Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135312e302f32342d3234203d3e20323637393633.roa
File:                     34352e3136362e3135312e302f32342d3234203d3e20323637393633.roa (raw, json)
Hash identifier:          hGIPpVbknjzD84sg1f+dZvfRlA7AlVB/2ldudSJFPec=
Subject key identifier:   D4:D2:89:D2:31:29:55:2A:DA:8D:EA:B1:10:1A:72:D5:7A:E2:90:52
Certificate issuer:       /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial:       46635D085FEE81BFE72FA94C290EAF0D996D067A
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135312e302f32342d3234203d3e20323637393633.roa
Signing time:             Mon 03 Feb 2025 13:05:20 +0000
ROA not before:           Mon 03 Feb 2025 13:00:20 +0000
ROA not after:            Mon 02 Feb 2026 13:05:20 +0000
asID:                     267963
IP address blocks:        45.166.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl
                          rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 06:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:63:5d:08:5f:ee:81:bf:e7:2f:a9:4c:29:0e:af:0d:99:6d:06:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
        Validity
            Not Before: Feb  3 13:00:20 2025 GMT
            Not After : Feb  2 13:05:20 2026 GMT
        Subject: CN=D4D289D23129552ADA8DEAB1101A72D57AE29052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:a4:32:75:37:fe:7f:74:cf:5b:88:8d:28:
                    4d:ec:f4:98:3a:18:96:ba:da:96:d5:ba:83:59:ff:
                    bb:d8:a3:72:1c:c1:8b:47:2b:17:8f:5b:cb:03:4c:
                    5c:55:85:7e:dd:a0:ec:ad:2f:42:56:1c:c5:78:7e:
                    ad:12:86:d9:f1:32:ef:33:32:0e:76:79:bb:3e:b4:
                    1b:9b:e9:02:4e:2f:1b:78:d0:35:7c:60:05:93:9c:
                    b4:45:a4:da:6c:f0:28:07:ef:a4:97:48:d3:6a:6c:
                    41:c3:e4:b8:6d:44:dc:11:12:ea:c7:46:4b:1b:a2:
                    ad:80:bf:f6:54:30:09:03:43:38:da:8e:eb:4d:85:
                    b6:cf:bf:e8:d0:11:37:3d:33:9a:7c:19:14:59:e5:
                    36:64:1b:4c:fa:d1:82:80:da:b2:28:3f:71:3b:6d:
                    46:b6:a0:e6:28:ea:21:29:93:50:f1:b2:1a:d2:86:
                    4e:e6:54:8a:a5:21:de:70:12:8e:ee:e7:dc:e8:f7:
                    67:30:99:eb:b3:6b:a0:5c:b1:24:53:54:83:99:06:
                    91:9b:1e:a4:f2:39:30:aa:e1:ae:7f:df:5d:5d:a7:
                    44:97:5a:8f:f5:f0:55:15:32:f1:3c:37:1f:c6:11:
                    f1:f1:f6:cd:6c:82:45:5b:ac:0f:0d:35:3f:9f:3f:
                    13:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D2:89:D2:31:29:55:2A:DA:8D:EA:B1:10:1A:72:D5:7A:E2:90:52
            X509v3 Authority Key Identifier:
                keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135312e302f32342d3234203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:6c:a0:7f:9d:9f:5a:3a:fd:c1:6e:a2:61:af:d9:07:9a:
         08:37:ef:7a:3d:34:83:9c:77:b7:b6:05:38:b0:25:fe:6c:f2:
         45:98:60:7e:50:7f:07:f8:1b:75:7e:a4:5c:9f:f2:f1:38:01:
         68:4a:94:6e:e5:9d:16:10:bd:a9:a6:7e:bf:84:02:80:e1:69:
         4e:d7:7c:da:dc:0b:96:e0:d0:a8:0c:ef:6b:03:aa:f6:56:7f:
         6c:a7:d9:fb:e8:20:6f:98:eb:19:2e:19:82:24:de:fd:44:41:
         63:f3:79:85:df:3f:eb:38:8d:9a:70:90:bc:42:76:e2:3d:c1:
         58:a4:ed:92:4a:29:b6:57:11:1f:32:b9:42:53:f8:3f:33:0c:
         24:1c:c4:7b:b0:59:cc:7f:12:1f:36:fd:5a:3d:04:e7:f2:1e:
         89:28:36:9d:11:47:0b:b3:07:c2:21:89:09:b9:68:b3:62:7e:
         5e:6e:83:55:e3:c7:0b:9e:f9:7b:ba:8d:25:61:09:5b:f6:f1:
         e7:47:9c:84:27:a5:1a:03:12:75:1e:6e:fb:02:51:5e:8d:eb:
         8f:3a:a9:50:be:15:cd:14:b4:5e:95:89:2a:de:a5:84:39:58:
         62:e3:2f:10:8c:41:02:52:eb:eb:38:4c:15:52:7f:e5:25:d4:
         17:d7:41:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:13:22 2025 by rpki-client