Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/34352e3137312e39322e302f32322d3232203d3e20323638373035.roa
File:                     34352e3137312e39322e302f32322d3232203d3e20323638373035.roa (raw, json)
Hash identifier:          AnGUkAsyygvQq3QIQaQOW/mvny94MtUW3TZrXQt2dY0=
Subject key identifier:   C0:57:9E:33:05:35:48:6F:A4:BC:47:E7:58:99:7B:9A:3F:2D:7F:05
Certificate issuer:       /CN=AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F
Certificate serial:       78685C3E8629E9B9AD68ACC4D49141CA0ED8D28D
Authority key identifier: AE:A3:33:C8:3A:BD:1B:AA:DB:6B:66:64:FF:34:C4:81:B4:3E:CA:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/34352e3137312e39322e302f32322d3232203d3e20323638373035.roa
Signing time:             Thu 30 Jan 2025 18:00:15 +0000
ROA not before:           Thu 30 Jan 2025 17:55:15 +0000
ROA not after:            Thu 29 Jan 2026 18:00:15 +0000
asID:                     268705
IP address blocks:        45.171.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.crl
                          rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:68:5c:3e:86:29:e9:b9:ad:68:ac:c4:d4:91:41:ca:0e:d8:d2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F
        Validity
            Not Before: Jan 30 17:55:15 2025 GMT
            Not After : Jan 29 18:00:15 2026 GMT
        Subject: CN=C0579E330535486FA4BC47E758997B9A3F2D7F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:69:94:98:8f:b1:a1:47:10:a8:d2:e0:2d:
                    4b:35:c3:b6:5e:a8:23:88:c8:5a:74:49:d7:10:85:
                    89:72:78:f4:70:5c:10:3f:d8:35:1a:fd:39:13:5f:
                    67:57:87:5f:95:3e:58:5c:c3:fa:fa:d8:c2:a9:da:
                    68:6c:92:b6:ef:2c:79:0b:0d:f9:c5:44:9f:58:a1:
                    2c:70:8d:43:f7:15:b4:54:2e:9b:90:6a:78:a4:fe:
                    e1:e7:42:bc:31:9a:c0:73:78:f4:79:1f:34:da:60:
                    64:a0:58:18:78:58:6b:c5:be:c2:47:86:b7:e8:e5:
                    81:7b:2d:92:8f:17:2b:06:65:13:f2:86:be:a7:bf:
                    e1:d4:2a:e7:02:01:6a:d0:a0:32:e8:63:5a:d8:aa:
                    75:b9:d9:88:a1:0b:2e:28:d5:26:be:f5:87:70:1f:
                    b8:11:f0:d3:76:83:ab:22:6b:9c:72:08:07:59:a1:
                    b9:f4:17:e0:83:c6:ee:9a:15:b8:b4:2d:48:ae:d2:
                    f1:a6:46:30:f7:c9:0e:db:d7:ab:d8:8c:38:f9:fb:
                    25:90:eb:b2:83:66:dd:33:2c:c6:82:c3:6b:ec:92:
                    d8:d6:98:32:43:61:87:6f:b9:f7:54:af:c2:84:da:
                    8d:14:54:b9:c0:b2:a5:fd:ad:d4:b9:e2:48:8c:f4:
                    9c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:57:9E:33:05:35:48:6F:A4:BC:47:E7:58:99:7B:9A:3F:2D:7F:05
            X509v3 Authority Key Identifier:
                keyid:AE:A3:33:C8:3A:BD:1B:AA:DB:6B:66:64:FF:34:C4:81:B4:3E:CA:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/34352e3137312e39322e302f32322d3232203d3e20323638373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:2d:aa:f4:5b:66:60:39:7b:b1:ae:1e:53:ef:80:95:7b:fa:
         cc:11:6e:13:68:93:c2:d4:85:06:1a:9e:ee:3f:9b:62:4f:c1:
         90:60:05:7d:9c:66:5b:7c:2a:c1:b9:01:6a:da:c4:f6:e4:0b:
         43:0b:bc:bc:e0:8f:d2:b8:f5:10:60:e2:ff:18:a5:85:b6:64:
         31:fc:b8:f7:7d:5d:be:38:5f:99:00:59:bb:1d:df:1f:27:ed:
         46:62:ab:86:71:bd:9b:4f:b3:9a:66:41:3d:79:dd:f0:b6:09:
         83:cb:79:5b:37:3e:6c:49:8b:3e:53:f1:b9:4a:68:2d:72:49:
         95:22:9c:51:bd:42:36:e5:76:4a:5e:57:fa:b4:88:79:d9:cb:
         52:c0:58:da:70:81:10:eb:c3:1d:ee:e2:b3:1d:e7:2b:a6:bc:
         8d:85:30:c9:d3:19:be:03:f9:8f:71:5a:76:6b:38:1b:83:65:
         eb:de:2c:d5:30:0a:93:89:cf:d6:24:85:8e:46:c2:43:44:39:
         07:d2:38:a2:09:5a:fd:37:a3:53:e1:d8:fd:3e:ec:ba:73:12:
         68:b4:1b:d6:8e:ae:22:62:a9:27:82:08:ff:ec:3b:f0:86:30:
         e3:db:74:ce:89:29:8d:36:0c:aa:b9:ab:62:f1:39:61:f2:c8:
         b1:b8:2c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:58:02 2025 by rpki-client