Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131342e302f32332d3233203d3e20323637363537.roa
File:                     34352e3232342e3131342e302f32332d3233203d3e20323637363537.roa (raw, json)
Hash identifier:          ufX0QnRDG9Qtm6AUOnyqKnDEdXFfSqBv9A8zdNqIPhI=
Subject key identifier:   17:3E:A7:6C:E1:33:40:13:AE:C2:2F:2E:86:74:7F:0C:DB:9B:A8:99
Certificate issuer:       /CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
Certificate serial:       36A00D7DB13B5436E7B01C2148F2679F17DC077A
Authority key identifier: 3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131342e302f32332d3233203d3e20323637363537.roa
Signing time:             Mon 17 Feb 2025 17:40:14 +0000
ROA not before:           Mon 17 Feb 2025 17:35:14 +0000
ROA not after:            Mon 16 Feb 2026 17:40:14 +0000
asID:                     267657
IP address blocks:        45.224.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl
                          rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 03:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a0:0d:7d:b1:3b:54:36:e7:b0:1c:21:48:f2:67:9f:17:dc:07:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
        Validity
            Not Before: Feb 17 17:35:14 2025 GMT
            Not After : Feb 16 17:40:14 2026 GMT
        Subject: CN=173EA76CE1334013AEC22F2E86747F0CDB9BA899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:6f:d3:90:a8:0e:ac:b4:95:a7:4b:58:c8:
                    0c:e2:63:bc:6f:72:93:d0:df:08:b2:fd:b3:c7:a0:
                    d9:2f:e4:b8:20:27:ae:a3:99:0b:40:4b:a8:8a:ac:
                    1a:c2:b8:23:71:8e:35:df:8c:7c:8e:29:c3:0a:ef:
                    ce:28:1a:07:7f:3c:00:1b:cb:da:4e:5a:f3:74:d7:
                    32:e7:d3:2b:dc:d8:32:7e:71:c7:10:35:ee:82:4b:
                    30:dc:8a:a1:21:17:3b:f0:e8:95:76:5f:62:a2:58:
                    32:fa:63:f2:42:6a:d6:25:a4:54:53:94:8b:19:c3:
                    d3:6c:79:2f:7d:4c:f4:cb:76:e9:66:44:4b:f7:9d:
                    d4:1f:73:06:75:cb:a3:18:08:4a:8f:01:90:24:d8:
                    c5:73:15:26:66:69:13:f9:47:2d:37:5f:0b:32:c3:
                    81:3a:ef:39:6b:3a:65:10:a3:0c:6f:85:c9:4a:43:
                    84:18:51:35:5c:c9:b6:62:46:bc:96:9d:e2:d0:e0:
                    c5:df:cb:31:ea:fa:c4:f6:f1:fb:2f:a0:d0:54:42:
                    d8:8c:ad:d7:8a:a9:7d:f7:c4:6f:da:f4:68:67:d3:
                    15:32:e8:4b:f7:1a:4d:42:82:7a:9c:ca:32:51:36:
                    a5:36:34:5f:bc:2b:c5:b1:58:89:ca:1c:d1:3a:32:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3E:A7:6C:E1:33:40:13:AE:C2:2F:2E:86:74:7F:0C:DB:9B:A8:99
            X509v3 Authority Key Identifier:
                keyid:3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/34352e3232342e3131342e302f32332d3233203d3e20323637363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:bc:6a:57:a0:ca:b4:85:26:75:35:89:53:2a:0a:68:c0:20:
         ab:e9:66:f1:4f:80:22:dc:a9:b6:c0:df:0a:1b:2d:70:52:81:
         39:dc:28:7d:5e:b1:20:c1:50:f7:2b:64:3b:cd:76:b3:a6:05:
         a0:03:c0:fa:4c:6a:16:2c:ab:88:a7:20:a5:e4:aa:55:3b:78:
         06:0e:fb:13:b9:e7:a4:cc:6b:45:a9:a1:d4:e3:69:30:e9:37:
         9a:a6:c4:b7:2a:38:9d:b1:55:5f:9a:4b:50:40:b6:a3:59:ae:
         b6:e4:4e:e1:da:9b:d5:30:4e:07:9c:30:ed:d3:fb:14:97:c1:
         2f:7f:44:85:91:76:18:75:82:1a:11:ed:82:32:67:ef:61:ec:
         cd:17:12:a2:df:91:5c:5e:2a:fe:78:94:72:ad:09:2a:4a:ef:
         82:09:f7:28:19:df:c8:ef:7b:20:27:b4:9c:32:50:9c:d1:51:
         1a:5b:db:c3:44:af:86:08:c2:98:97:c5:a0:d4:2e:78:82:8f:
         fb:82:d2:9e:58:60:d3:31:70:d3:e4:c0:fc:04:6e:96:1f:34:
         b4:c5:ad:02:e7:c9:56:7b:ef:f9:28:4b:81:44:e2:43:42:c6:
         4a:80:bd:1f:4f:4d:57:25:cc:7a:95:a8:b6:a6:ce:fc:ff:a8:
         c0:a9:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:49:26 2025 by rpki-client