Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/34352e3137372e38342e302f32322d3332203d3e20323639303333.roa
File:                     34352e3137372e38342e302f32322d3332203d3e20323639303333.roa (raw, json)
Hash identifier:          LdLLNwu0IpswvsTsM5XrvlIWBpA7/x29azGkeS+4Ews=
Subject key identifier:   B8:C6:27:C2:9F:11:A7:30:DC:08:77:62:EE:CA:D9:4F:89:9B:AE:5F
Certificate issuer:       /CN=996BFE16B00A8EF9DDE555A91330A0BC74A38162
Certificate serial:       6F4DBA978F875B2F23E579EE804F63DDFF45EDF7
Authority key identifier: 99:6B:FE:16:B0:0A:8E:F9:DD:E5:55:A9:13:30:A0:BC:74:A3:81:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/34352e3137372e38342e302f32322d3332203d3e20323639303333.roa
Signing time:             Thu 06 Mar 2025 03:14:29 +0000
ROA not before:           Thu 06 Mar 2025 03:09:29 +0000
ROA not after:            Thu 05 Mar 2026 03:14:29 +0000
asID:                     269033
IP address blocks:        45.177.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.crl
                          rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 18:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4d:ba:97:8f:87:5b:2f:23:e5:79:ee:80:4f:63:dd:ff:45:ed:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996BFE16B00A8EF9DDE555A91330A0BC74A38162
        Validity
            Not Before: Mar  6 03:09:29 2025 GMT
            Not After : Mar  5 03:14:29 2026 GMT
        Subject: CN=B8C627C29F11A730DC087762EECAD94F899BAE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:f8:58:e3:59:db:55:b0:4a:4f:a0:34:f2:
                    61:f5:9b:e8:e7:c0:db:9a:47:03:2f:1a:5a:40:83:
                    1e:0a:df:51:91:7f:1c:20:af:77:90:82:66:41:d6:
                    c3:55:e5:e1:be:45:9e:be:c5:69:71:ce:c2:52:42:
                    9e:cc:da:ac:46:16:b7:6d:0e:01:3f:38:3a:f3:00:
                    38:3b:3d:99:74:cb:d9:94:29:32:1d:4b:0d:7b:c8:
                    af:20:b8:3a:f8:93:af:81:01:24:3e:af:c4:eb:de:
                    b8:9b:1d:d5:01:13:35:e3:72:d1:c1:bc:a8:84:2c:
                    d2:86:65:95:d4:d1:95:9a:93:a5:8e:0f:d8:33:94:
                    08:89:c5:75:4c:b3:5a:1e:ac:eb:21:9e:61:83:c3:
                    f7:3d:76:93:37:4f:50:26:7d:0a:ed:cb:b7:de:d1:
                    c9:b5:9e:9d:72:41:a8:9e:7a:a5:02:79:bf:bc:f0:
                    17:bc:2d:0d:cb:8f:fc:5b:e5:5f:db:bf:aa:39:b3:
                    ad:c8:13:1e:a5:6c:d3:ec:b5:a8:58:a7:73:f1:28:
                    ad:0d:8e:ce:60:e2:35:50:1b:27:be:51:e7:07:bb:
                    0a:12:2c:bc:38:88:1a:3d:5a:61:40:fa:ad:54:e6:
                    50:83:81:aa:2d:c6:74:ee:cc:9a:55:54:9a:cb:ae:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C6:27:C2:9F:11:A7:30:DC:08:77:62:EE:CA:D9:4F:89:9B:AE:5F
            X509v3 Authority Key Identifier:
                keyid:99:6B:FE:16:B0:0A:8E:F9:DD:E5:55:A9:13:30:A0:BC:74:A3:81:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/34352e3137372e38342e302f32322d3332203d3e20323639303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:73:c0:29:df:0c:d7:02:40:7c:62:3e:9d:fd:49:1a:c7:4e:
         d0:ff:f3:4c:ef:d3:6e:fe:4b:31:3b:74:b1:cf:a9:f2:7e:b3:
         0d:c4:a8:b2:36:4f:b3:1a:82:0e:23:09:76:18:d1:be:06:f3:
         f2:5f:e8:bb:c4:60:9b:9a:76:dd:fd:47:80:79:d4:c7:f2:92:
         c6:1e:5e:8f:84:6e:fc:19:d4:a8:31:fc:eb:3d:ac:11:94:2f:
         97:d5:25:40:ee:e4:18:e1:fc:ed:df:23:a3:62:bd:27:36:f1:
         00:0a:33:08:d1:aa:57:09:4f:1f:a7:2b:b6:97:6c:90:37:2a:
         f3:f7:da:9f:3c:a2:97:59:73:ac:de:b3:90:8a:de:bf:ec:81:
         a2:b1:49:a9:eb:a0:d0:b3:28:67:ae:bd:1f:4a:8b:ea:c0:9f:
         b9:e9:cb:a8:7c:f1:b7:20:5b:00:a1:87:d9:24:43:28:0f:05:
         b0:5f:07:59:67:7d:0d:92:15:49:e3:ba:f5:63:6e:dc:0a:9a:
         d0:df:0a:1e:20:ec:82:3c:e4:e9:b0:09:78:b5:bf:c3:de:15:
         ad:2b:0a:af:02:db:61:14:89:e3:9f:69:dc:b8:64:01:87:06:
         e3:ef:13:cf:8c:1a:2f:50:24:13:54:d3:24:ea:2e:b2:d0:fb:
         a1:fd:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:38:41 2025 by rpki-client