Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/34352e3138322e3134382e302f32322d3234203d3e20323733343134.roa
File:                     34352e3138322e3134382e302f32322d3234203d3e20323733343134.roa (raw, json)
Hash identifier:          dbbmdVzbgg93YC+/yC7kPmE+pyR0GJJ9WJLl+Jcl/IY=
Subject key identifier:   62:94:A2:9A:47:68:70:19:1F:96:38:74:23:5D:89:B7:B0:FD:FD:09
Certificate issuer:       /CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F
Certificate serial:       4A823E3E658DCC01822AF1C4565DAAAD317A4D48
Authority key identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/34352e3138322e3134382e302f32322d3234203d3e20323733343134.roa
Signing time:             Mon 12 May 2025 17:42:59 +0000
ROA not before:           Mon 12 May 2025 17:37:59 +0000
ROA not after:            Mon 11 May 2026 17:42:59 +0000
asID:                     273414
IP address blocks:        45.182.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl
                          rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 20:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:82:3e:3e:65:8d:cc:01:82:2a:f1:c4:56:5d:aa:ad:31:7a:4d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F
        Validity
            Not Before: May 12 17:37:59 2025 GMT
            Not After : May 11 17:42:59 2026 GMT
        Subject: CN=6294A29A476870191F963874235D89B7B0FDFD09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:16:84:3d:d8:a8:12:ef:62:66:20:51:c6:
                    66:7c:87:8e:e9:ff:19:f7:e2:17:ab:87:9f:f2:e6:
                    67:6b:61:89:e4:e9:a4:0a:76:07:74:83:65:51:54:
                    b9:e3:bd:ef:5e:ef:cb:d9:f1:da:74:62:f4:a2:4f:
                    d7:2b:ac:39:56:c3:72:28:83:f6:a0:7b:e9:36:d6:
                    90:97:2e:b8:a8:f6:6c:be:28:29:4e:48:39:69:36:
                    c8:d0:56:87:f4:06:6f:07:7e:af:9a:df:86:47:68:
                    34:a6:d2:d8:21:66:db:f9:9f:53:7a:f2:e2:31:71:
                    38:27:ac:4b:20:c1:9f:2a:19:7c:39:6e:d7:f4:58:
                    a6:13:2f:e0:ab:6a:8f:44:ef:27:ec:63:cb:f4:ff:
                    6d:b2:67:94:bd:db:c1:98:6e:60:7e:ac:cd:06:f4:
                    ca:37:a4:bc:2e:5c:9b:7d:34:08:9d:12:90:7f:8d:
                    31:a3:97:d5:29:39:23:0b:35:a2:90:c1:7f:a8:88:
                    d6:e9:4e:5f:49:b0:df:67:c8:bd:f7:38:56:48:0c:
                    3d:15:7a:67:6c:41:43:a1:32:83:7e:6d:fb:90:af:
                    6b:15:79:33:b3:b5:aa:81:9b:21:2e:95:5e:10:8b:
                    0b:48:44:29:23:5f:d0:92:99:51:8a:45:bd:a4:b6:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:94:A2:9A:47:68:70:19:1F:96:38:74:23:5D:89:B7:B0:FD:FD:09
            X509v3 Authority Key Identifier:
                keyid:1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/34352e3138322e3134382e302f32322d3234203d3e20323733343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:c3:d4:69:01:23:54:a8:f4:b2:7e:3f:cd:24:bd:8c:d1:21:
         c0:16:d6:5b:ec:43:1d:d5:ce:f3:7b:bf:44:6a:ed:32:d0:3c:
         00:76:19:b0:80:11:28:f6:76:43:71:4c:b2:9b:d3:53:3a:6f:
         ae:8c:a3:ce:df:a6:7f:4d:25:d3:3c:3d:83:6b:e8:dd:2d:6f:
         7e:7a:53:be:53:9d:b6:de:f0:8c:90:0c:08:8d:75:04:a3:0f:
         b7:f0:bb:3f:11:e9:18:81:27:62:57:1e:e3:78:85:09:e3:af:
         a4:7e:0a:2a:00:ed:d1:20:db:63:a2:77:b6:12:a1:1b:8e:75:
         ef:35:ba:23:63:86:47:26:30:0e:0c:41:b3:97:c8:09:84:b9:
         3c:d5:b3:3e:62:30:0a:89:15:42:ba:96:bf:f7:06:7c:6a:ed:
         97:23:0c:91:15:ee:d0:7f:b1:7c:ad:80:90:e8:8a:7d:03:9b:
         ef:04:75:18:5f:10:03:5a:bd:e1:65:e3:82:78:6d:b0:0a:ef:
         1c:6d:02:74:2b:7d:10:3f:03:7a:16:97:98:44:99:7b:07:e0:
         13:b2:70:7b:27:9b:76:a2:70:db:12:28:38:d9:64:1c:25:d9:
         2c:6d:a5:23:ba:55:26:43:3b:b2:2e:7a:f6:82:29:be:68:1c:
         6f:1b:86:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:37:16 2025 by rpki-client