Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32342d3234203d3e20323637393633.roa
File:                     34352e3136362e3135302e302f32342d3234203d3e20323637393633.roa (raw, json)
Hash identifier:          796NGasmdyoaTz+AmNBLbOjyl32uijTfotNPrv/Xqz0=
Subject key identifier:   8C:5E:72:20:2D:E3:42:68:00:74:DF:FF:BE:9D:C5:C7:04:24:A8:8A
Certificate issuer:       /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial:       64C5C1CD02C13B4095716191A69A82F5E53F5026
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32342d3234203d3e20323637393633.roa
Signing time:             Mon 03 Feb 2025 13:05:19 +0000
ROA not before:           Mon 03 Feb 2025 13:00:19 +0000
ROA not after:            Mon 02 Feb 2026 13:05:19 +0000
asID:                     267963
IP address blocks:        45.166.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl
                          rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c5:c1:cd:02:c1:3b:40:95:71:61:91:a6:9a:82:f5:e5:3f:50:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
        Validity
            Not Before: Feb  3 13:00:19 2025 GMT
            Not After : Feb  2 13:05:19 2026 GMT
        Subject: CN=8C5E72202DE342680074DFFFBE9DC5C70424A88A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ab:ab:2b:01:2f:3f:0d:d9:a3:4d:5b:25:ef:
                    ba:be:cd:44:98:7a:ad:f0:d0:f3:0c:e3:d1:e5:6b:
                    6a:20:84:41:a8:2d:68:85:a1:c7:df:e6:ad:bc:02:
                    8f:d2:7d:92:d3:bf:b2:ba:99:a0:e4:0c:f3:32:f5:
                    a3:70:35:cf:0d:26:73:ef:d1:43:28:93:76:68:dc:
                    0b:ab:4c:6f:8d:c6:86:cb:14:f9:f8:a7:33:a4:ea:
                    e2:1b:17:e0:c4:d7:c9:dc:c3:50:2e:11:79:f3:68:
                    dc:95:ca:6d:2e:cc:13:5c:6b:6f:25:50:60:95:6a:
                    d0:3b:f9:41:cb:a9:71:39:fc:e1:a9:23:56:73:ce:
                    4e:5f:53:66:27:36:93:24:49:71:8b:6e:b7:cd:35:
                    33:91:92:ea:1d:fe:de:18:b6:f8:92:1d:77:b4:c4:
                    a5:7c:bd:a6:f9:45:34:16:c2:6e:54:11:b7:8b:e5:
                    c5:71:92:5f:47:53:5c:7f:60:b2:32:03:9c:e1:2f:
                    22:b4:60:04:67:38:58:29:f5:87:60:da:20:43:8e:
                    4b:a2:4d:4a:c8:42:2d:7a:08:08:49:ad:63:e0:39:
                    36:30:e5:91:67:c0:86:c6:47:cd:85:77:a1:67:3b:
                    2b:a8:d6:69:a4:cf:c6:a2:bc:9a:39:2b:01:39:26:
                    b8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5E:72:20:2D:E3:42:68:00:74:DF:FF:BE:9D:C5:C7:04:24:A8:8A
            X509v3 Authority Key Identifier:
                keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32342d3234203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:fc:ef:0c:ea:58:ae:dd:a7:44:4c:cf:d2:f2:ba:d8:dc:5c:
         b9:67:af:a8:fe:83:52:d3:c1:bf:9c:0b:3f:8c:1e:8c:8a:63:
         85:be:f1:e0:9a:69:82:f0:ea:f4:00:e4:df:65:7e:ff:97:02:
         13:fa:5b:63:09:58:fa:2c:be:e8:99:4b:d7:36:d7:e0:ab:e3:
         9d:f0:f2:c9:ea:22:e6:eb:51:ab:5b:c9:57:1d:2c:71:ae:59:
         e0:bf:03:d1:81:58:15:21:4d:38:a0:8d:d7:fb:d0:8f:22:70:
         71:66:d7:21:9c:84:a5:fe:51:fc:99:fe:8f:2b:0f:ef:12:48:
         a3:88:1a:a3:c5:b1:65:8d:2a:9e:4e:6d:5c:84:81:f7:da:3b:
         f6:4a:0f:e2:02:cc:eb:8c:b9:07:b3:bf:ea:51:5b:9b:cd:91:
         4c:71:e0:68:1a:1f:52:88:dd:c4:4b:09:e2:da:48:e1:26:c4:
         f8:82:43:65:dc:54:9c:e6:d3:45:97:55:30:eb:e9:03:50:53:
         41:74:0c:c6:f2:7e:8d:59:f1:c2:a9:8e:a4:6c:2a:c7:cb:a7:
         f9:57:d7:99:11:a9:ff:92:11:94:2a:74:37:37:24:42:3b:01:
         99:12:77:37:cd:05:2d:77:5c:c2:60:29:c6:58:95:a3:d8:2b:
         52:6a:44:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:25:33 2025 by rpki-client