Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32332d3233203d3e20323639353636.roa
File:                     34352e3138382e382e302f32332d3233203d3e20323639353636.roa (raw, json)
Hash identifier:          rId5md6mw6dO7ucrZHB7JeXeGsZzO/MY1UMcRvOmZTk=
Subject key identifier:   C2:49:C8:29:C2:5F:A5:6D:B0:12:4A:64:00:8E:1F:26:0C:1A:4F:22
Certificate issuer:       /CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
Certificate serial:       52E8D926F32FD0781E9D82F4A30A35254954851D
Authority key identifier: 8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32332d3233203d3e20323639353636.roa
Signing time:             Thu 23 Jan 2025 12:24:47 +0000
ROA not before:           Thu 23 Jan 2025 12:19:47 +0000
ROA not after:            Thu 22 Jan 2026 12:24:47 +0000
asID:                     269566
IP address blocks:        45.188.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e8:d9:26:f3:2f:d0:78:1e:9d:82:f4:a3:0a:35:25:49:54:85:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
        Validity
            Not Before: Jan 23 12:19:47 2025 GMT
            Not After : Jan 22 12:24:47 2026 GMT
        Subject: CN=C249C829C25FA56DB0124A64008E1F260C1A4F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:40:2e:7a:8a:6d:04:1a:5e:41:6b:c1:e5:
                    56:4e:b4:df:f0:6a:e5:53:32:bc:6d:67:2d:7a:97:
                    22:f9:4f:e9:45:36:48:36:c7:f5:ea:d7:e2:1a:61:
                    d7:57:c4:2e:e6:fc:a4:3a:67:1a:be:5b:e5:e6:84:
                    05:1e:31:8b:f1:b6:d5:82:23:46:20:18:76:e4:64:
                    b6:39:94:70:02:c5:30:8c:04:7c:ab:31:4b:ba:25:
                    91:bf:8f:d1:c5:d8:fd:e5:44:2c:f8:4d:8d:d6:07:
                    07:d4:73:4a:29:ce:02:94:2a:1b:38:21:47:a0:97:
                    8c:47:ab:37:3a:e1:b8:f8:22:1a:20:db:5d:4f:4c:
                    93:bd:6d:0b:7e:3a:07:4d:50:99:f6:9a:77:88:7a:
                    66:ba:2e:cb:8e:3d:a7:5c:9a:0f:be:0a:da:3c:2a:
                    5f:6e:a8:0a:16:32:56:60:c1:b6:2b:25:7f:fb:a9:
                    0d:e0:c4:b4:a1:a8:ea:be:c5:d9:81:a5:b8:2c:bc:
                    81:2b:ee:8e:75:13:ad:81:80:89:83:fd:9e:cc:a0:
                    87:51:c2:64:0c:51:c9:b9:25:12:30:63:d2:b4:29:
                    12:14:bb:bf:a3:e3:52:a0:ff:86:ba:b1:e1:03:29:
                    60:71:fa:f8:49:f3:28:32:06:46:f9:51:48:09:4f:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:49:C8:29:C2:5F:A5:6D:B0:12:4A:64:00:8E:1F:26:0C:1A:4F:22
            X509v3 Authority Key Identifier:
                keyid:8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32332d3233203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:92:86:ca:08:2b:36:c3:21:23:af:bb:23:c2:e6:5f:80:5e:
         b6:ac:b5:0e:e1:e8:d0:c3:15:0c:4c:2e:a3:fc:47:66:ee:52:
         90:d4:31:27:82:b5:da:0c:9d:ce:a6:1c:54:9c:56:46:e9:be:
         67:db:53:4b:93:5a:8e:7b:08:23:9d:60:45:d8:0b:9b:1b:25:
         7e:f1:3f:28:48:69:9a:f4:52:d8:0d:80:8e:0b:69:d6:80:48:
         d0:e1:12:1a:46:70:d5:4d:89:42:53:ae:e7:e1:4b:2a:76:7e:
         c0:48:d7:25:cb:fe:76:d7:de:f2:44:65:b1:ac:a5:25:22:3c:
         24:4b:a8:65:2f:58:bf:2e:44:5c:8d:d0:f5:c1:ce:9d:15:95:
         ca:b5:59:3d:20:c5:cc:f0:2b:4a:7c:cb:6d:ec:a9:7b:9e:ea:
         73:33:1b:2a:6c:23:f6:4c:e5:ff:d5:38:68:45:56:4e:41:b3:
         26:1c:0c:43:49:95:e3:7e:bc:99:f9:0e:bd:4d:86:90:5a:14:
         9f:77:91:42:59:c8:e0:54:d3:82:dd:b9:f5:3f:c8:1c:6e:95:
         7f:8f:a1:b2:a2:da:1c:a8:ef:f0:da:a4:a0:b9:bf:6b:06:bb:
         07:0a:83:b6:d4:45:fd:09:ac:85:24:4f:a5:95:73:de:5e:fb:
         d9:8e:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:22:03 2025 by rpki-client