Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpB5xHC61vLncE6AP4djcYh21LR6YwwqwMF2Yam4F27W/0/34352e3138302e3139322e302f32322d3332203d3e20323639313436.roa
File:                     34352e3138302e3139322e302f32322d3332203d3e20323639313436.roa (raw, json)
Hash identifier:          sOg9+QSD2GfB3CTy5WJDr31Umyq3mJaCcKkAgheScXI=
Subject key identifier:   B6:96:D9:A5:AD:09:C8:F2:BD:84:E5:72:D2:A9:3E:A0:38:BA:3D:B1
Certificate issuer:       /CN=785B25DA582EB1CEA87E1BCAA22C06CEFE25F25C
Certificate serial:       7FA1BB69FB01F737A93F94A822241CDE947D9B58
Authority key identifier: 78:5B:25:DA:58:2E:B1:CE:A8:7E:1B:CA:A2:2C:06:CE:FE:25:F2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785B25DA582EB1CEA87E1BCAA22C06CEFE25F25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpB5xHC61vLncE6AP4djcYh21LR6YwwqwMF2Yam4F27W/0/34352e3138302e3139322e302f32322d3332203d3e20323639313436.roa
Signing time:             Tue 17 Dec 2024 18:48:14 +0000
ROA not before:           Tue 17 Dec 2024 18:43:14 +0000
ROA not after:            Tue 16 Dec 2025 18:48:14 +0000
asID:                     269146
IP address blocks:        45.180.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FpB5xHC61vLncE6AP4djcYh21LR6YwwqwMF2Yam4F27W/0/785B25DA582EB1CEA87E1BCAA22C06CEFE25F25C.crl
                          rsync://rpki-repo.registro.br/repo/FpB5xHC61vLncE6AP4djcYh21LR6YwwqwMF2Yam4F27W/0/785B25DA582EB1CEA87E1BCAA22C06CEFE25F25C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785B25DA582EB1CEA87E1BCAA22C06CEFE25F25C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a1:bb:69:fb:01:f7:37:a9:3f:94:a8:22:24:1c:de:94:7d:9b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785B25DA582EB1CEA87E1BCAA22C06CEFE25F25C
        Validity
            Not Before: Dec 17 18:43:14 2024 GMT
            Not After : Dec 16 18:48:14 2025 GMT
        Subject: CN=B696D9A5AD09C8F2BD84E572D2A93EA038BA3DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:e3:2d:ac:0c:7e:c5:31:a3:88:80:ed:b1:
                    de:c0:aa:ac:3d:a3:52:e2:7e:b3:58:d1:91:c1:f3:
                    c8:18:aa:cf:4e:02:89:b3:28:a7:32:2a:04:16:d1:
                    16:19:2d:02:b1:42:f8:9e:a7:15:d0:f1:a8:b1:e8:
                    db:f9:cf:a1:41:66:80:f0:92:c6:60:a5:09:fb:40:
                    77:53:93:64:df:3a:85:f5:76:fd:2e:e1:c3:c8:a5:
                    fd:af:cb:17:b8:0c:c4:8b:6b:94:18:8f:af:ce:4a:
                    8d:c6:75:7c:c9:5a:ca:34:92:ed:7a:f0:78:ab:1b:
                    6c:b0:7f:7d:a7:ff:f2:49:85:05:a3:a0:2c:e6:a7:
                    6a:c8:d3:85:51:36:c7:ca:33:a4:10:21:f1:c7:b7:
                    2f:89:71:93:98:62:79:73:01:ae:27:5c:dc:67:07:
                    a6:31:e1:c4:53:58:8c:ed:7a:d4:27:6d:86:60:f6:
                    53:44:6f:c0:77:6e:0d:33:86:b0:37:a2:5a:6b:a9:
                    15:af:62:b0:bf:7e:17:68:eb:a2:6a:db:57:a7:cb:
                    39:5e:b0:2c:51:ed:d7:8a:a7:c8:da:c4:2d:23:e8:
                    62:f4:b2:99:2d:83:b9:56:f3:d1:89:15:aa:5b:2f:
                    53:18:c9:32:6c:af:d0:52:42:23:b2:19:aa:40:fc:
                    d2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:96:D9:A5:AD:09:C8:F2:BD:84:E5:72:D2:A9:3E:A0:38:BA:3D:B1
            X509v3 Authority Key Identifier:
                keyid:78:5B:25:DA:58:2E:B1:CE:A8:7E:1B:CA:A2:2C:06:CE:FE:25:F2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpB5xHC61vLncE6AP4djcYh21LR6YwwqwMF2Yam4F27W/0/785B25DA582EB1CEA87E1BCAA22C06CEFE25F25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785B25DA582EB1CEA87E1BCAA22C06CEFE25F25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpB5xHC61vLncE6AP4djcYh21LR6YwwqwMF2Yam4F27W/0/34352e3138302e3139322e302f32322d3332203d3e20323639313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:62:1a:06:8f:a9:9f:82:15:e9:14:5a:1b:0c:2a:e6:17:1b:
         5f:2a:79:b1:fc:25:b3:93:ea:a6:2a:18:db:d5:f6:5e:9c:59:
         44:81:eb:1b:70:1b:25:bf:03:d2:b3:50:85:3a:84:55:21:67:
         9a:1f:c7:9e:a9:d2:10:a2:88:43:1d:81:b8:38:cf:a6:e6:ed:
         c0:b9:6b:3f:b7:c4:fd:22:a2:64:f1:0b:7d:27:8a:12:38:5a:
         52:ba:e2:7f:4a:9c:c1:7f:bf:a9:e4:4e:a4:96:63:30:57:ec:
         9d:85:45:34:40:fb:22:d5:13:98:5b:10:f8:aa:b1:3b:9e:cf:
         84:6c:92:b4:55:04:e2:3a:a0:1d:05:16:09:d4:07:97:43:f5:
         19:87:fc:f9:05:b7:73:7f:aa:07:fa:00:d1:50:e1:46:1e:85:
         d8:db:27:e3:4e:16:61:59:42:f3:a3:0a:e5:17:7a:f4:34:eb:
         86:b4:85:8e:48:cb:0e:03:3e:ca:c0:88:b6:08:9d:b8:58:0d:
         a9:3d:3c:c4:2e:bb:01:2b:e5:44:12:5b:00:3b:3b:3b:be:0b:
         6e:f6:a1:9c:34:64:1a:f8:cc:93:71:43:8f:2f:ab:a4:e9:40:
         f3:69:de:a1:dd:8e:70:22:a4:78:3a:9b:99:7d:f7:18:b7:70:
         e4:d3:80:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:05:53 2025 by rpki-client