Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa
File:                     34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa (raw, json)
Hash identifier:          1S93ub7MdHQ8uhzm7ZiGoo+KTgVGZ3QqseCdQELK/Gc=
Subject key identifier:   C4:FF:D7:C2:8C:71:B8:7E:5C:A7:4B:6F:88:52:1B:69:1E:A9:3D:BE
Certificate issuer:       /CN=433BC56DE61BF5759F79705E437131F09597AF13
Certificate serial:       400A34A7EDEA88B0C1A8DCEB38614A2D04265053
Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa
Signing time:             Mon 31 Mar 2025 17:43:17 +0000
ROA not before:           Mon 31 Mar 2025 17:38:17 +0000
ROA not after:            Mon 30 Mar 2026 17:43:17 +0000
asID:                     269079
IP address blocks:        45.179.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
                          rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0a:34:a7:ed:ea:88:b0:c1:a8:dc:eb:38:61:4a:2d:04:26:50:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13
        Validity
            Not Before: Mar 31 17:38:17 2025 GMT
            Not After : Mar 30 17:43:17 2026 GMT
        Subject: CN=C4FFD7C28C71B87E5CA74B6F88521B691EA93DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:dd:b4:9e:eb:f6:51:e2:ea:b2:c5:ac:e0:
                    e3:11:60:31:d2:bd:79:0b:13:26:53:1c:d2:05:5d:
                    27:d6:3a:28:74:77:2e:83:ca:82:39:0a:6c:00:6a:
                    73:e2:cb:09:aa:93:d7:f9:84:64:1e:23:e4:0d:29:
                    69:8b:99:d8:c6:64:f6:63:f7:e4:33:b9:5b:41:93:
                    46:24:71:5f:dc:27:3d:3a:06:48:16:b3:8e:98:6e:
                    18:58:db:ac:7c:f5:de:fd:4f:9b:49:d9:d6:a9:15:
                    8a:12:f9:87:7f:0d:d7:bb:b1:23:a6:13:5e:9f:8a:
                    5b:d9:5d:75:c6:2c:83:2e:fb:6d:08:1a:29:b2:53:
                    9e:44:00:ad:2b:0e:90:79:bf:cc:08:f2:f9:ff:4c:
                    77:18:a1:34:99:d7:0e:38:7c:97:07:86:94:47:2a:
                    9e:cf:a0:f2:f3:f6:a0:12:92:bd:5b:cc:e4:ea:bc:
                    b1:70:69:9b:58:9d:e0:81:a3:e3:53:65:db:ef:d3:
                    c9:1a:83:29:30:21:a6:9d:a1:04:74:e3:2b:ec:1a:
                    36:cf:10:ff:53:42:0f:47:30:82:af:05:e1:0a:c1:
                    7a:0d:c4:17:0c:31:dc:62:96:4e:66:7a:52:31:47:
                    42:e7:ee:27:11:12:67:4c:a5:90:21:12:53:37:58:
                    a1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FF:D7:C2:8C:71:B8:7E:5C:A7:4B:6F:88:52:1B:69:1E:A9:3D:BE
            X509v3 Authority Key Identifier:
                keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:7d:df:9d:3e:03:d6:46:fa:28:8e:fe:05:ea:8b:24:75:8a:
         42:9f:af:60:ad:61:01:2c:a0:67:33:25:47:9b:aa:e7:fa:0c:
         c6:b5:bd:8d:75:89:d5:23:ec:65:de:48:44:8f:1f:2a:d7:83:
         1a:d5:60:5d:13:a9:2e:bc:48:ac:ca:8d:80:8c:79:55:62:22:
         e8:ec:b0:c7:ef:6b:01:64:f7:11:5e:63:f0:e2:62:40:ef:43:
         bf:a5:08:15:d6:b0:45:81:52:6c:fd:b8:7c:a2:75:0c:8e:d9:
         e4:c3:b8:b2:fa:91:e9:4b:71:0b:2d:ea:8e:c4:94:89:4b:ab:
         ae:55:ad:83:e8:02:19:6f:95:7d:5c:fa:2d:a7:f1:de:37:26:
         0c:ff:e7:93:12:69:31:ac:9c:a4:45:e2:16:c1:62:26:db:2f:
         3e:45:1c:39:94:68:7f:41:dc:b3:cb:2d:38:39:cc:79:ef:c9:
         28:7d:e2:9c:b5:d3:d7:37:7a:f8:71:b2:51:c3:39:d5:bf:d7:
         9f:4e:4f:3b:09:a5:3d:c0:9f:8d:fa:15:96:1d:8f:15:56:7d:
         ac:20:b8:e0:8b:e6:a9:e0:cd:63:c4:c8:91:76:ab:c4:e0:f9:
         9d:d5:27:48:3f:eb:0d:e7:ac:4e:2d:18:3c:b7:62:4e:a5:c3:
         f5:db:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:13:32 2025 by rpki-client