Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/34352e3137312e39352e302f32342d3234203d3e20323638373035.roa
File:                     34352e3137312e39352e302f32342d3234203d3e20323638373035.roa (raw, json)
Hash identifier:          gb+rI8xjxIavGyqa8Ls4HAj5OjokVhYf2ZkfNx84ZDs=
Subject key identifier:   24:70:7B:82:DA:BF:5E:7D:17:E2:8C:5D:82:E6:1F:98:9D:AA:7D:B1
Certificate issuer:       /CN=AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F
Certificate serial:       5F7122D3833D0394F5F9A433668ACC1CC83080C2
Authority key identifier: AE:A3:33:C8:3A:BD:1B:AA:DB:6B:66:64:FF:34:C4:81:B4:3E:CA:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/34352e3137312e39352e302f32342d3234203d3e20323638373035.roa
Signing time:             Thu 30 Jan 2025 18:00:13 +0000
ROA not before:           Thu 30 Jan 2025 17:55:13 +0000
ROA not after:            Thu 29 Jan 2026 18:00:13 +0000
asID:                     268705
IP address blocks:        45.171.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.crl
                          rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:71:22:d3:83:3d:03:94:f5:f9:a4:33:66:8a:cc:1c:c8:30:80:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F
        Validity
            Not Before: Jan 30 17:55:13 2025 GMT
            Not After : Jan 29 18:00:13 2026 GMT
        Subject: CN=24707B82DABF5E7D17E28C5D82E61F989DAA7DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:32:92:ac:45:32:f9:b8:50:ea:9e:f7:dc:
                    c2:b9:ca:4c:fb:25:33:a8:b0:54:bd:10:0e:d9:28:
                    30:45:75:4b:e7:17:c1:d3:f0:83:8d:a3:d5:c9:dd:
                    b1:49:63:e5:7f:cb:37:a6:dc:0b:18:19:da:7c:82:
                    20:40:06:36:3a:3b:df:44:50:fa:ba:fb:72:33:b0:
                    f6:7b:13:0a:95:47:d4:72:b8:e7:38:fb:d9:92:1a:
                    f8:f9:1a:83:35:02:21:2f:12:3f:eb:e5:28:ac:3e:
                    3b:e3:e2:e4:7d:54:eb:84:ff:9b:7d:7e:2a:1a:d1:
                    b6:02:ac:8f:26:74:1a:b5:02:8e:06:7a:63:d4:81:
                    a6:29:71:00:77:e2:7c:39:7e:33:3e:a3:18:8e:22:
                    85:17:e0:22:09:91:21:10:15:e6:6b:cd:a9:f6:6d:
                    e4:84:ef:88:9d:9d:49:6f:fd:3a:04:05:5b:64:96:
                    74:e6:81:28:40:bf:b4:5e:58:f0:ef:de:9d:31:bb:
                    1e:8c:ab:c1:07:86:8b:6c:60:50:f8:35:07:7c:f7:
                    07:eb:8d:f3:66:25:18:69:0e:0b:5a:d4:15:7f:84:
                    d7:82:d5:ea:97:ad:d5:07:7d:4f:f5:1a:f1:6d:26:
                    a4:e4:e3:7a:3f:82:70:78:83:a2:4a:1b:5f:05:0c:
                    7f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:70:7B:82:DA:BF:5E:7D:17:E2:8C:5D:82:E6:1F:98:9D:AA:7D:B1
            X509v3 Authority Key Identifier:
                keyid:AE:A3:33:C8:3A:BD:1B:AA:DB:6B:66:64:FF:34:C4:81:B4:3E:CA:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/34352e3137312e39352e302f32342d3234203d3e20323638373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:40:f3:04:ec:92:73:64:3c:a9:ef:c4:9a:df:ec:a0:fb:c6:
         e9:3f:24:40:31:03:a0:77:a0:3b:b0:e9:25:1f:03:9e:e2:18:
         d4:e5:69:cc:24:32:fe:31:5f:3e:dc:08:63:a0:69:84:53:30:
         da:b3:73:fd:92:30:c5:ab:a9:ae:41:3c:b7:48:8b:29:f7:22:
         d3:a4:a4:cb:d0:df:18:86:f1:c3:a6:17:b8:26:d4:3d:60:fd:
         d9:96:e5:2c:2b:e0:95:94:ee:25:20:10:fb:3b:94:8c:a3:e4:
         2e:e6:93:a4:38:45:5a:6f:17:cc:ab:5f:4a:8b:ec:c1:08:9d:
         92:c6:12:74:75:c8:a0:c7:29:e1:c5:8a:9f:0e:9e:3f:6f:05:
         1a:61:77:fa:1a:5e:33:48:15:29:d3:7e:74:91:58:2f:66:5d:
         99:05:77:1b:e8:dc:49:35:aa:b5:28:63:e6:6d:2b:5c:ab:54:
         ef:a3:4a:0b:71:7c:58:ae:7b:8f:72:e8:7b:ae:5d:19:89:84:
         05:33:f9:08:25:b4:d4:e0:69:a5:67:8e:c7:65:c2:51:43:b6:
         d5:e9:b8:8b:e8:9c:ad:fd:5a:f6:e9:d3:9d:34:d9:f0:c3:b9:
         10:1f:9e:36:66:af:d4:f9:fc:55:f1:d3:2a:e7:7b:88:d6:10:
         6c:00:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:00:38 2025 by rpki-client