Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa
File:                     34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          U2eH9NqttfTafC3EBRQM8TEtkvvFsyjejY/7ctga6eE=
Subject key identifier:   6B:BB:5C:3E:2A:8B:BF:54:CF:7F:67:85:9E:FB:16:BB:2B:A3:6D:1C
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       3088B8440CF9153CF9CDC539CFA8FEECA8A0CAB1
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     262595
IP address blocks:        45.162.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:88:b8:44:0c:f9:15:3c:f9:cd:c5:39:cf:a8:fe:ec:a8:a0:ca:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=6BBB5C3E2A8BBF54CF7F67859EFB16BB2BA36D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:f9:63:98:70:20:1b:d8:2e:43:59:ac:c8:
                    36:14:60:7e:cf:e4:eb:16:b5:5b:27:5c:0f:aa:03:
                    25:be:bb:2b:92:22:d7:be:fa:e7:e3:d7:83:16:fe:
                    0c:08:bc:47:84:b9:8f:7b:38:cf:62:3e:40:bb:b7:
                    de:49:f7:13:60:22:42:ea:00:3d:06:c8:16:51:cc:
                    de:09:2b:69:56:e4:3c:ea:ad:4b:55:59:49:2e:d3:
                    1b:87:6a:59:e8:12:5c:ad:c0:00:c1:51:a4:45:84:
                    ba:e6:5a:1d:f0:b7:a9:16:cc:bd:7f:51:0d:b5:52:
                    67:aa:3e:73:33:72:33:51:8b:c3:1a:28:6c:cb:1c:
                    64:4f:f1:af:e1:fc:f0:2f:d8:20:3d:22:13:4f:55:
                    a4:46:fc:78:18:06:ea:3c:ff:ef:e8:44:d0:a3:6f:
                    ec:08:68:f1:97:08:8d:4a:5d:c0:16:7f:82:19:7a:
                    aa:c5:82:dc:5e:4b:c0:29:f3:dc:4d:e5:00:7b:b7:
                    41:40:3b:af:38:31:67:a7:c7:7b:7b:3e:5c:35:67:
                    f4:b5:3e:b7:8b:b2:be:9d:34:c8:45:56:a7:f7:44:
                    37:43:13:66:38:b4:e7:de:79:8a:3d:f7:5f:3b:b5:
                    bb:e2:18:3d:78:ee:14:ae:fe:89:d2:55:06:17:94:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BB:5C:3E:2A:8B:BF:54:CF:7F:67:85:9E:FB:16:BB:2B:A3:6D:1C
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:4c:dc:bb:1d:0f:2f:e6:8a:2e:cf:5e:19:9a:d9:20:72:f0:
         f3:87:70:ea:b3:84:ba:5d:76:2f:bb:f9:57:21:0a:5b:79:a0:
         b5:e8:c2:da:d0:e9:ac:af:99:3d:41:5a:df:03:6e:e3:74:e4:
         6c:3d:87:de:dc:a9:68:c1:de:9d:bf:cb:c1:b4:a1:cb:07:6b:
         65:96:07:5a:6d:4e:dc:47:25:52:45:90:26:dd:e1:b1:7b:8a:
         c4:f3:d9:db:46:7c:e7:c8:a9:24:e3:91:04:68:f6:9e:68:a7:
         94:54:5a:58:d6:b3:9e:90:65:c1:39:aa:2b:66:35:ca:69:90:
         53:ad:73:42:30:f7:ef:f8:9b:07:88:a1:60:61:07:74:a6:c5:
         a8:ad:64:ef:d7:88:01:7c:41:93:4b:5b:b6:02:aa:a7:0f:97:
         18:f1:f6:e9:81:52:ad:81:ae:09:1f:c7:1b:8a:52:29:49:3c:
         f6:0b:8c:c9:5e:88:0a:b5:48:df:1d:37:67:d4:5a:2c:7f:85:
         87:5c:d8:29:6a:ae:05:a8:63:84:6c:11:d5:c6:dc:6a:cf:45:
         0b:bc:24:84:fd:23:1c:a7:f2:22:ab:ee:73:7d:ee:cf:51:10:
         14:2f:a9:af:a3:e2:aa:7c:b6:c1:e7:45:84:4c:68:89:5e:fc:
         b6:d1:2b:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMIi4RAz5FTz5zcU5z6j+7KigyrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM3MTAwN0IzQjc3NzFDNkNGNEZCRTRBNzFCM0I5NDZC
ODQxQUQ2MzAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDZCQkI1QzNFMkE4QkJGNTRDRjdGNjc4NTlFRkIxNkJCMkJBMzZEMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFPljmHAgG9guQ1msyDYUYH7P
5OsWtVsnXA+qAyW+uyuSIte++ufj14MW/gwIvEeEuY97OM9iPkC7t95J9xNgIkLq
AD0GyBZRzN4JK2lW5DzqrUtVWUku0xuHalnoElytwADBUaRFhLrmWh3wt6kWzL1/
UQ21UmeqPnMzcjNRi8MaKGzLHGRP8a/h/PAv2CA9IhNPVaRG/HgYBuo8/+/oRNCj
b+wIaPGXCI1KXcAWf4IZeqrFgtxeS8Ap89xN5QB7t0FAO684MWenx3t7Plw1Z/S1
PreLsr6dNMhFVqf3RDdDE2Y4tOfeeYo99187tbviGD147hSu/onSVQYXlMUZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUa7tcPiqLv1TPf2eFnvsWuyujbRwwHwYDVR0j
BBgwFoAUQ3EAezt3ccbPT75KcbO5RrhBrWMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGVEY25nV1hudXF4R0s2b2ZVOVQxVjc1TnRvZERKckFFaE1EY1ZyemNo
NWcvMS80MzcxMDA3QjNCNzc3MUM2Q0Y0RkJFNEE3MUIzQjk0NkI4NDFBRDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNzEwMDdCM0I3NzcxQzZD
RjRGQkU0QTcxQjNCOTQ2Qjg0MUFENjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlRGNuZ1dYbnVxeEdLNm9mVTlUMVY3NU50b2RESnJBRWhNRGNWcnpjaDVnLzEv
MzQzNTJlMzEzNjMyMmUzMTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItorwwDQYJKoZIhvcNAQELBQADggEBAINM3Lsd
Dy/mii7PXhma2SBy8POHcOqzhLpddi+7+VchClt5oLXowtrQ6ayvmT1BWt8DbuN0
5Gw9h97cqWjB3p2/y8G0ocsHa2WWB1ptTtxHJVJFkCbd4bF7isTz2dtGfOfIqSTj
kQRo9p5op5RUWljWs56QZcE5qitmNcppkFOtc0Iw9+/4mweIoWBhB3SmxaitZO/X
iAF8QZNLW7YCqqcPlxjx9umBUq2BrgkfxxuKUilJPPYLjMleiAq1SN8dN2fUWix/
hYdc2ClqrgWoY4RsEdXG3GrPRQu8JIT9Ixyn8iKr7nN97s9REBQvqa+j4qp8tsHn
RYRMaIle/LbRK6Y=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:36 2025 by rpki-client