Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/34352e3137312e39342e302f32332d3233203d3e20323638373035.roa
File:                     34352e3137312e39342e302f32332d3233203d3e20323638373035.roa (raw, json)
Hash identifier:          ZLoiFPyxlVvImTOd70rzYXkVJ9j7Jfxubbx7Syk1sE0=
Subject key identifier:   81:AF:C2:27:A2:B6:4D:F7:72:98:99:74:FE:63:31:75:EC:4E:B0:73
Certificate issuer:       /CN=AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F
Certificate serial:       4452522CFE719320EB2D996CF5163E77BE3A255F
Authority key identifier: AE:A3:33:C8:3A:BD:1B:AA:DB:6B:66:64:FF:34:C4:81:B4:3E:CA:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/34352e3137312e39342e302f32332d3233203d3e20323638373035.roa
Signing time:             Thu 30 Jan 2025 18:00:14 +0000
ROA not before:           Thu 30 Jan 2025 17:55:14 +0000
ROA not after:            Thu 29 Jan 2026 18:00:14 +0000
asID:                     268705
IP address blocks:        45.171.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.crl
                          rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:52:52:2c:fe:71:93:20:eb:2d:99:6c:f5:16:3e:77:be:3a:25:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F
        Validity
            Not Before: Jan 30 17:55:14 2025 GMT
            Not After : Jan 29 18:00:14 2026 GMT
        Subject: CN=81AFC227A2B64DF772989974FE633175EC4EB073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:d8:11:e1:6b:1e:d5:6e:3b:ef:aa:b8:c8:
                    25:6f:2d:d4:ba:74:be:83:ca:23:9a:73:b0:7f:29:
                    44:f6:5c:99:df:0d:5a:5f:94:f8:ff:b7:36:9d:2f:
                    39:e6:5a:3b:09:37:63:fe:a7:76:85:e4:80:ff:d6:
                    3e:1a:d0:83:86:7b:3f:3d:d4:67:f4:0c:3c:19:80:
                    8c:27:1b:a7:ee:f4:62:b8:21:0a:ae:88:0e:31:51:
                    7c:e1:c5:5e:d6:4a:a6:fe:ba:23:ad:b2:d8:f4:8a:
                    01:22:7c:3c:a4:61:ff:ae:6d:05:f5:2b:1a:e8:e3:
                    f8:3f:44:77:68:70:78:44:33:56:09:16:4d:63:18:
                    1e:0c:dd:1c:4b:8e:ae:eb:94:a2:b3:6c:70:3e:37:
                    25:1e:29:e3:e7:db:02:ca:ca:d4:62:96:a4:98:73:
                    9b:1a:3e:c9:8f:fa:46:f6:6c:bc:9e:2b:52:2b:a5:
                    e4:20:80:b6:f1:bb:1a:87:0d:59:36:7e:fb:99:c6:
                    07:bd:92:97:52:75:6a:11:65:e5:bb:38:67:9b:86:
                    8f:c5:5f:1e:f2:c5:74:89:15:f1:f5:9a:71:5c:27:
                    a0:e4:dd:5c:50:f1:3d:b4:f5:c0:0f:fc:86:2b:40:
                    65:8e:56:4f:ba:80:45:ff:b1:43:9d:3d:85:f5:99:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:C2:27:A2:B6:4D:F7:72:98:99:74:FE:63:31:75:EC:4E:B0:73
            X509v3 Authority Key Identifier:
                keyid:AE:A3:33:C8:3A:BD:1B:AA:DB:6B:66:64:FF:34:C4:81:B4:3E:CA:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/34352e3137312e39342e302f32332d3233203d3e20323638373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:dd:b0:f0:5d:a6:cf:2a:00:9a:ea:18:ba:ba:e1:de:3d:
         05:37:f9:85:4f:47:bc:23:62:57:7e:2c:1b:62:1b:33:fc:f0:
         8b:80:2a:6e:d9:09:d0:f3:14:1a:ea:7d:8b:d7:3e:e3:95:0b:
         18:d6:4e:d8:5f:aa:44:ce:28:1e:13:19:f6:9f:06:ed:ff:4b:
         aa:e5:61:dd:10:5b:98:b9:84:78:c5:c5:5a:23:34:11:75:28:
         9e:3b:16:f2:4d:91:ac:d5:52:ad:6e:a0:6b:46:00:3b:cd:35:
         e2:e8:c7:1b:0f:82:69:5c:4e:a7:f9:40:33:1e:58:81:2f:57:
         f8:ea:c9:e8:f2:c5:7d:9d:aa:90:75:4f:22:9f:24:e8:10:55:
         78:5b:73:78:39:c4:26:79:e2:88:b5:f6:86:fb:a5:94:0f:4b:
         0b:d0:80:5e:3a:17:28:d8:4a:fd:d2:cd:da:cd:5b:77:d7:b5:
         4f:79:d4:57:43:e7:ee:d4:30:45:f9:27:94:b4:9c:5f:1b:43:
         0d:c6:33:21:c3:09:3f:b5:97:98:7d:27:ed:99:64:9a:33:3e:
         e3:b6:2b:68:63:9c:04:ba:f9:a9:49:a8:83:58:25:cf:13:71:
         d0:4e:d7:9b:6d:4d:ef:ce:c7:74:a6:ba:16:99:b5:7c:e8:2a:
         70:a3:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:53:00 2025 by rpki-client