Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233322e302f32322d3234203d3e20323639303434.roa
File:                     34352e3137382e3233322e302f32322d3234203d3e20323639303434.roa (raw, json)
Hash identifier:          RyYITA7ZTIoSwnEr4uOxavaJI6meWWYygqqp4DJuHFE=
Subject key identifier:   CE:2E:F7:AB:3A:4D:56:73:F6:D2:01:D3:48:80:FE:B3:03:EE:FD:97
Certificate issuer:       /CN=DE51727C4914F4A53CB897FB087E719CD71D4196
Certificate serial:       12D971D8553541278C9538A4A4A1AF84BF97CB78
Authority key identifier: DE:51:72:7C:49:14:F4:A5:3C:B8:97:FB:08:7E:71:9C:D7:1D:41:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE51727C4914F4A53CB897FB087E719CD71D4196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233322e302f32322d3234203d3e20323639303434.roa
Signing time:             Thu 17 Apr 2025 12:31:59 +0000
ROA not before:           Thu 17 Apr 2025 12:26:59 +0000
ROA not after:            Thu 16 Apr 2026 12:31:59 +0000
asID:                     269044
IP address blocks:        45.178.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/DE51727C4914F4A53CB897FB087E719CD71D4196.crl
                          rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/DE51727C4914F4A53CB897FB087E719CD71D4196.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE51727C4914F4A53CB897FB087E719CD71D4196.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 09:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d9:71:d8:55:35:41:27:8c:95:38:a4:a4:a1:af:84:bf:97:cb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE51727C4914F4A53CB897FB087E719CD71D4196
        Validity
            Not Before: Apr 17 12:26:59 2025 GMT
            Not After : Apr 16 12:31:59 2026 GMT
        Subject: CN=CE2EF7AB3A4D5673F6D201D34880FEB303EEFD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:a7:f0:06:de:de:28:94:20:57:3b:db:97:
                    a0:26:48:78:54:1b:04:c0:e5:6b:10:e3:e4:b8:a1:
                    b7:5e:bc:77:d9:0c:8e:cd:d6:fe:01:fd:8d:bf:7a:
                    84:99:ca:16:14:84:89:22:f0:0f:92:ae:cd:73:ab:
                    9f:29:9f:c6:3e:b8:59:ce:1c:95:7c:19:09:07:2d:
                    fc:af:b4:ec:2d:e8:1e:be:f3:26:98:f3:9b:7c:c7:
                    b8:7a:64:6b:f1:42:42:53:de:24:74:9c:fd:aa:a8:
                    c7:74:4e:c9:9d:61:cf:34:16:1e:6f:c0:8a:3b:1b:
                    69:c0:0a:57:6c:3c:5c:fc:9d:34:d0:34:b6:1a:5d:
                    f8:82:b9:c1:12:12:6f:c4:b3:8a:c3:b8:27:67:a5:
                    a9:22:77:28:78:13:90:2e:21:c4:d4:50:39:0e:25:
                    19:94:ae:d3:e8:b3:25:ae:9c:fb:d7:92:12:6e:90:
                    5e:24:bd:df:ef:25:4d:66:7a:c3:65:a4:12:96:ae:
                    a9:ff:45:ed:59:38:74:7e:3e:6e:1d:3c:65:9b:19:
                    97:0d:d3:59:b8:0f:cb:96:7a:47:69:c4:c8:fc:f0:
                    f5:dd:28:6c:56:97:6b:aa:91:8b:f2:ac:96:80:57:
                    0d:fd:61:8f:66:91:62:5c:d4:86:c3:53:f8:86:b4:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2E:F7:AB:3A:4D:56:73:F6:D2:01:D3:48:80:FE:B3:03:EE:FD:97
            X509v3 Authority Key Identifier:
                keyid:DE:51:72:7C:49:14:F4:A5:3C:B8:97:FB:08:7E:71:9C:D7:1D:41:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/DE51727C4914F4A53CB897FB087E719CD71D4196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE51727C4914F4A53CB897FB087E719CD71D4196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233322e302f32322d3234203d3e20323639303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:7f:b4:ce:6b:a9:ca:4e:e1:4f:90:c7:e1:da:a7:b3:ef:bf:
         05:56:f3:e8:9a:87:59:14:65:0e:09:4e:bc:1d:8b:2f:cc:65:
         b2:16:90:38:b0:dd:50:34:d2:0c:f9:fc:e4:92:cc:a7:1c:dc:
         87:7f:55:b5:e3:2a:86:fa:7d:9e:06:2f:f2:c2:d5:55:3c:99:
         bf:01:bf:1e:80:78:15:0f:d8:2a:32:04:ba:c5:09:bf:f1:e7:
         c2:51:a9:af:1e:e4:d7:ca:1e:bd:e8:ba:82:6e:0f:f9:3f:61:
         79:83:9b:af:8e:c0:c4:e8:65:6a:6c:c5:8c:3f:6c:cb:ef:09:
         a9:dc:3d:d0:eb:07:5c:05:7f:d6:e4:a2:a4:b9:f7:f5:de:c4:
         4d:34:a0:bb:ef:aa:b5:54:f6:82:15:2f:b9:bf:13:0f:08:42:
         24:fa:05:4c:62:7b:b2:e1:74:cf:a8:ba:f2:cc:dc:39:13:7e:
         6e:71:c6:30:f2:5c:f7:c6:75:1a:31:8e:19:26:31:c3:e7:37:
         36:07:60:78:55:ee:f6:98:cb:65:9b:7f:8b:87:95:62:99:3f:
         d5:71:85:23:16:68:db:33:45:f5:56:b9:74:c2:76:a8:aa:78:
         47:58:e8:4d:43:97:0b:d8:40:68:f3:84:ec:3a:d9:e6:9f:d7:
         0f:4b:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:41:08 2025 by rpki-client