Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131322e302f32332d3234203d3e20323637363537.roa
File:                     34352e3232342e3131322e302f32332d3234203d3e20323637363537.roa (raw, json)
Hash identifier:          Tx0FjievZ1fIALoALR+dZPiezsWqP+kaA3FYqPdlF7Y=
Subject key identifier:   78:75:E1:99:1C:45:80:EC:8A:C4:63:DB:AA:37:32:6A:8D:EB:01:C4
Certificate issuer:       /CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
Certificate serial:       55F65B8DF68F4753515C8EF0AC5CC8C652ADE2F3
Authority key identifier: 3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131322e302f32332d3234203d3e20323637363537.roa
Signing time:             Mon 17 Feb 2025 17:50:38 +0000
ROA not before:           Mon 17 Feb 2025 17:45:38 +0000
ROA not after:            Mon 16 Feb 2026 17:50:38 +0000
asID:                     267657
IP address blocks:        45.224.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl
                          rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 05:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f6:5b:8d:f6:8f:47:53:51:5c:8e:f0:ac:5c:c8:c6:52:ad:e2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
        Validity
            Not Before: Feb 17 17:45:38 2025 GMT
            Not After : Feb 16 17:50:38 2026 GMT
        Subject: CN=7875E1991C4580EC8AC463DBAA37326A8DEB01C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:5b:2a:79:5d:5d:18:a2:b5:a9:da:dc:e5:
                    39:4f:94:2f:81:da:88:be:c8:72:d6:f2:a9:59:69:
                    85:9e:62:f7:c7:3a:f6:8a:58:fd:49:d2:9b:02:f6:
                    d5:d2:09:05:26:71:ad:99:42:22:e8:cf:92:60:4a:
                    56:e8:8c:5d:3d:17:c7:55:69:91:53:73:c1:e5:20:
                    3b:65:b8:00:b1:6b:a4:8a:13:21:aa:bf:6c:91:3b:
                    3f:d9:c7:f4:57:c9:12:4e:34:1c:f4:96:64:a8:6b:
                    e5:d8:21:1d:50:30:b2:21:aa:ee:a0:12:1f:ed:e0:
                    3c:50:e9:84:9c:6f:4b:e4:b1:ff:88:10:48:ad:fc:
                    2c:d6:e3:43:29:d7:1c:83:26:b8:bf:a2:35:f3:fc:
                    00:56:0a:60:37:43:78:e9:9c:96:c7:36:90:e4:9b:
                    1b:fb:2a:82:f4:56:cd:65:4a:ca:1d:f0:a8:ba:86:
                    d4:e8:79:45:4a:2c:d8:14:62:d3:34:a8:16:4a:32:
                    40:cf:63:d4:b9:46:b7:7d:eb:c7:ba:dd:6c:16:db:
                    eb:e3:38:7f:78:3f:2a:ad:cf:54:5c:0e:97:62:c5:
                    4b:f6:7e:36:93:2e:83:fa:bf:97:5f:7d:e9:b5:1a:
                    f9:dc:4d:24:12:31:ed:3c:bf:8b:56:1d:5e:68:06:
                    eb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:75:E1:99:1C:45:80:EC:8A:C4:63:DB:AA:37:32:6A:8D:EB:01:C4
            X509v3 Authority Key Identifier:
                keyid:3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131322e302f32332d3234203d3e20323637363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:ab:c1:5d:85:dd:71:1d:0a:10:8f:ae:f7:4c:fc:cd:69:db:
         86:c3:13:b3:9f:09:f3:d2:a5:b1:d8:b3:97:57:b9:79:35:46:
         2d:a7:e1:fa:95:50:27:65:4c:37:15:98:d3:50:37:24:78:74:
         6b:0d:1f:17:4b:f9:2d:e1:29:8a:be:cc:54:15:a3:7b:d8:f7:
         46:80:26:29:56:48:0c:95:4b:ac:40:ad:87:f1:cc:7b:34:bf:
         a5:cb:59:5d:56:04:d3:d1:49:22:8e:5d:79:61:c0:40:c5:d7:
         34:1c:f1:b6:35:f5:e3:8e:de:6c:71:54:f6:b9:dd:ad:08:83:
         8f:17:f5:39:eb:0d:8d:ae:5b:f9:61:e2:10:ad:f6:6c:c0:cd:
         3c:9a:2e:03:6e:16:77:e7:55:de:8a:12:d5:9b:a2:57:57:bf:
         5e:66:b0:6b:83:80:a1:a4:31:1b:6e:66:0d:59:f9:49:e5:77:
         41:b1:d0:af:8a:40:e2:4f:68:4c:cc:df:66:1c:af:d7:68:f1:
         39:6d:0d:9a:7c:08:41:ba:d4:6e:ed:32:6e:a0:9e:98:67:74:
         de:be:97:fe:6a:10:87:f7:21:57:a3:02:9d:21:9e:b6:93:09:
         df:a5:83:88:87:f0:c4:01:f3:5b:07:0c:68:bc:8d:c5:5e:63:
         13:6e:df:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:56:43 2025 by rpki-client