Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/34352e3137372e3234382e302f32332d3233203d3e20323733373734.roa
File:                     34352e3137372e3234382e302f32332d3233203d3e20323733373734.roa (raw, json)
Hash identifier:          X1Iaz9zL9U5Xpx6KmNqy3sSCABau3EcFsr2vgxojdA0=
Subject key identifier:   62:24:EF:E4:EB:E3:B9:23:38:54:A2:9E:FC:89:4C:44:E6:61:2A:C1
Certificate issuer:       /CN=C7304639F9F3AB50BA218929634A7AE49A8A9A0D
Certificate serial:       0871641AA4FD039E80E4C9BAE8D92E338B188E3D
Authority key identifier: C7:30:46:39:F9:F3:AB:50:BA:21:89:29:63:4A:7A:E4:9A:8A:9A:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/34352e3137372e3234382e302f32332d3233203d3e20323733373734.roa
Signing time:             Fri 13 Dec 2024 18:11:10 +0000
ROA not before:           Fri 13 Dec 2024 18:06:10 +0000
ROA not after:            Fri 12 Dec 2025 18:11:10 +0000
asID:                     273774
IP address blocks:        45.177.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.crl
                          rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:71:64:1a:a4:fd:03:9e:80:e4:c9:ba:e8:d9:2e:33:8b:18:8e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7304639F9F3AB50BA218929634A7AE49A8A9A0D
        Validity
            Not Before: Dec 13 18:06:10 2024 GMT
            Not After : Dec 12 18:11:10 2025 GMT
        Subject: CN=6224EFE4EBE3B9233854A29EFC894C44E6612AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:c4:da:2d:d0:38:a1:60:37:09:44:14:ab:
                    7e:d6:fd:0c:0f:14:21:56:05:22:81:83:75:b3:72:
                    9d:cb:20:12:d7:d3:b8:42:03:b6:5f:13:d1:58:40:
                    b8:4f:dc:9c:4c:83:61:6d:d0:45:3d:68:c5:d4:16:
                    f6:66:51:db:09:a6:98:db:b6:c5:a0:57:ac:1d:5a:
                    af:94:d3:3c:48:78:9d:13:d2:86:ff:01:ee:ac:0b:
                    d5:d8:fb:1e:b2:56:c2:6d:2d:48:fd:1d:b5:5e:c7:
                    4f:52:8b:22:e8:17:3a:53:d5:c8:74:20:b4:b3:e1:
                    2a:4d:93:92:4e:26:8e:b9:af:ff:af:f1:fa:12:73:
                    19:4a:d0:71:e6:03:fc:3f:3f:0d:5b:17:e8:2c:ce:
                    bd:f8:cb:ad:c3:1f:a8:c4:2a:8e:4a:b0:f1:5f:e1:
                    96:a5:b6:98:91:1e:ae:53:9b:29:30:f0:35:be:0f:
                    26:31:97:78:40:7f:3f:7a:48:34:96:68:63:1f:4b:
                    ce:93:b9:6f:c3:38:9b:a0:39:ac:21:3c:3d:36:73:
                    43:51:5a:a2:81:51:5c:72:bc:ff:6b:93:03:5d:32:
                    8d:72:67:51:e7:27:0d:d5:25:8b:c2:44:66:48:b5:
                    ac:4a:86:db:b3:6a:21:12:54:cf:9e:b9:59:a8:20:
                    d1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:24:EF:E4:EB:E3:B9:23:38:54:A2:9E:FC:89:4C:44:E6:61:2A:C1
            X509v3 Authority Key Identifier:
                keyid:C7:30:46:39:F9:F3:AB:50:BA:21:89:29:63:4A:7A:E4:9A:8A:9A:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/34352e3137372e3234382e302f32332d3233203d3e20323733373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:91:ad:e1:52:92:fd:8c:be:00:89:a8:45:2c:99:81:91:
         8a:47:12:95:95:55:1b:2b:dd:54:59:3f:9c:b5:6f:1d:6d:4f:
         8b:49:10:eb:0e:0e:8f:9f:15:33:f6:5f:85:c7:b3:87:f9:f3:
         08:e8:7b:b2:78:29:4b:3e:59:4b:9b:c2:65:44:75:d0:e0:0b:
         2b:06:3b:32:d6:90:ba:d4:c3:81:ce:48:21:97:34:29:3a:9e:
         0b:84:38:04:2f:81:a9:03:34:e7:3a:e6:fa:d7:51:65:1a:9d:
         60:7e:65:81:40:0d:bc:05:5e:9c:bd:f7:0f:d0:32:e8:45:1b:
         99:7e:8a:04:af:75:58:09:fa:c6:db:4c:33:9b:1a:4f:67:74:
         6e:14:e4:ae:67:94:6a:c2:d5:e0:f5:2c:1d:0e:8c:a2:a0:b8:
         cd:97:f3:fb:26:36:4b:f8:87:24:d7:9e:1f:2b:d4:71:33:c0:
         ab:25:34:8b:bb:69:4e:49:8f:d8:46:af:c7:65:ff:cd:ca:16:
         72:58:a5:0a:50:1a:56:92:17:3b:fd:5e:c0:9c:51:1c:b8:7d:
         a9:ca:1c:ab:d1:e9:15:c7:b0:db:1a:d8:36:88:0a:59:a8:ed:
         fc:9d:6a:f8:64:66:66:03:b4:0d:97:a9:7d:f8:e8:27:5d:73:
         80:07:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:06:36 2025 by rpki-client