Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37332e302f32342d3234203d3e20323639353137.roa
File:                     34352e3138382e37332e302f32342d3234203d3e20323639353137.roa (raw, json)
Hash identifier:          gqKAxU1UUtbUX4VTis4HZGDExefVew/1awjW4d7hJ30=
Subject key identifier:   97:C6:F0:27:54:6D:8C:3B:44:AA:B9:50:DB:95:C8:88:9D:A9:89:C6
Certificate issuer:       /CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
Certificate serial:       698E7ED1B945EFA84B0EA62136F04E018DF9CD88
Authority key identifier: F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37332e302f32342d3234203d3e20323639353137.roa
Signing time:             Sun 16 Feb 2025 13:29:16 +0000
ROA not before:           Sun 16 Feb 2025 13:24:16 +0000
ROA not after:            Sun 15 Feb 2026 13:29:16 +0000
asID:                     269517
IP address blocks:        45.188.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl
                          rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 14:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8e:7e:d1:b9:45:ef:a8:4b:0e:a6:21:36:f0:4e:01:8d:f9:cd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
        Validity
            Not Before: Feb 16 13:24:16 2025 GMT
            Not After : Feb 15 13:29:16 2026 GMT
        Subject: CN=97C6F027546D8C3B44AAB950DB95C8889DA989C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:ad:9c:c8:46:c6:90:3f:07:f3:1e:0f:39:
                    c2:2e:a4:49:3d:f2:f9:7a:65:45:65:35:5f:fe:ee:
                    ac:81:7d:ad:ec:e9:de:fa:2f:01:09:73:91:37:f3:
                    1c:66:b7:e1:d7:9a:98:28:4b:00:bf:fa:9c:07:1f:
                    ff:a3:8d:41:f9:10:7c:de:59:86:b8:f9:c3:b8:56:
                    62:f1:a6:ce:96:ae:e1:72:41:ef:e8:06:ee:ce:b1:
                    a4:3f:e4:93:64:cf:26:00:53:f2:59:77:3f:79:5a:
                    3a:61:69:6c:55:64:c3:e0:c9:39:c6:b6:77:b0:ad:
                    0e:5a:6f:38:a2:cd:52:0e:c1:d4:0b:10:f4:57:56:
                    45:79:bf:90:12:4f:7b:3b:b3:4e:9c:43:a4:30:ba:
                    ed:89:96:4b:4d:18:b7:74:6d:6d:45:10:39:f3:2f:
                    b8:47:8c:65:99:bb:1b:21:0f:05:69:81:59:1d:d0:
                    1f:da:db:f1:95:2e:92:fb:71:12:80:5b:71:a3:bf:
                    78:0e:54:ce:75:44:03:5a:23:90:df:12:b4:83:b8:
                    0d:f6:2e:69:9a:fe:dd:05:94:2f:ec:2b:55:56:da:
                    fd:49:a8:8e:5f:dd:25:ae:b0:f2:cd:2e:0c:48:20:
                    a7:b7:33:43:08:35:ad:5b:b5:ba:96:0a:56:09:14:
                    28:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C6:F0:27:54:6D:8C:3B:44:AA:B9:50:DB:95:C8:88:9D:A9:89:C6
            X509v3 Authority Key Identifier:
                keyid:F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37332e302f32342d3234203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:01:e1:e5:b7:dd:0b:f2:68:57:34:7f:4d:5e:8a:1f:f3:5e:
         36:47:e8:ba:0c:d1:05:2d:e4:ce:ff:e4:eb:02:e0:a7:64:5c:
         6d:c1:ff:08:54:ab:b0:2f:54:1b:fd:e2:1c:ee:61:b0:a6:0d:
         ea:93:2f:ac:33:13:03:d9:52:85:55:66:f1:c8:96:52:af:e7:
         21:e1:14:4f:5d:f3:a8:6c:88:75:99:4b:b2:6b:30:b8:a8:eb:
         f5:9e:f9:59:82:c8:80:be:d1:5c:34:25:cf:0e:33:0b:e5:ad:
         f0:43:5d:2b:83:a4:b4:4d:60:7a:03:52:99:15:4d:4f:61:8a:
         3d:08:80:7a:e6:0a:1a:11:43:c4:8f:5d:34:23:a3:21:08:5e:
         18:05:c8:6e:63:d1:1f:71:76:a8:1a:f2:74:d8:8e:35:23:80:
         4b:a8:72:6a:19:07:81:05:f5:e3:2c:72:d0:58:59:9f:17:7e:
         22:2a:7b:a8:39:b7:4c:a3:15:e4:2c:47:b9:8c:da:e7:43:32:
         30:04:da:b2:69:5e:ec:e9:af:f7:e0:83:7b:b1:38:f2:77:48:
         52:a0:ae:92:11:3c:40:ed:d1:38:de:cb:1a:95:7b:c5:cf:5f:
         57:5b:01:f6:02:2f:d4:fb:b9:93:62:d2:1e:eb:0d:0e:e4:9a:
         0e:70:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:49:55 2025 by rpki-client