Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3234203d3e20323637333531.roa
File:                     34352e3233342e342e302f32322d3234203d3e20323637333531.roa (raw, json)
Hash identifier:          MmIKzA6m047/armRL9ZfWYAvEHhVBrO2jD/XJtwmo5s=
Subject key identifier:   7D:3C:4F:2E:81:ED:F8:85:60:EE:26:9B:13:89:E2:D6:A3:DB:A6:B0
Certificate issuer:       /CN=F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5
Certificate serial:       7C6BE0D1610C76E594396AF51A048308D10E70C8
Authority key identifier: F7:03:FB:4F:49:BC:7E:A3:94:CC:49:55:D3:BB:D7:B5:B4:0F:AA:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3234203d3e20323637333531.roa
Signing time:             Wed 12 Feb 2025 00:59:16 +0000
ROA not before:           Wed 12 Feb 2025 00:54:16 +0000
ROA not after:            Wed 11 Feb 2026 00:59:16 +0000
asID:                     267351
IP address blocks:        45.234.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.crl
                          rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 14:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6b:e0:d1:61:0c:76:e5:94:39:6a:f5:1a:04:83:08:d1:0e:70:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5
        Validity
            Not Before: Feb 12 00:54:16 2025 GMT
            Not After : Feb 11 00:59:16 2026 GMT
        Subject: CN=7D3C4F2E81EDF88560EE269B1389E2D6A3DBA6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c5:24:2b:e6:5e:c6:3d:36:89:c3:91:a9:fb:
                    cc:a2:f5:2b:d6:25:0d:d6:18:9e:7c:a7:ea:81:f3:
                    f3:ee:f9:e6:b7:5b:43:b6:44:ea:af:bb:dd:65:bc:
                    a1:d9:47:bb:4d:07:7a:bd:19:e8:f1:e6:80:00:3f:
                    e4:70:e8:9a:52:e9:84:61:aa:53:48:d9:2c:8b:39:
                    33:e9:9c:41:9a:72:8d:d3:b9:bd:8f:41:fb:97:f2:
                    82:ec:40:ce:14:73:1f:e2:a2:67:98:8b:61:77:d6:
                    ed:07:ce:49:b9:bf:df:54:a8:3a:99:ed:9c:6e:f8:
                    2f:49:4d:b5:18:b0:7d:d4:72:9b:1b:b1:d5:46:12:
                    58:19:08:31:5f:ee:b2:ee:d3:17:15:81:70:0c:55:
                    87:cb:5a:02:6d:3f:ae:a3:f9:b5:f9:6f:0c:fd:43:
                    03:1a:5b:b0:13:a0:e9:e2:37:a6:62:a6:ff:eb:4c:
                    42:07:84:e0:1a:37:7b:f3:38:c2:96:4d:8d:4a:26:
                    12:4a:d6:43:5d:55:e9:3a:8c:3f:42:aa:a9:58:36:
                    4f:5e:2f:0c:21:00:1a:f2:8a:5f:73:b2:8b:4e:a6:
                    55:79:b9:02:f9:0f:9a:00:6a:37:05:7d:4a:ca:38:
                    c8:6c:aa:0d:d3:49:17:9e:93:5d:3d:01:1e:3a:a9:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3C:4F:2E:81:ED:F8:85:60:EE:26:9B:13:89:E2:D6:A3:DB:A6:B0
            X509v3 Authority Key Identifier:
                keyid:F7:03:FB:4F:49:BC:7E:A3:94:CC:49:55:D3:BB:D7:B5:B4:0F:AA:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3234203d3e20323637333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:83:14:bb:4d:0e:f2:39:97:d8:9d:9d:9c:da:da:77:b2:ce:
         d8:82:9a:23:e9:ac:58:d0:7c:48:58:f1:ea:6b:22:1c:72:0f:
         12:c9:b0:2b:08:4f:bf:71:c9:e7:b9:87:e2:93:9b:80:e9:e6:
         18:b6:08:8f:a8:1d:43:6b:dc:0d:8b:22:6f:57:10:b9:a6:16:
         d5:d9:6a:39:01:07:ef:e2:e0:77:d9:83:1f:d0:6b:6f:6c:8d:
         e2:a0:44:b0:18:9c:96:5e:ed:c2:ca:8c:f1:2a:b0:e4:28:e4:
         7d:2f:7c:2a:6e:cd:97:50:2d:79:1f:cc:d9:00:fb:33:17:78:
         03:2e:c2:ca:b5:3c:e7:2f:a9:5b:16:f1:a1:dc:3f:6a:c7:63:
         d3:30:8d:4e:e5:45:10:a4:bf:bd:49:7f:81:f1:27:b4:69:6e:
         6c:80:ec:78:9b:fc:6c:4c:f0:29:8f:d1:dd:5e:b3:49:7a:c0:
         75:e5:00:eb:d9:ea:35:36:50:2b:a9:dc:cc:ef:5c:28:f9:52:
         e4:a1:2e:67:1d:bb:3b:48:40:89:6e:fe:d6:f1:ab:33:f1:14:
         d7:19:65:0a:e5:58:70:54:25:6c:13:73:c4:9b:b4:30:2f:64:
         7a:d0:63:a7:a5:3e:84:37:1e:03:9c:21:20:f4:3b:d2:ce:c5:
         0b:a9:12:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:35 2025 by rpki-client