Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/34352e3136302e37362e302f32332d3332203d3e20323638343431.roa
File:                     34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (raw, json)
Hash identifier:          op6z5zv5bXYx/GC1V945At+HHF1/DnboG7Nwmgwomqc=
Subject key identifier:   84:30:01:A9:AC:C1:20:86:B2:39:DE:B3:A3:40:C3:8C:A4:18:75:56
Certificate issuer:       /CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3
Certificate serial:       6D602523F1BF174BA5BC83047C5093C3280A8AF0
Authority key identifier: 2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/34352e3136302e37362e302f32332d3332203d3e20323638343431.roa
Signing time:             Tue 14 Jan 2025 10:56:02 +0000
ROA not before:           Tue 14 Jan 2025 10:51:02 +0000
ROA not after:            Tue 13 Jan 2026 10:56:02 +0000
asID:                     268441
IP address blocks:        45.160.76.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl
                          rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:60:25:23:f1:bf:17:4b:a5:bc:83:04:7c:50:93:c3:28:0a:8a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3
        Validity
            Not Before: Jan 14 10:51:02 2025 GMT
            Not After : Jan 13 10:56:02 2026 GMT
        Subject: CN=843001A9ACC12086B239DEB3A340C38CA4187556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:eb:fa:70:08:35:c2:1f:0c:99:8c:15:52:62:
                    b7:f3:94:98:7c:63:fe:33:b4:e9:d1:0a:b7:7e:ed:
                    8f:0a:3d:46:a6:86:52:f3:ce:e2:92:a4:3c:39:a5:
                    4c:1b:8f:71:32:65:ba:6d:2b:83:be:09:cc:ac:cb:
                    b9:d9:67:e5:be:08:40:be:81:85:82:c0:a7:33:63:
                    de:80:57:07:02:84:d3:1f:91:d9:04:06:a9:8f:3d:
                    6c:c7:0c:0b:e4:a8:1c:47:68:b6:04:e5:7c:cd:89:
                    d4:cd:96:7f:40:08:d8:e6:92:33:f8:cb:07:b4:f2:
                    98:de:3f:de:70:b8:a0:26:78:3e:84:27:6b:b4:0a:
                    55:2a:fa:ff:0d:e2:61:eb:dc:2c:43:38:4c:c1:c9:
                    52:f1:d6:d5:39:b7:ff:7c:90:83:79:5b:bc:0d:d6:
                    fd:33:bd:ca:16:5c:ea:6d:90:8a:27:0e:66:d6:d9:
                    1d:2c:e7:92:0f:d0:a4:59:2c:53:6e:bf:ba:48:6a:
                    67:06:19:55:18:cd:ef:ff:53:75:5b:06:a6:8f:08:
                    4b:84:cf:62:67:33:ae:c6:39:29:ef:87:50:16:9b:
                    65:74:40:f2:1b:f7:43:1c:5d:a4:ae:74:1f:2e:bb:
                    4c:aa:2a:8d:06:dd:fd:8b:55:e9:bb:d6:6b:cf:2b:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:30:01:A9:AC:C1:20:86:B2:39:DE:B3:A3:40:C3:8C:A4:18:75:56
            X509v3 Authority Key Identifier:
                keyid:2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/34352e3136302e37362e302f32332d3332203d3e20323638343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:96:25:36:c5:00:d3:b5:d4:2f:5c:17:41:f6:1f:7f:9f:ae:
         39:47:37:8e:90:8e:03:56:60:97:bf:41:63:13:76:3a:e1:48:
         35:14:d4:5b:55:12:4a:5b:6e:48:0b:89:20:ae:30:f8:0c:5d:
         6e:ce:4d:ec:dc:6f:9c:c5:cd:45:41:84:4e:d3:40:b7:1e:0e:
         ec:b0:eb:f4:97:61:f6:1b:60:d8:5f:bc:97:f7:70:c2:c6:49:
         8e:ea:9e:22:4a:e5:83:26:cb:c9:60:81:35:d0:52:89:5a:fb:
         9a:f4:c8:38:ef:b0:ea:6b:c4:dd:37:4e:bd:43:7e:af:3b:37:
         bb:d3:20:43:af:cb:2b:e7:b2:32:eb:98:aa:cb:69:17:01:1b:
         16:61:95:f8:b0:fe:01:6a:d3:e6:e3:58:89:38:bd:51:db:f1:
         63:28:e3:65:60:63:b9:33:ee:f7:29:6d:8b:1c:19:3f:b1:2f:
         a6:3d:a1:28:e6:46:38:67:c4:66:24:4a:6b:0c:9f:f8:58:4e:
         4f:ba:91:61:e5:60:ea:a1:ca:a2:e4:35:89:9b:5f:32:49:b6:
         e1:28:a4:46:d9:6e:af:1a:c7:e6:db:d0:92:96:c1:26:47:ab:
         9c:20:20:9c:97:c0:93:74:eb:c2:9d:cb:d0:29:64:65:fe:c3:
         c6:c4:5e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:15:19 2025 by rpki-client