Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/34352e372e3139342e302f32332d3234203d3e20323636363037.roa
File:                     34352e372e3139342e302f32332d3234203d3e20323636363037.roa (raw, json)
Hash identifier:          MLtKUnkMSVguc+dV+e2znv3RGMtTm8A32VVpcKd91/8=
Subject key identifier:   6E:91:28:1E:4D:9C:72:C6:DE:02:CF:47:7C:FA:C6:B3:36:7B:AB:BB
Certificate issuer:       /CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
Certificate serial:       56AA70AD08684FFC1E355DF9B97D85D632CFBBCD
Authority key identifier: 51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/34352e372e3139342e302f32332d3234203d3e20323636363037.roa
Signing time:             Wed 05 Mar 2025 22:06:12 +0000
ROA not before:           Wed 05 Mar 2025 22:01:12 +0000
ROA not after:            Wed 04 Mar 2026 22:06:12 +0000
asID:                     266607
IP address blocks:        45.7.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl
                          rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 01:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:aa:70:ad:08:68:4f:fc:1e:35:5d:f9:b9:7d:85:d6:32:cf:bb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
        Validity
            Not Before: Mar  5 22:01:12 2025 GMT
            Not After : Mar  4 22:06:12 2026 GMT
        Subject: CN=6E91281E4D9C72C6DE02CF477CFAC6B3367BABBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4b:ab:d9:43:43:6a:b5:79:0c:94:19:84:18:
                    0d:e4:29:46:ee:46:e7:c9:c9:9b:11:40:4c:8b:cc:
                    8f:4c:7e:9b:02:97:f6:3d:3e:97:1f:04:94:ed:e6:
                    b8:20:d1:f0:0d:36:7b:14:40:0c:c6:dd:c3:31:49:
                    71:65:19:c9:f8:7b:7b:8e:36:f6:f5:a5:c4:95:09:
                    28:3b:5d:15:06:6b:e0:f9:71:bd:9f:9d:f7:d6:7a:
                    43:ae:57:14:44:7d:f5:d6:06:2f:25:37:03:5b:af:
                    f4:27:89:2f:9a:17:29:0b:36:fd:13:cd:3b:31:53:
                    39:91:35:1c:ed:0a:f0:6f:5a:06:45:9a:da:a9:41:
                    72:cb:b1:8e:c9:bf:37:ac:f2:0f:e6:b0:b4:ab:df:
                    06:bf:26:73:82:80:1d:0f:5c:54:18:8e:89:49:cf:
                    7c:30:23:14:9c:f6:42:90:0c:2b:4f:63:0d:93:95:
                    3b:b8:64:00:9b:9f:0d:6f:c1:93:40:f2:5d:15:e2:
                    33:0a:81:27:27:d8:63:fc:55:73:93:17:04:a4:d1:
                    b2:08:f6:5b:b9:50:e9:fb:bf:3e:6b:af:cf:7d:52:
                    1f:85:e4:8a:18:7e:98:27:96:f0:1e:d9:6d:a0:f4:
                    4f:61:37:e8:d3:ce:d0:66:5c:f3:fe:f8:35:fe:cd:
                    2f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:91:28:1E:4D:9C:72:C6:DE:02:CF:47:7C:FA:C6:B3:36:7B:AB:BB
            X509v3 Authority Key Identifier:
                keyid:51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/34352e372e3139342e302f32332d3234203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:4f:a6:4c:ce:1e:e0:a8:ea:93:3d:fa:b9:e4:e3:50:4c:36:
         86:c1:d7:7c:b9:61:d7:b8:cc:ed:3e:56:5c:de:fa:bd:a0:fd:
         c3:f4:e4:f6:31:52:5d:60:5b:6c:2c:78:89:80:7d:85:db:6d:
         ae:f5:ad:0d:ad:a4:f4:82:b5:e3:69:98:21:6e:ce:16:c5:01:
         9f:75:55:3f:fb:7c:2b:d8:c2:8a:97:92:03:49:28:1f:84:ff:
         dc:cb:61:e8:ae:ac:24:67:4d:d7:42:77:77:21:85:f7:a6:7a:
         88:ad:1d:99:94:fa:7c:86:a0:b7:75:c6:64:78:e1:a3:89:e9:
         f3:68:e6:26:17:5c:e8:bc:67:4b:21:73:2b:b4:09:29:2d:96:
         99:d0:88:f4:e9:1e:15:72:f9:1d:8c:5b:28:4f:3e:3a:83:48:
         f3:4f:f9:a7:c2:17:8e:69:db:1d:37:ee:a4:bd:58:1b:12:27:
         61:06:ec:02:e5:aa:8c:df:8b:56:07:52:6c:38:15:26:bf:1c:
         05:f0:77:27:68:b1:51:fb:89:2c:0d:31:c1:98:dc:99:5d:40:
         93:70:08:88:d9:0d:9c:97:fc:c8:b8:6a:9e:a7:52:47:d5:35:
         6f:60:df:f2:fe:35:ad:c8:4a:2b:67:ac:67:32:25:3c:59:7d:
         60:b3:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:00 2025 by rpki-client