Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37332e302f32342d3234203d3e20323637363638.roa
File:                     34352e3232342e37332e302f32342d3234203d3e20323637363638.roa (raw, json)
Hash identifier:          HJOYBm6pPhYGYnTMz9nzv3O6ll+qZKtVncEcbrhk69c=
Subject key identifier:   03:C4:70:A2:01:A1:85:4C:3E:E3:9F:DA:75:BC:C5:8C:C3:79:C4:46
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       3E6211CA48FC50820C15D0F8653E7BC4777201C1
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37332e302f32342d3234203d3e20323637363638.roa
Signing time:             Fri 28 Feb 2025 14:01:55 +0000
ROA not before:           Fri 28 Feb 2025 13:56:55 +0000
ROA not after:            Fri 27 Feb 2026 14:01:55 +0000
asID:                     267668
IP address blocks:        45.224.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 10:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:62:11:ca:48:fc:50:82:0c:15:d0:f8:65:3e:7b:c4:77:72:01:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Feb 28 13:56:55 2025 GMT
            Not After : Feb 27 14:01:55 2026 GMT
        Subject: CN=03C470A201A1854C3EE39FDA75BCC58CC379C446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:65:f4:5f:15:fb:4d:f2:2d:fc:1f:ff:d3:71:
                    19:42:a4:7a:3d:65:83:64:a5:21:db:58:36:45:79:
                    e7:9c:7f:cb:2a:b8:d8:c5:db:c8:51:f3:3d:e1:be:
                    e4:bc:06:77:a0:d5:3b:1b:16:1f:a5:f9:2b:11:92:
                    f1:92:ee:9c:76:72:ab:da:e2:ce:f5:1f:b0:12:30:
                    cb:02:03:54:b3:5c:71:3f:73:22:80:15:ca:d3:ba:
                    4e:fe:24:9f:81:d2:bb:ae:93:d2:72:04:2a:44:53:
                    93:5d:92:ce:b3:db:9f:6d:85:b2:20:c7:3f:fa:47:
                    d4:2d:cf:22:a5:a3:4b:62:6d:e6:da:00:eb:2b:47:
                    c6:ac:ad:5d:03:86:c5:cb:ed:44:4e:1d:08:37:cf:
                    17:29:6e:6f:a4:bb:6d:4f:22:7b:ac:68:62:42:ab:
                    2c:51:ad:ad:24:30:5d:fc:dc:5d:ce:46:72:bc:84:
                    28:b6:21:61:0f:9d:83:45:6c:c7:b3:37:fd:c4:48:
                    dd:92:a0:35:f4:f6:c8:10:65:4e:bf:14:9b:88:6b:
                    98:ed:91:a0:94:f2:0b:01:48:45:a5:01:a2:cc:22:
                    cd:78:6a:19:22:28:ab:d7:1a:02:b4:dd:50:7a:cf:
                    a3:cf:f4:4c:ca:ac:3c:7a:63:fb:2d:44:9b:05:86:
                    03:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C4:70:A2:01:A1:85:4C:3E:E3:9F:DA:75:BC:C5:8C:C3:79:C4:46
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37332e302f32342d3234203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:12:db:7d:88:4b:90:cf:54:2c:da:79:45:e9:c0:04:b4:2e:
         4a:3b:47:3d:00:a7:f0:a5:f8:a5:bb:0b:0d:dd:58:59:ef:ec:
         4c:ff:36:2b:e6:b9:f8:14:6b:86:ee:fd:43:24:26:3b:cd:7d:
         eb:40:ec:ac:4f:8a:fc:f1:ab:c7:86:b2:47:85:b8:7d:2e:d6:
         1f:28:9a:85:3a:a7:b4:76:75:ca:a7:46:42:79:83:fd:09:9a:
         9b:c7:32:a6:92:2f:a9:b5:c9:28:c2:08:39:67:21:39:28:06:
         43:9b:6c:a0:26:8a:52:97:c2:4c:ac:01:3a:bb:21:c3:0d:14:
         12:0d:12:42:e3:dd:c7:0e:e8:25:7e:4a:09:2c:b3:75:be:5a:
         2f:8f:ad:87:03:70:27:28:1c:72:10:0b:52:16:98:ff:cd:72:
         aa:4a:dc:ef:dd:40:76:3d:62:ac:c3:68:91:f2:ef:8a:ef:84:
         d1:ca:a7:6a:66:b4:02:f2:bd:72:75:f3:1c:11:77:bb:f7:35:
         d5:f1:08:6e:ad:f0:7f:a6:c0:f5:02:1f:35:ce:99:77:52:f6:
         ad:54:db:b7:46:a8:53:10:35:d0:5e:83:61:18:2a:37:24:6a:
         2b:f3:b7:a0:7b:54:f4:62:0d:7a:99:67:c3:57:1e:d8:f1:ab:
         f7:4a:eb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:18:45 2025 by rpki-client