eb:fa:db:d3:05:
         21:c1:09:c8:8f:e3:aa:39:df:52:17:63:fc:9b:77:e5:ed:26:
         1d:dd:ac:0e:d9:bc:c5:bd:d6:0a:f1:a3:ae:a7:7d:29:ce:ad:
         c5:ab:d4:6c:f1:65:c5:4e:c6:5e:04:00:71:fe:e5:87:09:61:
         30:dc:8a:c5:46:d6:43:34:8c:ec:38:60:3d:69:fb:e5:58:65:
         64:04:47:38:1f:bc:4a:99:21:a6:c4:49:3b:c6:76:09:8b:88:
         ce:20:c3:3c:e0:a7:13:9a:3a:27:04:19:61:6d:c8:3a:8d:ff:
         b9:06:ac:86:ac:93:c6:b4:6f:2b:38:31:0b:f2:47:22:bc:60:
         0a:b9:aa:33:2a:09:16:51:82:fc:05:5a:7c:9a:ad:ad:49:4f:
         30:88:92:32:57:f6:06:65:0a:5e:3e:bd:74:01:5a:82:1a:7d:
         8d:31:65:81:f0:b6:f1:7a:6e:62:a7:db:c1:9b:11:8e:59:dd:
         70:e0:1b:f2:c9:da:73:e5:3b:55:bd:e3:85:39:98:3d:4b:67:
         3d:36:75:16:54:af:b9:27:f9:60:e6:a2:18:e7:39:99:b3:ae:
         20:d8:89:a7:b3:b2:ae:48:70:fd:1a:0c:d8:61:8e:89:ce:78:
         76:b3:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:39:37 2025 by rpki-client